last executing test programs: 3m18.212558289s ago: executing program 2 (id=266): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800400700ce00650000ec1190780a010102e000000194040100831b6064010101e000002e515e3dd4d2fd0102ac1414167f0000010a010101e000000294040000070b97e0000002ac1414aa004412a0f1ea960dc9dfedcf2a963286981fc0072ba6ac1414aaac1414bbac1e00017f000001ac14141fac1414bbac1414bbffffffffac1e0101ffffffff4e234e21004e90786209000180000000b00f96a4f888fc82e74424c2978f528621aca3611015cc23a72e98c0672455a7752712fd73564f396ed9bc7191dd76a2"], 0x0) accept(r6, 0x0, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040fdc00100d20"], 0x7) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @value=0x5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3m18.093534588s ago: executing program 2 (id=269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305b21940abeffaed1300000000c5e9722974eff34ee5b19d90232a62749eef02ee6ca169ff4f899fd0afa820ac3013949c849a707cd0914570042391bd2697ab07c07adaf575aee0d148e6b7389f7c7baa716a3270b75111c8a9d482a22c8b803f472da9cfd0d55196dc055874a76986962a394b8e839edbbc72e47ca068ef40da3921c17d3c95f0b192e0c3cbff7ccfe51d0cc6edb30b9c5ecb8e8bf9680b277d86d47e24a4afd4881c05934b5ae6da4b9353fc0a9594e3ef7605592640b0fa5f10566eb65cfe8f16b5d28661db221b9ef97500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3m18.002907843s ago: executing program 2 (id=272): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60802, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000240)={{0x2, 0xffffffff, 0x8, 0x724, 0x7f82}, 0x308, [0x8, 0x8, 0x1c000, 0xf, 0x68a, 0x800, 0x1, 0x2, 0x7, 0x3238ec69, 0x90e, 0x6, 0x2, 0x1, 0xe4, 0x8001, 0x7, 0x8, 0x7, 0xc5a, 0xf68, 0xfffffffa, 0x7, 0x10, 0x8, 0x1, 0x5, 0x1, 0x2, 0x4, 0x2, 0x5, 0x3, 0x6, 0x3, 0x0, 0x1, 0x9242, 0x0, 0x5, 0x200, 0x55, 0x8000, 0xb, 0x1, 0x7f, 0xdb1, 0x8, 0x7, 0x2, 0x3, 0x6, 0x8, 0x9, 0x80, 0x10, 0x1, 0x5e976e13, 0x5, 0x6, 0xe, 0x10, 0x3, 0x7, 0x3, 0x2, 0x1800, 0x6, 0x81, 0x1, 0x10000, 0x7, 0xfffffffb, 0x8f0, 0x3, 0x8, 0x7f9, 0x6, 0x9131, 0x9, 0x6, 0x4, 0x101, 0x3, 0x1000, 0x8000, 0x10001, 0x2, 0x0, 0xe7, 0x0, 0x0, 0x80000001, 0x4a1, 0xfffffffa, 0x8, 0x7, 0x8, 0x2, 0x0, 0x9, 0x84, 0x7, 0x0, 0x2, 0x7, 0xf, 0x2f4f, 0x5, 0x0, 0x10, 0x7, 0x180, 0xfffffc00, 0x8, 0x7, 0x2, 0x8, 0xf, 0x1a779f61, 0xfff, 0x0, 0x7, 0x1000, 0x6, 0x1, 0x983d, 0xc0, 0x4cb, 0x9, 0x5, 0x6, 0x2ca38e47, 0x9, 0x0, 0xc0, 0x45, 0xffffe169, 0x3, 0x7, 0x8, 0x2, 0x2, 0x94e, 0x0, 0x4, 0x8001, 0xfe1, 0x64, 0x5f, 0x80000000, 0xfffffffd, 0x7, 0x1c3, 0x8, 0x7, 0x8000, 0x1, 0x40d9c35c, 0x110, 0xb1c, 0xfef, 0x4, 0x81, 0x1, 0x1b89, 0x1, 0xf, 0xfffffff8, 0xa, 0x55b, 0x7fffffff, 0x6, 0x5, 0x800, 0x4, 0xe17, 0xfffffffd, 0x87b, 0x40, 0x6, 0x40, 0x5e, 0x3, 0x7ff, 0x6, 0x4, 0x0, 0x6, 0x1000, 0x8, 0x9, 0x101, 0x4, 0x6, 0x5, 0x9, 0x6, 0xffffffff, 0x7, 0x8, 0x0, 0x1, 0x1ff, 0x6, 0x9, 0x2, 0x10001, 0x8, 0xfffffff4, 0x8, 0x8, 0x0, 0x5, 0x7, 0x9, 0x3, 0x40, 0x1, 0x0, 0x7, 0x10, 0x9, 0x510, 0x8, 0x4fde, 0xeb, 0x6, 0x0, 0xfcf, 0xf2, 0x5daa, 0x8, 0x10, 0x4, 0x2, 0xcd56, 0xfffffffc, 0x8001, 0x45, 0x9f7, 0x8, 0x3, 0x6, 0x4, 0x6, 0xadd, 0x6, 0xfffffffb, 0x3, 0x4, 0x5, 0x4, 0x3, 0x2, 0x0, 0xd, 0x100, 0x3, 0x9, 0x6c, 0x5, 0xe44b, 0x9, 0x4, 0x1000, 0x3, 0x1, 0x2, 0x5, 0x9, 0x3, 0x7fff, 0x0, 0x2, 0x4456, 0x0, 0x4ea00b0c, 0x6, 0x6, 0x8, 0x4, 0x8, 0x0, 0x7ff, 0x6, 0x4, 0x0, 0x8, 0x6, 0x3, 0x1, 0x8, 0x3ff, 0x9, 0x0, 0x1ff, 0x2, 0x8, 0x1, 0x8, 0x2, 0xfffffffb, 0x7, 0x80000001, 0xb, 0x7fff, 0xfffffff7, 0x9, 0xff, 0x400, 0x5, 0xb, 0x1d4, 0xee5, 0x7, 0x1000, 0x9, 0xffffffff, 0xffff4e0c, 0x7, 0x9, 0x4, 0x1, 0x6, 0x8cd5, 0x0, 0x51, 0x7, 0x2, 0x3, 0x4, 0x8, 0x4, 0x81, 0x5, 0x1, 0x81, 0xc, 0x4, 0x3, 0xfffffffd, 0x2, 0x2, 0x2, 0x5, 0xb, 0x5, 0x8, 0x5aa, 0x7, 0x10001, 0x80000001, 0x28c04378, 0x0, 0xcd8, 0x6, 0x8, 0x1, 0x7, 0x0, 0x8001, 0x0, 0xfffffff7, 0x5b, 0x2, 0x100, 0x1, 0x0, 0x1, 0x5, 0x3, 0x9, 0xb332, 0x800, 0x6, 0xd, 0x101, 0x4, 0x7, 0x9, 0x3, 0x3, 0xfffffffc, 0xf, 0x0, 0xc, 0x0, 0x1, 0x8001, 0x6, 0x9, 0x4, 0x400, 0x3, 0x101, 0x200, 0x9d2, 0x2, 0x5, 0x6, 0x101, 0x2, 0x0, 0xffffff43, 0x4, 0x8000, 0x1, 0x1, 0xffff7fff, 0xfc, 0x51, 0x9, 0x9, 0x100, 0x40, 0x9, 0x35, 0x5, 0x6, 0x6, 0x0, 0xfffffff9, 0x6, 0xe, 0x5, 0x4, 0x3, 0x4, 0x2b9, 0x6, 0x200, 0xf4, 0x0, 0x4, 0x800, 0x0, 0x0, 0x9, 0x4, 0x6, 0x4401, 0xffff, 0xa19, 0x3, 0x7, 0x101, 0x2, 0x4, 0xc0000000, 0xb, 0xb, 0x2, 0x7, 0x80, 0x8, 0xa, 0x8, 0x80000001, 0xa, 0x10001, 0x2, 0x40, 0x2, 0x8, 0x3, 0x2, 0x2, 0x8001, 0x2, 0x5, 0x1800, 0x10, 0xfff, 0x7, 0x10000, 0x0, 0x7, 0x777, 0x3, 0x4, 0x4a3419df, 0x3ff, 0x5, 0xa, 0xf3, 0x7, 0x3, 0xfff, 0x1000, 0x5ab5, 0x4, 0x7, 0x4, 0x8bd, 0xfffffeff, 0x40, 0x6, 0x4a, 0x2, 0x1, 0x0, 0x106e, 0xcd, 0x7, 0x10000, 0x7, 0xff, 0x0, 0x2f, 0x3, 0x5bc, 0x888, 0xfffffffc, 0x6, 0xb25, 0x7cb, 0x80000001, 0xfffffdf6, 0x9, 0x9, 0xb9, 0x2, 0x2, 0x1, 0x7ff, 0x0, 0x1, 0x10001, 0x7, 0xaa, 0x7, 0x1, 0x3, 0xd05, 0x3, 0x81, 0x5, 0x29, 0x9, 0x8, 0x7fffffff, 0x400, 0x7, 0xa053, 0x2, 0x3, 0x7fff, 0x4, 0x35354158, 0x2, 0xd64, 0x6, 0xe, 0x9, 0x9, 0x96, 0x100, 0x4a46, 0x7fffffff, 0xfff, 0x52a, 0x10, 0x1, 0x8, 0x5, 0x55, 0xfffffff7, 0x7, 0x2ff1, 0x1, 0x1000, 0x7, 0x5, 0x8, 0x0, 0x9, 0x3, 0x3, 0x6, 0x10001, 0x80000001, 0xdd5, 0x10, 0x7, 0x9, 0x8001, 0x1, 0x3, 0x5, 0x5, 0x3, 0xc, 0x1, 0x51, 0x5, 0x4d, 0x0, 0x8d07, 0x3, 0x80, 0x7fff, 0x3, 0x401, 0x0, 0xca3, 0x7fff, 0x2, 0x2539, 0xc, 0x9, 0x3, 0xfffffffd, 0x20000, 0x7, 0x5, 0x2, 0x5, 0x100, 0x8, 0x9, 0x8, 0x1, 0x0, 0x2, 0xf1, 0xfffffffc, 0x1, 0xb31, 0x7, 0x3ff, 0x7, 0x5, 0x9, 0x7e77, 0xaeab, 0x0, 0x1, 0xe, 0x100, 0x9, 0x6, 0x2, 0x48ed3df7, 0xffff, 0x2, 0x1, 0x14b, 0x4, 0x6, 0x7, 0x4, 0x7, 0x401, 0x0, 0x1, 0xfffffff6, 0x7, 0x4, 0x8, 0x0, 0x3, 0xfffffff4, 0xe1, 0x9b, 0x8, 0x6, 0x652, 0x7, 0x4, 0x3, 0x2, 0x9, 0x475, 0x9, 0x10001, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x8, 0x1, 0x80000000, 0x9, 0x200, 0x3, 0x7, 0xfffffffc, 0x6, 0x3, 0x80000000, 0x4, 0x5, 0x2, 0x1, 0x8, 0x0, 0x800, 0x101, 0x9, 0x9, 0x1, 0x53, 0x6, 0x2, 0x6, 0x2, 0x7, 0x8000, 0x0, 0x10040, 0x0, 0x4, 0x8000, 0x80000001, 0x5, 0x4, 0x51f, 0xc42, 0x6, 0x0, 0x9, 0xf639, 0x3, 0xb0, 0x7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x54b, 0xaeb, 0x1, 0x9, 0x9, 0x3, 0x3ff, 0xffff, 0xfffffffb, 0xfffffffc, 0x0, 0xfffffff3, 0x6341, 0xd, 0x9, 0x7fffffff, 0x8, 0x56dbc12e, 0x224d, 0x7, 0x1, 0xce1, 0x0, 0xfffffffd, 0xfffffff5, 0x400, 0x86, 0x4, 0x9, 0xf00, 0x8, 0x2, 0x1, 0x5, 0x171, 0x0, 0x2, 0x2, 0x9771, 0x7e69, 0x3ff, 0x0, 0x80000001, 0xbdd, 0x2, 0x73, 0x7, 0x7, 0x5, 0x2, 0x2, 0x4, 0x1, 0x1946df87, 0x80000000, 0xffffffff, 0x5ee, 0x586f, 0xffff, 0x4, 0xf, 0xff, 0x10001, 0xcb8, 0xed, 0x7, 0x6, 0x3, 0x5, 0x9, 0x0, 0xcd, 0x1, 0x7, 0xca, 0xd6e4, 0xef, 0x5, 0x6, 0x5823, 0x0, 0x2, 0x8, 0x7fffffff, 0x4, 0x0, 0x6, 0x3, 0x5, 0x4, 0x9, 0x2, 0x100, 0x2, 0x3, 0x6, 0x3, 0x0, 0x1, 0x5, 0x2, 0x9, 0x1, 0x80000000, 0x1000, 0xffffffff, 0x9, 0x4, 0x6, 0x8, 0x459f, 0xd1e, 0x6d, 0x9, 0x3, 0x8, 0x7, 0x6, 0x3fd, 0x6c0, 0x3, 0x9, 0x5e, 0x0, 0x8000, 0x5, 0x2e4, 0x6, 0x80, 0xfffffff1, 0x4180, 0x9, 0xaac6, 0x1, 0x7ef, 0x758, 0x8000, 0x8b4, 0xffffffff, 0x6, 0x2, 0x8, 0x1, 0x0, 0x2, 0x5, 0x7, 0x2, 0x5c09, 0x4, 0x3, 0x8, 0x0, 0x4, 0xfffffffc, 0x5, 0x4, 0x7, 0x3, 0x80, 0x6000000, 0xffffffff, 0x8, 0x9, 0xe48, 0x435, 0x4d5, 0x6, 0x4, 0x5, 0xffffd7fb, 0x40, 0xfffffff7, 0x5, 0x2000, 0xe, 0xe0f9, 0x5, 0x7f, 0x28000, 0xbc, 0x8c, 0x2, 0x7, 0x6aad, 0x6, 0x6, 0x1, 0x8, 0x2, 0x5091a6ca, 0x6, 0x9, 0x6, 0x10000, 0x8, 0xb, 0x1000, 0x2, 0x4, 0x10000, 0xc92, 0x0, 0x6, 0x3, 0xffffe353, 0x81, 0x10001, 0x4, 0x2, 0x3, 0x2, 0x3, 0x2, 0x8, 0x9, 0x3, 0x9c56, 0x7, 0xffff8000, 0x4, 0x80, 0xd, 0xef5, 0xd53, 0x3, 0x6, 0x3, 0x7, 0x5, 0x2, 0x4, 0x4, 0xd8, 0x9, 0x9, 0x9, 0x8687, 0x4, 0xf31, 0x9, 0x9383, 0x281ea005, 0x555aa75d, 0x7, 0x7, 0x6, 0x23d1, 0x1, 0x4, 0xe6, 0x9, 0x4, 0x2, 0x4, 0x5, 0xffff, 0x80000001, 0xffff, 0x2, 0x9, 0x0, 0x3ff, 0x8, 0x1, 0xbbc, 0x80000000, 0x1, 0x39b, 0xfff, 0x0, 0x10, 0x5, 0xc, 0x8, 0x9, 0x7ff, 0x2, 0x7, 0xffffffff, 0xf, 0x88b, 0x2, 0x3, 0x2, 0xff2, 0x4, 0x3, 0x3, 0x4, 0x0, 0x4]}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x60000041}, 0x4000080) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000001380)={0x38, "210bc276162a6c4003c76d45a14adbe3da7d7f2a0864912290f11bb8606c032e", 0x3, 0x2, 0x1, 0x3000000, 0x6010100, 0x2}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001440)={0x0, 0x0, 0x8b, '\x00', &(0x7f0000001400)=0x5}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000014c0)={0x1, 0x0, 0x1a, &(0x7f0000001480)=""/26}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001500)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000002880)={&(0x7f0000001540)={0x27, r4, 0x1, 0x1, 0x0, 0x5, "bf71da13d29a89851888d5e05c0f26f161b63fa162990972f4212c184fb1cb9bef65cc207f7f7921c29f16ab2616a037c3ab552a61a23db23829d5d075b7f8", 0x22}, 0x60, &(0x7f0000002800)=[{&(0x7f00000015c0)="aed697e587a577681834aefcf83b18b7747a4be3790d0984bb01d72ab5b987c8a08fb5d6122cb80aee6667ec017d66c2f341db35aab81c32da4364134a417a21697e8f25f8f33278dd18e4a16edcd560595a7e0450332eb6b0453441fef572a32843bba8dba9f3795d3f138f8c5a416a42d3c09d4f466b1f379f7c12dad2bd8a020123b03b87d6b18971c0921619abdba5d5336a09f61f4587a1aa", 0x9b}, {&(0x7f0000001680)="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", 0xfe}, {&(0x7f0000001780)="2b847025000074574ac39375a8ce25101eb2508602624999f7fd646036ad41b7486a3afcd77d46d13d21862af080", 0x2e}, {&(0x7f00000017c0)="78e67fec9cf1715bfe4acf238f0d87b8f2bc5b28d8264f97eb4c6c5fda44d7452f90f4d549ee2e8294750aa6d0ac171d838316", 0x33}, {&(0x7f0000001800)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4040}, 0x10) r5 = accept4$phonet_pipe(r0, &(0x7f00000028c0), &(0x7f0000002900)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002a80)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002f40)={'syztnl1\x00', &(0x7f0000002ec0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x3, 0x10, @private1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x20, 0x80, 0xffffffff, 0xd52}}) sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002980)="531e78e166a74432f181903eef7bce53b0d59b4a7abb0f6b90fdb32b7421e970761ca7a86e366ab14c72fa22f2740bbe171cfec6aedef29952c8edfb401f67d5ce8905be73aca44e9de98eadf5cf297b8c1be89cce3327ec72648619e0e3d2408c5d6adc74827c214f44ed83077f4c814c01cf26a0fff82eded4572e9804dc58cdd75700c6f8d3f2f74bc9e07e25d906ed6a18e24c96dd48f26259a1d108076b7ddbd004e1cb33bbcb9faa", 0xab}], 0x1, &(0x7f0000002ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x14d8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010102, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x50}}, {{&(0x7f0000002b40)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002b80)="8663798e9016f9e343968ae934e6a114660ff982d643981c8f67baef65d0fcbe573e919f1d6be1da52c239e77a7d317c41da755f7abd20040166138fca0e3f41cf50ac2af01838c66f9d5dcbd4f528b04e5e307b2d2f1448", 0x58}, {&(0x7f0000002c00)="bb70155cb85536dee089f4b59727727515d05ab02fb81d94b1a6f49a127b66799e0c0b214b1b8a1dc11c61c4e42944ee281af38d3c3a295c82d18eaf52cf0280911754acee703bd7f3a04a721cb3915a95e23a903303ab7cdc6578c5c83e07df384f4fabf7483d4d2e833e5793da724b8a3e4843b89a2481ef8b61f24e41b91f37c8892db672e0366a3f5d83d7e1090bfea0536d7ea2ef310985d33261df3da9e58c78710b830d9c14675100f95d13b9544ab8bd5e815b651195142ad5695af34abbb65df3df29e1cd44922f4e01f4b6aecae8b25f217556a45505c041e92c56c2c21e967628", 0xe6}, {&(0x7f0000002d00)="079e887e5229e3fd29163ff2ede4d1f52e03f0e7df621c105b975e817007c61ed506d66427ef915814d4ebee9646d3e8cdd795ab830a1ec834483c16d7fc4f853337338a8e49ba2a74a7559b072bf5adbed08c390612b56544c19bfb73a5dba9f5ccb1a2c6dac097ae151a5acd63d429bb8d45b33b1a67291ee8f803dfa7f919c6f326bb9868826c5437eb7a2a702ac0930a573777adb3d8e8a925b73a1645d03479e4facd8e3a", 0xa7}, {&(0x7f0000002dc0)="b0ceb66a0e153e968b1cdcbd61d9d5f854337776e229554eb3b187b843974fa45bbda261558f76c0f3d202657f36301bbc9f29b41731b040e41ce4996ae88561ed3f1e92b5598c6adee980cfaca64c02848998628a56001b763e9eec64f12b8a7cf300517f453708a114359ace6dc0536fc5556672610c28e6337d694b51f6fcabc5916a899d626d2366cce1dff6281093422d28e5f054ae", 0x98}], 0x4, &(0x7f0000002f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @loopback}}}], 0x50}}], 0x2, 0x80041) sendmsg$nl_route(r0, &(0x7f0000003140)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x40084c4}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)=@getrule={0x14, 0x22, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003300)={&(0x7f00000031c0)={0x11c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xff]}, @NL80211_ATTR_FRAME={0xa9, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0x5}}, 0x1000, 0x2, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x3, 0x1}, {0x3, 0x1}]}, @void, [{0xdd, 0x7b, "83deb6193ca464ef591560712c0c690bffd80d183ac8d6b05a3bd346cad276c51325b023e32505cb7bf726d867a32b0d6d087bd81c779d5bb40f7109cb2281cec92e6a3b8a412c1d7d5465a2464eeef89c5bf3c25edde4050ebfdf2195c55a3861572ddca68a0a0365a8252033e21ddba439ec28485a53e2eaf859"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1d, 0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xc, 0x9, 0x1, 0x40, 0x9, 0x8b]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x14088}, 0x4) io_setup(0x6, &(0x7f0000003380)=0x0) io_cancel(r8, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x2, 0x4c9, r5, &(0x7f00000033c0)="1fdbbbe72b9a", 0x6, 0x9, 0x0, 0x1, r0}, &(0x7f0000003440)) r9 = dup3(r3, r5, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000003480)={0x7, 0x7fff, 0x8, 0x4, 0x596c1347}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003500), r9) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) r11 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r11, 0xc0405610, &(0x7f0000003640)={0xb, 0x6, 0x7, 0x84800}) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x40) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f00000037c0)={0x9c0000, 0x1, 0x1, r0, 0x0, &(0x7f0000003780)={0x99096b, 0xfffffffe, '\x00', @value=0x4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003800), r0) 3m17.854159052s ago: executing program 2 (id=275): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'ni_daq_700\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x1ff, 0x6, 0xffe, 0x0, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x7, 0x70f]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='devtmpfs\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000007c0), 0x4002, &(0x7f0000000880)={[], [{@subj_type={'subj_type', 0x3d, '/dev/sg0\x00'}}, {@obj_user={'obj_user', 0x3d, '}'}}]}) read$FUSE(r0, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r5 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x11, r1) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bond0\x00', 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) close(r8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x108, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x7, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x74, 0x7, 0x0, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0xc9, 0x1, 0x2, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0x2, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0x108}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r10}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0000001000370800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c00128009000100626f6e64000000004c000280080009000000000005000e00000000000500160001231dd1beae04f1916387c0dae16926ac00000008000200", @ANYRES32=r7, @ANYBLOB="050006000700000005001d00520000000800030000100000080007000400000008000200", @ANYRES32=r7, @ANYBLOB], 0x7c}}, 0x0) 3m17.763679202s ago: executing program 2 (id=278): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="6cd1da4c282528f0b39e624c5e0f3faf531c0d9790c641422bee4fd609c84b23cd3acbc8c1d171ae97dc441dffbd91bd04bccec962a397dd5113455015779c434dac644de46c72d2e73b1c9df5fe4c3eb4332a4ef7262895b873b53a7c330f4541137af8418443ad3429371be97230f9c4b62b0151fc6ddac888800e51f4473f950a591e86bbf6b5731de5dc6a075ffe6f7b34c6c765f7477984b1ed98d8bca7d717", 0xa2}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000000180)="6838603e46eecd670673fa756e0f88", 0xf}, {&(0x7f0000000300)="d4ee3bc8fd8f4c97a8243658f8c7ad5581099501b4147c4e23e65c768aa422", 0x1f}], 0x4, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x87, 0x0, 0xd, [0x8, 0x9491, 0x3, 0x2, 0xfffffff8, 0x4cef1309]}, @lsrr={0x83, 0x13, 0xa2, [@multicast1, @broadcast, @local, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0xc0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0) 3m17.443306027s ago: executing program 2 (id=283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) writev(r1, &(0x7f0000000780)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000a00000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, 0x0, 0xffffffffffffff64, 0x800, 0x0, 0x0) 3m17.337121205s ago: executing program 32 (id=283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) writev(r1, &(0x7f0000000780)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000a00000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, 0x0, 0xffffffffffffff64, 0x800, 0x0, 0x0) 2m59.893292139s ago: executing program 4 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x452181) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x81) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000180)={r5, r5, 0x6, 0xe, 0x5ac369b14b807b3a}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000380)=0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c000280050001100000000006000340000400002351dc8030555c611dfa247e969943790b6113298858b96e88a981694741c2b5b00b547d6c0ea4e1b364182dbb694c6cfd34a002826f0fa7fa858357bb79ce1cdcd55f84ee8a9a69b255353d3097824f48d973d4b610e60a8c8836cacb5d920f26837bb5e1ddf24643c7b3b684a7d2d2d7d451382660f5e5594c1cb936dc7ae263eb639c111710bf54d8c44451b9ba5d20e424a36c2500fbc5486c8288f80dbd7ca8e088729819fda349a22066850c3a4979a8874dab286b498ed509aebbb1d5a251a5fe2bd49046d2080b3e658023839750990a2117"], 0x40}}, 0x0) 2m59.8021605s ago: executing program 4 (id=488): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x700, 0x38c000, 0x7fffffff, {{0x22, 0x4, 0x2, 0x6, 0x88, 0x66, 0x0, 0xa, 0x4, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4c, 0xbe, 0x3, 0x7, [{@multicast1, 0x12fe}, {@rand_addr=0x64010102, 0xffff}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffffa}, {@local, 0x3}, {@multicast1, 0x7}, {@multicast1, 0xe}, {@private=0xa010102, 0x6}, {@loopback, 0xffffd419}]}, @cipso={0x86, 0x14, 0xfffffffffffffffe, [{0x6, 0xe, "8dc9cf7933d272ba3954271e"}]}, @generic={0x88, 0x11, "a75698d4889d4af7b5df8353719cb3"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x8f, 0x7, 0x6b, @dev={0xfe, 0x80, '\x00', 0x1a}, @loopback, 0x40, 0x20, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x5, 0x5, {{0x4b, 0x4, 0x3, 0x7, 0x12c, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0xd5, 0x1, 0xe, [{@private=0xa010102, 0xb}, {@loopback, 0x7fa}, {@broadcast, 0x200}, {@multicast2, 0x200000}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@private=0xa010102, 0x9a8}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xfffffdf1}, {@loopback, 0x2d}]}, @timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2136}, {@local, 0x8}, {@broadcast, 0x56}]}, @timestamp_addr={0x44, 0x54, 0xe1, 0x1, 0x7, [{@empty, 0x4}, {@remote, 0x7}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x401}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x9}, {@loopback, 0x8ac}, {@rand_addr=0x64010100, 0xfffffff9}, {@broadcast, 0x4}]}, @end, @rr={0x7, 0xf, 0xc7, [@loopback, @remote, @multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x34, 0xdd, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffffb}, {@local, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x40}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf4, 0xb, 0x0, @loopback, @remote, 0x10, 0x10, 0x6, 0x4}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x0, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000b, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x44}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000640)={@private0, 0x0}, &(0x7f0000000680)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000740)={@private0, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x158, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 2m59.721037605s ago: executing program 4 (id=491): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa0003, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x7, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r1, 0x9, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r2, 0x9}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r4, &(0x7f0000000380)=""/144, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000000)="97a5", 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES64=r3], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2a, 0x7, 0x2, 0x3, 0x5bc, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e22, 0xc48, @empty, 0x2}}, 0x0, 0x0, 0x408, 0x0, "e7f7cf17e1a996f9f18a300cffb66ba51d4fb8f44777ff91d3061e7534fff77f89a40000000042ea1a9260b38d126542549df2833d13cef39bd561fc71110100000bd6bfda190000000800"}, 0xd8) syz_emit_ethernet(0x10a, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c02ffff907800000402000002040200"], 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) 2m58.238106507s ago: executing program 4 (id=508): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/195, 0xc3}], 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x9) write$qrtrtun(r2, &(0x7f0000000100)="0ec0edc112723071c453ca8e", 0xffffffffffffff10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$ppp(r3, &(0x7f0000000340)="a9a96f84", 0x4) fallocate(r3, 0x0, 0xfff, 0x4000) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) (async) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/195, 0xc3}], 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x9) (async) write$qrtrtun(r2, &(0x7f0000000100)="0ec0edc112723071c453ca8e", 0xffffffffffffff10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$ppp(r3, &(0x7f0000000340)="a9a96f84", 0x4) (async) fallocate(r3, 0x0, 0xfff, 0x4000) (async) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) (async) 2m58.170778753s ago: executing program 4 (id=510): r0 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='{(#\x00', 0xfffffffffffffff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd29, 0x2, {0x2d}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)) 2m57.850831584s ago: executing program 4 (id=514): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4) sendmsg$rds(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$rds(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/134, 0x86}], 0x6, 0x3, 0x0, 0xc) (async) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/134, 0x86}], 0x6, 0x3, 0x0, 0xc) 2m57.810513393s ago: executing program 33 (id=514): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4) sendmsg$rds(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$rds(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/134, 0x86}], 0x6, 0x3, 0x0, 0xc) (async) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/134, 0x86}], 0x6, 0x3, 0x0, 0xc) 2m38.052255978s ago: executing program 5 (id=779): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) read(r2, 0x0, 0x30) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) 2m38.051896414s ago: executing program 5 (id=780): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3fffe0040, 0x0, 0x5f) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xfffffffffffffd9d}], 0x2}], 0x1, 0x20040800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m37.99454583s ago: executing program 5 (id=783): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x14) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) 2m37.804909229s ago: executing program 5 (id=784): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b48d8c4defb30000000000507b8c124000000000007b0a00ff00000000950074"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b48d8c4defb30000000000507b8c124000000000007b0a00ff00000000950074"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) 2m37.804542391s ago: executing program 5 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)=ANY=[@ANYBLOB="440000001000090400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="40200000c280000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=r3], 0x44}}, 0x0) 2m37.665262655s ago: executing program 5 (id=786): readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x89, 0xf, 0x7, @private1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8000, 0x1, 0x0, 0x6}}) sendto(r0, &(0x7f00000001c0)="cd9c60700fa2400abbcbb6bf47fdcc90353b68459213ea3dce6cdc09259fbdf5015c72009581c2eba8d97b71c2709882594df1614838a3dd3fa263a7b6c0b0c19346815503d993104e9a1eacd2b105be0ac981cd48d5c9f566f137f63b4b923c73549a9c76e23642f4bce35c55a3d5769ecc5d438b701e129239a7dae26e4f70c85e35ecc18431084cafaca26f1e9cad2eeaa2e5570424bbaa315f2fcc641e472e58", 0xa2, 0x8800, &(0x7f0000000380)=@ll={0x11, 0xf5, r1, 0x1, 0xc, 0x6, @broadcast}, 0x80) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) (async, rerun: 32) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 2m30.22532634s ago: executing program 3 (id=866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'syz'}, 0x18, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r1}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) 2m30.139886414s ago: executing program 3 (id=867): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x81, @private1, 0x100}], 0x2c) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r3 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1407, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket(0x11, 0xa, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x81, @private1, 0x100}], 0x2c) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') (async) creat(&(0x7f0000000300)='./file0\x00', 0xe5) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1407, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) 2m30.139117494s ago: executing program 3 (id=868): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x1, r1, 0x1, 0x3, 0x303c, 0x7fffffff, 0x800}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000003c0)={r3}, &(0x7f00000002c0)=0x8) write$P9_RLCREATE(r0, 0x0, 0x0) 2m29.991108634s ago: executing program 3 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=0']) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=0']) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r4, 0x25, 0x2, @val=@netkit={@void, @value=r5}}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r4, 0x25, 0x2, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0xffffffffffffffe3, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40d8) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0xffffffffffffffe3, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40d8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3b000000010016", 0x7) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x4002, &(0x7f0000001140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f0000000240)=""/160, 0xa0) 2m29.90519288s ago: executing program 3 (id=872): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioperm(0x0, 0x7fff, 0x15f9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x2e6d93e6}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r6, 0xc0, "008852194a501d376cb6b60897fd19a3f94f9ef2ac0ff5192e0e23f6741a4bc1d09febd5b07e7fc8a9c35540f2e6b93bc442ff4362b3eac3737ee858d9e14589f59eb90c46c6cc360b36dbeb021b0bee6d189e9243b230233cae79565f2e8229d3a4094eb14ab4c980196ef652788b694cee90896bdfe6f0503c78d46b1b48725a794a8cf48b10e42c3ecd8f14ff979391ffe1466acc143489b95a0aab46ae4207ae6ca726482e819908662a283c39492b9976c72570f28dce15967d886e03cf"}, &(0x7f00000001c0)=0xc8) recvmsg$unix(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2100) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0xd4, 0xa6, 0xe, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x5, 0x9}}) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=@bridge_delvlan={0x30, 0x71, 0x10, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x35, 0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044805}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2600, 0x0) 2m29.745529547s ago: executing program 3 (id=873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000b2a30000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8ea341) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$msr(r13, &(0x7f00000004c0)=""/182, 0xb6) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000000300000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="02000000040201001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r12, @ANYBLOB="9ecf38907ff4d0f5a17766d70a58c1838a6e16084065de4d0a3ccf15656d649a8c0aa6a03c15c90747ab537f653f6ce9123aa8eeddfcc8b382a47396e5ef1309b5d778f4612963b49614114cf992353a2d37484f63189f4240d0c48268c020686bd3d37e8d63cf8924e554188bdcee091510ce6881c774ba68960280ae42dfa2109be2e1572b98ca0e1e105a"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2m29.700351624s ago: executing program 34 (id=873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000b2a30000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8ea341) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$msr(r13, &(0x7f00000004c0)=""/182, 0xb6) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000000300000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="02000000040201001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r12, @ANYBLOB="9ecf38907ff4d0f5a17766d70a58c1838a6e16084065de4d0a3ccf15656d649a8c0aa6a03c15c90747ab537f653f6ce9123aa8eeddfcc8b382a47396e5ef1309b5d778f4612963b49614114cf992353a2d37484f63189f4240d0c48268c020686bd3d37e8d63cf8924e554188bdcee091510ce6881c774ba68960280ae42dfa2109be2e1572b98ca0e1e105a"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2m28.707169006s ago: executing program 0 (id=883): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x101, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000001b40)}, 0x20) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m28.698459006s ago: executing program 0 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x6) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="f26dc4063dbee966b8de000f00d0b9de080000b8fa000000d5d5000000000f3066baf80cb87ae33483efc4e2c1a90666ed3e360fc77adeb9800000c00f3235000400000f303e0f01c976010f01cf", 0x4e}], 0x1, 0x4c, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2m28.601284815s ago: executing program 0 (id=885): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80942, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000440012"], 0x64}}, 0x4000000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x155c7c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@local}, &(0x7f0000000240)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) syz_emit_ethernet(0xfc2, &(0x7f0000002900)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000580)="0f32f2360f01df0f3806f3baf80c66b8845e978a66efbafc0c66b86ef9e5e7baf80c66b8e862c98966efbafc0cec640fc72d0f35ddb803000f01ba14000f01de2ea5", 0x42}], 0x1, 0x56, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000600)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m28.407156697s ago: executing program 0 (id=886): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=r0, @ANYBLOB="b934c3ec2e090e05794eabd31a710dccc10028c2e3a6194c895363f982ad196a5f865e4527d5ea1b526022044997ef0b2f2fd9102167e8be69393943fad1"], 0x2c}}, 0x64010) 2m28.406501947s ago: executing program 0 (id=887): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) fstat(r1, &(0x7f0000000340)) 2m28.344000611s ago: executing program 0 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000002c0)={r9, r11, 0x0, 0xa, 0x400, 0x40, 0x1, 0x3, 0x10001, 0x6c5, 0x2, 0x7}) sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d323234"], 0xe0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 2m21.632841364s ago: executing program 35 (id=786): readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x89, 0xf, 0x7, @private1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8000, 0x1, 0x0, 0x6}}) sendto(r0, &(0x7f00000001c0)="cd9c60700fa2400abbcbb6bf47fdcc90353b68459213ea3dce6cdc09259fbdf5015c72009581c2eba8d97b71c2709882594df1614838a3dd3fa263a7b6c0b0c19346815503d993104e9a1eacd2b105be0ac981cd48d5c9f566f137f63b4b923c73549a9c76e23642f4bce35c55a3d5769ecc5d438b701e129239a7dae26e4f70c85e35ecc18431084cafaca26f1e9cad2eeaa2e5570424bbaa315f2fcc641e472e58", 0xa2, 0x8800, &(0x7f0000000380)=@ll={0x11, 0xf5, r1, 0x1, 0xc, 0x6, @broadcast}, 0x80) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) (async, rerun: 32) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 2m12.243331444s ago: executing program 36 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000002c0)={r9, r11, 0x0, 0xa, 0x400, 0x40, 0x1, 0x3, 0x10001, 0x6c5, 0x2, 0x7}) sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d323234"], 0xe0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 10.999555301s ago: executing program 8 (id=2624): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c725b33eec804856a5117fb2601cb16e5622bbc7c4cd4a0616ede0e0f779105eb2e814ab48633f6fcc3052a3324d96d527f24", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 10.90485359s ago: executing program 8 (id=2627): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x8, 0x4}, {0x3, 0x300}], r0}, 0x18, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e8b}]}, 0x38}}, 0x0) 10.903581609s ago: executing program 8 (id=2629): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0220aa86530000000000ed0000000000"], 0x10}}, 0x20004040) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) syz_clone(0x60050000, &(0x7f0000000080)="2e23da3860430406ea689f0805932f9052a116ad1fff80d73e8c276ef3b6622cd60b4f18643a41a344b0651dc96dc77c73d7b2e9e68d4c5d65d15b7e01acc7e26ab83cb22b8cbd95bf6508ea4b379d097a253f91ebde427d1aa4b28599b593703f8a132946aaa9786452c132ea64c57e8ec77a61", 0x74, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="072faac728e8802b3b2521d361fe2bedfded90df874e7f15ca6fc586c71e99e6bb2c1d596bcdad2eababf2b4589e42ee58005137dd0ee96aa9f83027dff9048a3c5cfc7e180f01a90662fb3386f61c5846c0d65d182e80493658bfbf6a463db533eba77e04eaf10243eebe677f970a879c81f36296ce05e2d831a7bbab349ca51a1c234635e80b7dfb7af68d8a") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x20004080) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000014c0)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 10.744506477s ago: executing program 8 (id=2632): prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x5}) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 10.690700616s ago: executing program 8 (id=2634): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x35, 0x25]}}]}) 10.626970861s ago: executing program 8 (id=2635): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x2, r2, 0x1, 0x4, 0x6, @link_local}, 0x14) 2.031528314s ago: executing program 1 (id=2718): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000002c0)="df3b46a1330000000000000039000000000000f1bfb4aa068fc60c48ae2cd8ab1fcc903b7ebd3bf583aaa8d7c8db6df62ecfbbbf9d88e22299fc6bf8966fde2978d207040000001fc672f220fb612483c7392064f03ec88c0d80463164cc66bad573b1862f7e9dd8c88d2a5ad193407968b7cc9beb08c8754c9af20ed7b26b348cbec639fad8d724cedaa9836aa9d37d253071", 0x93}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7", 0xe30}], 0x5}, 0x40000) 2.028851291s ago: executing program 1 (id=2719): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x96642) (async) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x96642) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/unix\x00') ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, 0x0) 1.935271337s ago: executing program 1 (id=2720): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe1e}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000300)=0x6}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000380), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xb46c}}, './file0\x00'}) r5 = eventfd(0xe6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000400)={0x0, r5}) socket$nl_generic(0x10, 0x3, 0x10) write$selinux_user(r4, &(0x7f0000000440)={'system_u:object_r:apt_var_lib_t:s0', 0x20, 'system_u\x00'}, 0x2c) read$eventfd(r5, &(0x7f0000000480), 0x8) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f00000004c0)) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000500), 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x100000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x87}}]}, 0x94}, 0x1, 0x0, 0x0, 0x811}, 0x4001) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x400) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040841) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}}, 0xc5) r11 = mq_open(&(0x7f0000000c40)='system_u:object_r:apt_var_lib_t:s0', 0x2, 0x100, &(0x7f0000000c80)={0xd, 0x80, 0xe, 0x3}) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) ppoll(&(0x7f0000000cc0)=[{r11, 0x84}, {r3, 0xa610}], 0x2, &(0x7f0000000d40)={r12, r13+60000000}, &(0x7f0000000d80)={[0x4]}, 0x8) 1.933377955s ago: executing program 1 (id=2721): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xa, 0x17}, {0x4, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x20b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x22, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@jmp={0x5, 0x0, 0x4, 0x5, 0x8, 0x10, 0x10}]}, &(0x7f0000000400)='GPL\x00', 0x856, 0x34, &(0x7f0000000440)=""/52, 0x40f00, 0x64, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x2, 0x81, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x1}, {0x3, 0xd, 0x1, 0x5}, {0x4, 0x4, 0x0, 0x7}, {0x5, 0x4, 0x0, 0x5}], 0x10, 0xe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x10, @val=@tcx={@void, @value=r9, @void, @void, r8}}, 0x1c) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.785787145s ago: executing program 1 (id=2722): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f00000008c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000001300)=@ccm_128={{0x303}, "f4ed339d51845b69", "000000e97000", "27d68b3f", "b922b37afa33ee7e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_GET_TSC(0x19, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x0, 0x301000, 0x8}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xf6a3, @loopback, 0x800}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000030029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cf2040000800400140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea109ebbffff2c0b798682e3b2fa6eea9400"/58, 0x3a}, {&(0x7f0000000300)="222b08b90690dbbeeb050e2fe9c1e075ff2ddb241e3477f015700a94f69314959511ebe417d36a41ebb9f8a9eb6c6e46aaf6e65be52250c813b6f919e260bbe8d855acf165b4888db1afb18694bcc858651f9e2c774295686afe1fd62c3e71074ab6d4a82b250116b505c808c903dc97d865952cadbda37b95a560d1f00048a47fc789", 0x83}, {&(0x7f0000001400)="d667301bd1d1849d2ed9ee986a446dea6ddf48d9a3209415e30258227da4df470cbcd6f3511ca7e001220e6ca9b07fce7f082de3c4bb263b78e42da8ab9cbeecde70fa7977de1988de2094ff483ee62a485d0271f7c2c1ded4a5858e090abf701d6f5ec78b442ef52a73544f5173bd7a9d79db8fbbb6956240a46a6a50df4128ac0e8cdc3c8f3821bb0408a07f5319ac61c303d8235939d3f17a23bdc1de478e09245ebe7828368152e74708d69dfc93d58c73d0d2b07f0528a7e05a67e739020a5790b1d9bbaab1e96e8debd205235c1a9fc1cfd60d76fb6bbbc7a2da4116c956eef8bb15156ee90324b598db7f06ecd38a6b0772f793c4baf172aaf595f890715ada1928d016d3890d73bc6842edd1bc33fdda5398a0ab1301fe7311ef8858c3bf68b81deab9daf5a6cbf396d62e7806f7f0e6b0b7208270d0e3598b4861796d876423caf80cc75b0699c43bc2c94fb3702ddcaafefa637e23504c474b4248fe4887788dad66d4e88429e5cff282ff3b27feb30666b29bcadf617b3db6f1e4848a2041fbecf689423a256876740e7263748c520facd3eec8edda43c109e81e27d91f1e4e13af3e738f5b557f1a32b13f99874b1257c7e36e0b5a32187459fc93500e08325937b196e40c0c65e06dbbe5bd52fe9b6db42b350c9a96a4d996ff1a05a5cffebfcf56716ae9a3c7f9768db96b5e034f0ba8837e9936a17df353702dbf4463b15d64010a65e75805dbb749598511d3330b30d1bc61631fadcdf7755e6de3ae61e855680479219d9f89311ec02dbd878f49292ae1405ca09cc1fc633bef782f8ebbfcb8ee79bbfd1948357986390605f5032cc4f4baf8556cdbce22fa90059fb6e38bfeae2f9b283d6dbbbb90b536b02746212a9822c249d641a6a68aaf3a8fbb111b4fcfad46b3bed94c0a2bbd8471edb26ee5fd21276e6e6fe3d0053461ede35eee03312834b20e5ded2281a834317b2a4a17e10ff283e3f91e65603f8b50219e61138f414cf257c25baba5d6eef6756ee0c9bfc8bc7856004f5ceca6081aca71998f8ed38e70303ead19eabd86f7c21eddc8293892c1d19528aa820f8780b11829d72b858dfa6ac6a10d3f798629fda18f171431628ca9eabf4e3f3fddc2a1e936ea8edebc1940494c3525d12a1115203db9bcd7e4c024cc1cfbdeb553880cb9e9d39dfd322c4f97d8381fa3aed0bafac36eb0813e75ee8bf32b0e7fc9785fcf1d55950b8e8263df973665e762c2d3b4bedf974fdbaf2a3ce0cdaa190df9708ffe3e1452fcb8efa2343d7db8274086abf7cc07f02fb683a233d8538d37f2f852d639dd0ae9837508341e92ce84145d113a98022b8cb3d55fa9346ec4f0327903a3d8c447e4db070ddfed58e33fc6781f51677941dd17d2b83e996197bb738196b0dbb5b552feb27b69c6d1fa196c8f56c4a83b61c2565e0a816e23d2dcadd0e23d2cdcd97606502ceba7c4b4c1c71a39633c2ef369fb06c4f9ba8199761a790baac2714ce2f871b6f7242fadfac37ff3e8d257430af226dbe0f10ebbd04417baf03b798b2e562b0d70e3f455430df46bbc38df4580b1c58639562b7314dc8ffe5e74cb148348dad6e4f907c6c823fd70a35160c5dd4ae3c6fe45045d5cc02fb76320c7ecb8df284bd98056dc37ce262d178e883e7ddef84c42d1ff7ae7b6fc8364e645c2ed48ffb91cb9115a922cf52517caf4d660555e432a2eaf986e3af8e90fe9c89d54c920911a39eaa47518799a2e3bfa8691ba1caeb4699d9273fad8936f2115c0f49cf11ec26a56e608a926f07caefcdd23c06e954c6efa32e7fcca7d5af5d07014d1b44b2c0216570357d81bf91e3cce5d5a006f924be74f05e2667b4df27e7be5c0be626f9f917090eb895ad5698b2dc438f9c113e3cb38c7c434188276a5e6b43a30d3f4caae94b39263f5821a730c4dffeb54b7f2f37cd5f5251d42e7be6c40eb78679378d0b24375d46e0be0744341a53a48fcdc9d117e1f1572a62ea12c339a252438e4896a0c345a312f1ddf1d9430fb24162e6f72e16d701ff8acaddcac4547b735a96444880f01b48bbb6acc75d1846274ad4aa1b0bff114678437dcd4f2e42b38dbd2f2fc127aacd68258c334f57a9016115a42efb7c8a738a34d7e06005ec453f89de5a777d9438df63f815c50eb3222c4d3faa6d05f76124477783e24f716f78dd800fbfc3459b9e56098c8a2b4df3d7e47450d05165c215d23ea305d809ac7078a7d5b7bf3be6520aa6468df5dea2e26167d02b7e3c6345b92b778fcfbd1364ce4128239358b1edd2c77b46287e4dee4a4561bf9c0bdd8683d1244b142189d8b428475a0215ff3ea129d2cd6fc7ba7b444ef2e895a71db276846af7121151146cc171d28e287be882712e22abe54d132a8085ef506b275390f06f874220adfe773862cd1a8eaab2602d9e91d283c0c79b658af4448e0fa0c6d3053ae27b0d6888adaa00e34bd29eacc12b2b8ebebf201fed062a063db72b3cc3c8a333a7eee73d28af952d79094f08376cadf81b5a18bc6c413bf0662810ad537cd9f22ebac0a7acf7d0bb6a538ff8d76315bdd08708abace2513c71d301a3bbfdcf3d16377abb9402e1deedefa7527437b4a976a3e3c1f031789b7ed45f6dbc6131c49fa7da221ef1172d9f88728f883d63a6652b73ef60a02fee83269429d9a0c00d08217c6e16ed475ee912eed39f15e70b45970a1e31b9f6ebe5e2e5144130dbf22e3cbac96aa6b7c7cd8ecc0e727a81f10b286a1325571f3926db583c120d3f50e8a8c99f7dd20e06cac9829743fd9ed3fd19f9279d67cafeb1cf6f826ed2da00f1bb8e26edc76f22c074d3af8e597e627f762739a08fab681daebca1700acd7dc23d07b6b0b04bcd293f952d1606d865751ad5de5b3f76a71cf3c42cd2fbb1197b75e05cf4ed31474921debd74a0852019699f7ac2b8e6f1f1e2970db6269158616e3437cb7e0a0bf9da089dd6fb55684e775d2eea9f7f7c5278248f32d44da0fea62dc21c77bf1cc45e484773717ff4f6bbe509cc8c071e8eb3cfea137a8cd515ee0903ff2072c58a118cada663dc1e00d015f0bef74ebd20fee51d76a4ede0b7b60fa1e3e96922c247ed8b5acf26aaa510ae22a98624e42b0347f785f23a4f047ff6ab3b48fa67eb14ae1fa76825bdaec6f30f012d6e19e4514d53cb8f11b06dd5ce116ef779e0edf06099653c4291cb7d0fcd19d66d163072eb581a757b9fb383e2f8ab830dc3d3f6312dcf92b6b2cae567883ca010b6f47cc0858cad58f90373820e41185a0541df63f1bb64de44da330155e7f931cf46e9f8b1c2af92f02d71f23d24c3ac22c4808f6828e1a54017918e213df57447c32516cc668a3f02d57d5725a475de7fbce88591805bebd0cc58fb07629a0348781544d50babb45d739eafb75391f19d4771721ebca75d29286d6c1e99a5e6505ce4a89bc5389b6590e2558b9bb9f3a0d62cacd85159453b4e6494ab77ffd36c74e80721b599ec9c93b6427f32cd23c0b3b46cad92c024e9a8af6a886f675b6b378d8e7f3e87c077652ddf1b2519fc488c573cc324ec79a29a574767f3ffdb65d35fc3c304b1ca313e70de86466a73c19e2aa50c816dd2ac7686c81da7084fbabc349f2c22432b0ef39f5b8474e55a4aa6db80771404831b715602fcab2f760c071bc4a151d2d49575d0006869ef2d571c02341a99770b4102027644bb92bcc02bb9d18131ff62f65f778d1f484ed189c29d7758422cd34eefb4183d03ffa55516d9ec59be5357acfa37ceeb645787348fb1372392704c397d8d083f32164ad89f3954091c62cdee8199cba0566523e06c56cea129ac33e0ddef59a2aa7649732d28a4c157842d92dc4d0ac26d9477928939365f69391b6c818a722788ff492adf32783c87a64ab1cece9d638c6e97ce30b19f1b2ce4eb9c85660de51be4013b05bd5621e0ab815793420d5709d7d94498a5a7b15e6f70f0dbd3817cb8fff098b5b93decf407601ceb7af6cec8e2514a22a7493d4bc9ab50bca2664e938612c8649b3ccddaef9394dbdf2bd11e1a16efecf50c353ab70f1737414d003583b58a6d5c852f72a3ec86d0c596593d5725ca840fb002bef19219a92a6cf4a774eee230b71a47edceca3c47f327aa3b45080f6a68a9404b79c825e1d47ad0315c50c903c6ab2fd5552fef399b0efa7c56e9e70b63c9d3714554733e992b59c1845aa8382f7bd57d902662ee2514fe1888f5f65ba2ba351d4364f9ebd7546d6c60dcefa7ce1e31fb1d868efb3141c5c97a9c909c415124d3d4df631f3aed371962bee4b2d95d6443b84a8c8edae1a99f0f94e767a295a77b25e6dfbc37ed7546ed445e2c9fc75d5b3b0c14a71e52b449dcb0a45d1266c0bd28f118bc45f36626145d88c7b12677b50c41107e9bcd9b589fde9f1f916e61ba44922dec23472fc0e97ffa4fb0c810e704f83d9805c7937aa95543a51259068d4540530da8e34d618d01d1ff133be245ea0095b904aee1d9f1cf95cdc13e2e5c60ea4b925aefd2c9b1511f1b2f0a0b13101f3df5f23cd4bf5eb36ccb37e134a6d09631f1afefba9d391705a0dce50bd2e44bb3fabbb86398931e1d35af87cdf250df0627065218fdcdee1cd0480c788864e06f21bab2c8c4e3a56ca0eee1a0b24757041bf37073ec04533bd9e05a7d97a1b3510ceadb339c3d531b4b718a870077a9286bd87d9c1fd882b2001c63ed3ba8c8c32cc70a5b09be8fdd9762ff309666978daf2945dbb392f78fe6c55eee66f7dacfd759b97fc4bde28e4a66cc435c90a8c6868c70d97f69cad45c75b35f0d3bac257fe97a40f79a2e08afe762168067f5c411198270836b420b0cd30f4d1dfd522bde0467ac3fb2c73479485077abf13acd381f534267ecca2430fa8f091de005c61abe2c0decd0913e14275444c22237468f42f2725874e910c9405753e88357770798091d11b2f39b1550dfa40d650df4de57b05fe877855ed45ff7659ccc9d17094ea09d6e05cd4875798847e2509ad233ac9af42515bca9334c1eb705d236809f2afdecdac5fb6e9f93c3cbb2fc14e1ea28349cc7f6e58b4ac756f81726ea975d70d6962515deee64ca418130a0a2b49a713466bbe6ae379ba594ea4e1cf592bee0ff0f46502383c137fa32c3466ae9fac480c2e273a2955797cb0ffba71d279178261fe904413286e21d3e74e41b586d5d6eb13e4be85aa8674ba4f564bd518c7cace263dddc4d341f9f2d63a3bc660f161e71d16a9dc08d3b9ee59fc00583fd11b958f5aabbd2368bd9c5af5c494da01df1e951ddecf76cdad0eedc384b59ba6fcf5c46d66d2badc88e231256e49928e6652feae56aaa2394f2be5133258e0e0ab6f97d398a51b80d4310027e43d677082f61f9216a4ebf14d8777f84ab67f19e80c460714a52d88277d11480b597ac1428307ee59b15e1db9c3b84af96affea00fada29bcd3fd6141b3ad2855958f63d019dbf89c4540322af266132d9e6210fc47f5d49f95a51434f168d565731952111962f64db13a98bfd741ba591d4869767c4c5f8270c42917", 0xf57}], 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100070138c2411e47060aefadfa617a4f6bdf360000"], 0x28}}, 0x0) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r1, r7, 0x0) 1.315272317s ago: executing program 6 (id=2725): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x1, 0x8, 0x3}, 0x14) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) close(r2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.305617578s ago: executing program 6 (id=2726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0x8080000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0]) (async, rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85) r7 = socket(0x10, 0x6, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x4, 0xffffffff], 0x1000}, 0x10) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r9, 0x400455c8, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50489}}, 0x20}, 0x1, 0x0, 0x0, 0x24040040}, 0x4014) 1.165037019s ago: executing program 6 (id=2727): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f1e6253b70007d94010a4a7cf8f108000300", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7ff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xcc, 0x0, &(0x7f0000000480)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x7, 0x1, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/15, 0xf, 0x0, 0x36}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x48}}}, @dead_binder_done, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/79, 0x4f, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/140, 0x8c, 0x0, 0x7}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @enter_looper, @acquire_done, @free_buffer={0x40086303, r5}], 0x22, 0x0, &(0x7f0000000580)="ba794cef7e947fbe55e7000cfde9e367d119559d0377171997cc648338f6d0185cdc"}) 1.164731456s ago: executing program 6 (id=2728): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000280)=""/184, &(0x7f0000000180)=0xb8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f00000001c0)={{0xeeee0000, 0x2000, 0x8, 0x2, 0x2d, 0x6, 0x2, 0x5, 0x70, 0x7, 0x1c, 0x40}, {0x2000, 0xdddd0000, 0xa, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x8b, 0x8, 0x6}, {0x1000, 0xddddd000, 0x8, 0x3, 0x4, 0x1, 0x5, 0x9, 0x91, 0x7, 0xaa, 0x7}, {0x8080000, 0x2000, 0x1a08ef8651938a5a, 0xc, 0x4, 0x7, 0x6, 0x1, 0x1, 0x3, 0xb, 0x5}, {0x1000, 0x2000, 0x3, 0xff, 0xe, 0x9, 0x81, 0x9, 0x5, 0x2, 0x3}, {0x5000, 0x0, 0x3, 0x2, 0x6, 0x3, 0xc, 0x0, 0x40, 0x1, 0x2, 0xc}, {0xffff1000, 0x3000, 0xb, 0x1, 0x4, 0x3, 0xd2, 0xe, 0x6, 0x80, 0x9, 0x2}, {0x1, 0x6000, 0xd, 0xc5, 0x6, 0x5, 0xc, 0x2, 0x4, 0x6, 0x9, 0x7f}, {0xeeee8000, 0x4}, {0x10000, 0x1}, 0x1, 0x0, 0xdddd1000, 0x220040, 0xe, 0x2c00, 0xf000, 0x0, [0x7, 0x3, 0x3, 0x9]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan1\x00', 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000300b917924dd87392f198f3000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x7771, 0x0, 0x0, 0xd7b8dbcd861891a2, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa51c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 994.488166ms ago: executing program 6 (id=2729): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f30375c7442400a69b4f33c7442402d3000000c7442406000000000f011424c0c00f0f6758580f01ca660f38817700c4c2459d78ad", 0x4e}], 0x1, 0xc, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5a}]}, @TIPC_NLA_MON={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x854) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r6, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b000000080002000000000008000200090000000700010069620000340002800800030064000000080004"], 0x2ac}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bcecf6b45a3e84bce9550881b7fa", @ANYRES16=r6, @ANYBLOB="000426bd7000fbdbdf2511000000780001800f0001006574683a6e6963766630000044000400200001000a004e2400000005fe80000000000000000000000000000700040000200002000a004e2200000400ff02000000000000000000000000000101000000080003000800000008000300010000000d0001007564703a73797a3200000000280004800c00078008000400000000000900010073797a30000000000900010073797a3100000000340004800900010073797a31000000000900010073797a31000000000900010073797a30000000000900010073797a3100000000"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4800) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nf_conntrack\x00') (async) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa0611141}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0xa00, 0x0, 0x0, {0x1, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x865}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6412c9b8}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x224}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xfff7}, &(0x7f0000000500)=0x8) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x9}]}) 807.345234ms ago: executing program 1 (id=2730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/92, 0x5c, 0x0, 0x0}, &(0x7f0000000240)=0x40) r2 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@favordynmods}]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) 806.884273ms ago: executing program 6 (id=2731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xa5bfce6, 0x0, 0x3, 0x1d, 0x1, "646b4c7fed409e3eedca8000f59e164dc63367e7e08474071e9f67cc6481368e22ccf521b6bbe3a6a0157ada941ad42d2b62cb6d7dc5352a94b52ae0bde3bb2c", "0db14295dccd224f8b5ef2619871507eddc5fcc80afaa01d4c3b062568a39748aa03fab4400f982510e9de5b54ae1d7051b12a0cb84eb89391fef5ca6b49111e", "d05ec8eb94ee9afa9810416be0e28111a4a710927747eda9cb44bcdc7563144f", [0x7, 0x7fffffffffffffff]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02400600010000000004000000000000002000050000000000"], 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x701b, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 416.461985ms ago: executing program 7 (id=2733): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c5, 0x2, 0x9, 0x6, 0x602, 0x7be}) r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x82, 0x0}, 0x400c080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$sock_buf(r4, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x899b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) splice(r3, &(0x7f00000003c0)=0x7, r2, &(0x7f0000000400)=0x6, 0x2, 0x5) pipe(&(0x7f0000000380)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5463840e38f3e4afe13a574687156e55000200110001002fbd7000fdf2df250000000061d648166860857c9c44259712756219eca30a00ce7d97dcd234b80119307831fdd419557eea0c889893c5c81fc62cee81999c8faa656042842093bc057f8ad982910f82c360dd788af507abc05b4492937c22779fed82e552de2a0e5e", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c801400010008000000430100008000000088a80000"], 0x54}}, 0x24040800) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x20004000) 414.536932ms ago: executing program 7 (id=2734): syz_io_uring_setup(0x57f, &(0x7f0000000000)={0x0, 0x807734, 0x800, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0xa) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x0, 0x0, "6106007722366cc9f4fe13ee56528deb8cac0000d84a500000000800"}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x21, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0xb}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) io_uring_enter(r9, 0x407280, 0x0, 0x0, 0x0, 0x0) 277.611906ms ago: executing program 7 (id=2735): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000002c0)="df3b46a13300000000000000f0000000000000f1bfb4aa068fc60c48ae2cd8ab1fcc903b7ebd3bf583aaa8d7c8db6df62ecfbbbf9d88e22299fc6bf8966fde2978d207040000001fc672f220fb612483c7392064f03ec88c0d80463164cc66bad573b1862f7e9dd8c88d2a5ad193407968b7cc9beb08c8754c9af20ed7b26b348cbec639fad8d724cedaa9836aa9d37d253071", 0x93}, {&(0x7f00000005c0)="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", 0xe30}], 0x5}, 0x40000) 276.819373ms ago: executing program 7 (id=2736): prctl$PR_SET_MM(0x4e, 0x8, &(0x7f00002d5000/0x3000)=nil) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xa4, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x6, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x12c}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x1, 0x0, &(0x7f0000000080)) 200.542567ms ago: executing program 7 (id=2737): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001000ffff70e59311dbba1cf6b9e211e1", @ANYRES32=0x0, @ANYBLOB="40910000000000005800128009000100626f6e64000000004800028008001400a59d000005000c000100000005000d0001000000050016000200000024000880e000000200000000ffffffffe000000264010101ac1414bbac1414aa7f00000108000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x88}}, 0x8000002) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000680)={0x20, 0x0, &(0x7f0000000640)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x1}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000100)={0x0, 0xc, {0xffffffffffffffff}, {0xee01}, 0x9, 0x9}) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) write$qrtrtun(r8, &(0x7f0000001d00)="b665faf6a0970462", 0x8) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 0s ago: executing program 7 (id=2738): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) close(0x3) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0xf5, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x2, 0xbd}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x2, 0x0, 0x20, 0x9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44a}}, {0x77, &(0x7f0000000140)=@string={0x77, 0x3, "4158b55167c6e6804a4336715967cb7c0866f09df548320a8d4566102686c3b60087727f5db90296d9888adb7ae3bb473a730b6cf7c9a39427bfa78d4028c9085fd85ce5c73b59f3d48ab1d0b24d868987b55030d1db3953fe80fee91f8b17931d4538a6d2f62e5ddbc54540e1eacaf48800974055"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}]}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x70d101, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ct channel medium [ 189.277042][T12138] netlink: 'syz.6.1817': attribute type 2 has an invalid length. [ 189.277678][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.279000][T12144] netlink: 'syz.6.1817': attribute type 2 has an invalid length. [ 189.279013][T12144] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1817'. [ 189.279660][T12138] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1817'. [ 189.295072][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.299761][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.306156][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.368058][T12155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.381682][ T5961] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 189.381694][ T5945] Bluetooth: hci0: command 0x0419 tx timeout [ 189.384326][T12157] dummy0: entered promiscuous mode [ 189.384400][T12157] dummy0: left allmulticast mode [ 189.758046][T12183] Invalid source name [ 189.758077][T12179] Invalid source name [ 189.760130][T12183] UBIFS error (pid: 12183): cannot open "/dev/sg0", error -22 [ 189.762093][T12179] UBIFS error (pid: 12179): cannot open "/dev/sg0", error -22 [ 189.857885][T12187] bridge_slave_1: left allmulticast mode [ 189.863915][T12187] bridge_slave_1: left promiscuous mode [ 189.866668][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.877487][T12187] bridge_slave_0: left allmulticast mode [ 189.880233][T12187] bridge_slave_0: left promiscuous mode [ 189.883099][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.401939][T12212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.476076][T12212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.903883][T12242] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.970512][T12251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12251 comm=syz.6.1850 [ 191.029840][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.035104][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.041855][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.044360][T12265] 9pnet_fd: Insufficient options for proto=fd [ 191.046194][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.052888][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.057565][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.064103][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.127533][T12269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.911008][T12285] tipc: Started in network mode [ 191.912696][T12285] tipc: Node identity d2eba2a2b85b, cluster identity 4711 [ 191.915099][T12285] tipc: Enabled bearer , priority 0 [ 191.931075][T12285] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 191.947899][T12284] tipc: Disabling bearer [ 192.247738][T12297] XFS (nullb0): Invalid superblock magic number [ 192.354515][ T6016] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 192.514122][ T6016] usb 12-1: Using ep0 maxpacket: 16 [ 192.520932][ T6016] usb 12-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 192.525524][ T6016] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.528455][ T6016] usb 12-1: Product: syz [ 192.530179][ T6016] usb 12-1: Manufacturer: syz [ 192.532282][ T6016] usb 12-1: SerialNumber: syz [ 192.536649][ T6016] usb 12-1: config 0 descriptor?? [ 192.592004][T12316] comedi comedi3: comedi_config --init_data is deprecated [ 192.594417][T12315] comedi comedi3: comedi_config --init_data is deprecated [ 192.622384][T12308] __nla_validate_parse: 6 callbacks suppressed [ 192.622396][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 192.688124][T12318] geneve3: entered promiscuous mode [ 192.690281][T12318] geneve3: entered allmulticast mode [ 192.692736][ T7111] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.696554][ T7111] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.701304][ T7111] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.705468][ T7111] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.711324][T12322] loop7: detected capacity change from 0 to 7 [ 192.771455][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 192.771466][ T40] audit: type=1400 audit(1759419236.196:45247): avc: denied { mounton } for pid=12321 comm="syz.8.1871" path="mnt:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 192.832418][T12325] netlink: 'syz.6.1872': attribute type 1 has an invalid length. [ 192.846159][T12325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.887635][T12322] Dev loop7: unable to read RDB block 7 [ 192.890690][T12322] loop7: unable to read partition table [ 192.893553][T12322] loop7: partition table beyond EOD, truncated [ 192.896463][T12322] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 192.975492][ T6016] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 192.981218][ T6016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.985753][ T6016] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 192.988875][ T6016] usb 12-1: media controller created [ 193.004073][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.136827][T12323] Dev loop7: unable to read RDB block 7 [ 193.140225][T12323] loop7: unable to read partition table [ 193.143373][T12323] loop7: partition table beyond EOD, truncated [ 193.208362][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.214861][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.220688][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.225566][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.233780][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.239481][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.245197][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.252176][ T40] audit: type=1400 audit(1759419236.645:45248): avc: denied { mounton } for pid=12286 comm="syz.7.1862" path="/proc/879/task" dev="proc" ino=54212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 193.306391][T12344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.316358][T12339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.318980][T12339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.321361][T12339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.329670][T12339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.334703][T12339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.336719][T12339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.344461][T12339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.381998][ T6016] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 193.385352][ T6016] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 193.896839][T12357] loop4: detected capacity change from 0 to 524287936 [ 193.929248][T12359] kernel profiling enabled (shift: 6) [ 194.049473][ T5996] usb 12-1: USB disconnect, device number 5 [ 194.092778][ T5996] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 194.458633][T12382] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 194.558524][T12389] sp0: Synchronizing with TNC [ 194.614979][ T40] audit: type=1400 audit(1759419237.917:45249): avc: denied { listen } for pid=12391 comm="syz.1.1890" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.793650][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1894'. [ 194.796756][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1894'. [ 194.799800][T12405] netlink: 'syz.8.1894': attribute type 19 has an invalid length. [ 194.843845][T12407] vlan0: entered promiscuous mode [ 194.846410][T12407] bond0: entered promiscuous mode [ 194.848088][T12407] bond_slave_0: entered promiscuous mode [ 194.850071][T12407] bond_slave_1: entered promiscuous mode [ 194.852212][T12407] vlan0: left allmulticast mode [ 194.853873][T12407] bond0: left allmulticast mode [ 194.855484][T12407] bond_slave_0: left allmulticast mode [ 194.857278][T12407] bond_slave_1: left allmulticast mode [ 194.861460][T12407] team0: Port device vlan0 added [ 194.864182][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1896'. [ 195.052495][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 195.539549][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.539601][ T5961] Bluetooth: hci1: command 0x0401 tx timeout [ 195.541054][ T62] Bluetooth: hci0: command 0x0419 tx timeout [ 195.864983][T12434] can: request_module (can-proto-0) failed. [ 195.873222][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 195.961187][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.222099][T12444] 9pnet_virtio: no channels available for device syz [ 197.763197][ T5961] Bluetooth: hci1: command 0x0401 tx timeout [ 197.763379][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.986732][ T5945] Bluetooth: hci1: command 0x0401 tx timeout [ 199.986771][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.230154][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.918868][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.325813][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1907'. [ 210.329378][T12453] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.358973][ T40] audit: type=1400 audit(1759419252.650:45250): avc: denied { setopt } for pid=12448 comm="syz.8.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 210.366760][ T40] audit: type=1326 audit(1759419252.650:45251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12449 comm="syz.7.1909" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0b18eec9 code=0x0 [ 210.418023][T12466] SELinux: policydb magic number 0x757c68fd does not match expected magic number 0xf97cff8c [ 210.423610][T12466] SELinux: failed to load policy [ 210.445156][ T40] audit: type=1400 audit(1759419252.715:45252): avc: denied { bind } for pid=12467 comm="syz.6.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.458049][ T40] audit: type=1400 audit(1759419252.734:45253): avc: denied { lock } for pid=12467 comm="syz.6.1914" path="socket:[57468]" dev="sockfs" ino=57468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.466623][T12470] dvmrp0: entered allmulticast mode [ 210.558503][ T40] audit: type=1400 audit(1759419252.828:45254): avc: denied { unmount } for pid=9540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 210.586862][T12477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12477 comm=syz.6.1918 [ 210.593723][ T40] audit: type=1400 audit(1759419252.865:45255): avc: denied { accept } for pid=12476 comm="syz.6.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.625594][ T40] audit: type=1400 audit(1759419252.902:45256): avc: denied { rename } for pid=12482 comm="syz.8.1920" name="file0" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.634115][ T40] audit: type=1400 audit(1759419252.902:45257): avc: denied { unlink } for pid=12482 comm="syz.8.1920" name="file1" dev="9p" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.665989][T12483] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 210.768349][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1921'. [ 211.068980][ T40] audit: type=1400 audit(1759419253.305:45258): avc: denied { sys_admin } for pid=12497 comm="syz.8.1925" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 211.081220][T12498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.591975][ T40] audit: type=1400 audit(1759419253.800:45259): avc: denied { write } for pid=12524 comm="syz.8.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 211.832031][T12540] random: crng reseeded on system resumption [ 211.918637][T12545] block nbd1: NBD_DISCONNECT [ 211.925536][T12544] block nbd1: Disconnected due to user request. [ 211.930034][T12544] block nbd1: shutting down sockets [ 212.116954][T12559] syz_tun (unregistering): left promiscuous mode [ 212.337674][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1946'. [ 212.496839][ T5996] libceph: connect (1)[c::]:6789 error -13 [ 212.499428][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 212.546924][ T54] libceph: connect (1)[c::]:6789 error -13 [ 212.550170][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 212.774697][ T5996] libceph: connect (1)[c::]:6789 error -13 [ 212.777860][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 212.829547][ T54] libceph: connect (1)[c::]:6789 error -13 [ 212.832415][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 213.297443][T12599] tmpfs: Bad value for 'mpol' [ 213.318684][ T5996] libceph: connect (1)[c::]:6789 error -13 [ 213.324073][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 213.371656][ T54] libceph: connect (1)[c::]:6789 error -13 [ 213.373973][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 213.374809][T12585] ceph: No mds server is up or the cluster is laggy [ 213.376121][T12588] ceph: No mds server is up or the cluster is laggy [ 213.509679][T12613] CIFS mount error: No usable UNC path provided in device string! [ 213.509679][T12613] [ 213.513967][T12613] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.529705][T12614] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1960'. [ 213.535726][T12614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 213.535726][T12614] program syz.7.1960 not setting count and/or reply_len properly [ 213.657975][T12624] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 213.662056][T12624] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 213.669374][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1964'. [ 213.792536][T12632] SELinux: syz.1.1967 (12632) set checkreqprot to 1. This is no longer supported. [ 213.842740][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1966'. [ 213.985168][T12643] binder: binder_mmap: 12642 200000ffc000-200001000000 bad vm_flags failed -1 [ 214.229976][T12653] macsec1: entered promiscuous mode [ 214.231851][T12653] macsec1: entered allmulticast mode [ 214.495388][T12683] bridge0: entered promiscuous mode [ 214.498207][T12683] macsec1: entered promiscuous mode [ 214.502443][T12683] bridge0: port 3(macsec1) entered blocking state [ 214.506054][T12683] bridge0: port 3(macsec1) entered disabled state [ 214.509610][T12683] macsec1: entered allmulticast mode [ 214.511524][T12683] bridge0: entered allmulticast mode [ 214.516604][T12683] macsec1: left allmulticast mode [ 214.518561][T12683] bridge0: left allmulticast mode [ 214.526898][T12683] bridge0: left promiscuous mode [ 214.622157][ T5996] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 214.782602][ T5996] usb 12-1: Using ep0 maxpacket: 32 [ 214.785652][ T5996] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.790503][ T5996] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.794944][ T5996] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 214.798096][ T5996] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.802438][ T5996] usb 12-1: config 0 descriptor?? [ 214.818336][ T10] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 214.869388][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.873538][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.978322][ T10] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.981591][ T10] usb 13-1: config 0 has no interface number 0 [ 214.984594][ T10] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.990580][ T10] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 214.995544][ T10] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 215.000718][ T10] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 215.004274][ T10] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 215.008789][ T10] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.015225][ T10] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.019171][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.032313][ T10] usb 13-1: config 0 descriptor?? [ 215.037268][T12686] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 215.041059][T12686] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 215.054569][ T10] ldusb 13-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 215.069315][T12693] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 215.070415][T12696] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1983'. [ 215.260432][ T5996] savu 0003:1E7D:2D5A.0009: hiddev2,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 215.267496][ T10] usb 13-1: USB disconnect, device number 4 [ 215.275781][ T10] ldusb 13-1:0.55: LD USB Device #1 now disconnected [ 215.407603][T12724] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 215.416859][T12724] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 215.426184][T12724] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 215.431435][T12724] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 215.493213][T12724] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 215.521845][T12724] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 215.531111][T12724] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 215.554224][T12724] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 215.563747][T12724] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 215.576405][T12724] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 216.002753][T12743] netlink: 'syz.8.1999': attribute type 1 has an invalid length. [ 216.039261][T12743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.044775][T12743] bond4: (slave bond5): making interface the new active one [ 216.047855][T12743] bond4: (slave bond5): Enslaving as an active interface with an up link [ 216.111143][T12746] binder: 12742:12746 ioctl c0306201 200000000000 returned -14 [ 216.114550][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 216.114566][ T40] audit: type=1400 audit(1759419258.028:45267): avc: denied { call } for pid=12742 comm="syz.8.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 216.118207][T12743] binder: 12742:12743 ioctl c0306201 200000000680 returned -14 [ 216.142358][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1999'. [ 216.147859][T12743] bond4: entered promiscuous mode [ 216.150539][T12743] bond5: entered promiscuous mode [ 216.153513][T12743] bond4: entered allmulticast mode [ 216.155282][T12743] bond5: entered allmulticast mode [ 216.157395][T12743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.239072][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.245462][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.251080][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.255347][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.261381][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.267472][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.274225][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.335501][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.409127][T12765] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 216.698686][ T5961] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 216.704879][T12787] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2014'. [ 216.797658][T12791] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 216.857466][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 216.864690][T12787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.870044][T12787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.875860][T12787] bond0 (unregistering): Released all slaves [ 217.093237][ T6016] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 217.108000][T12805] netlink: 'syz.1.2020': attribute type 29 has an invalid length. [ 217.112294][T12805] netlink: 'syz.1.2020': attribute type 29 has an invalid length. [ 217.117060][T12805] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2020'. [ 217.263396][ T6016] usb 11-1: Using ep0 maxpacket: 8 [ 217.267144][ T6016] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.270908][ T6016] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.275670][ T6016] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.280040][ T6016] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.285406][ T6016] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.288294][ T6016] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.296068][T12817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2024'. [ 217.345480][T12819] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 217.508777][ T6016] usb 11-1: GET_CAPABILITIES returned 0 [ 217.510696][ T6016] usbtmc 11-1:16.0: can't read capabilities [ 217.541258][ T54] usb 12-1: USB disconnect, device number 6 [ 217.563785][T12835] CIFS mount error: No usable UNC path provided in device string! [ 217.563785][T12835] [ 217.567334][T12835] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 217.567815][T12834] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2029'. [ 217.615820][T12843] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 218.056821][T12861] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 218.485715][ T54] usb 11-1: USB disconnect, device number 14 [ 218.628215][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 218.634642][T12872] batman_adv: batadv0: Removing interface: dummy0 [ 218.640622][T12872] bridge_slave_0: left allmulticast mode [ 218.642804][T12872] bridge_slave_0: left promiscuous mode [ 218.644677][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.653849][T12872] bridge_slave_1: left allmulticast mode [ 218.656728][T12872] bridge_slave_1: left promiscuous mode [ 218.659303][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.669895][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.672344][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.675895][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.678941][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.845087][ T6072] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 219.001139][T12895] input: syz1 as /devices/virtual/input/input21 [ 219.005311][ T6072] usb 13-1: Using ep0 maxpacket: 8 [ 219.007536][T12895] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 219.017076][ T6072] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.022678][ T6072] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.028363][ T6072] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.031487][ T6072] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.036254][ T6072] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.040264][ T6072] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.123947][ T40] audit: type=1400 audit(1759419260.844:45268): avc: denied { ioctl } for pid=12896 comm="syz.1.2048" path="socket:[60440]" dev="sockfs" ino=60440 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.138383][T12900] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 219.261659][ T6072] usb 13-1: GET_CAPABILITIES returned 0 [ 219.264870][ T6072] usbtmc 13-1:16.0: can't read capabilities [ 219.272666][T12926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.278275][T12926] IPv6: NLM_F_CREATE should be set when creating new route [ 219.281339][T12926] IPv6: NLM_F_CREATE should be set when creating new route [ 219.286643][T12926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.301900][ T40] audit: type=1400 audit(1759419261.012:45269): avc: denied { map } for pid=12925 comm="syz.7.2056" path="socket:[61471]" dev="sockfs" ino=61471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.310501][ T40] audit: type=1400 audit(1759419261.012:45270): avc: denied { read accept } for pid=12925 comm="syz.7.2056" path="socket:[61471]" dev="sockfs" ino=61471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.319669][ T40] audit: type=1800 audit(1759419261.022:45271): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2057" name="/" dev="9p" ino=2 res=0 errno=0 [ 219.539165][T12938] SELinux: unknown common  [ 219.543410][T12938] SELinux: failed to load policy [ 219.674801][T12959] tipc: Started in network mode [ 219.677048][T12959] tipc: Node identity 163fabfbc5ac, cluster identity 4711 [ 219.683918][T12959] tipc: Enabled bearer , priority 0 [ 219.688018][T12959] syzkaller0: entered promiscuous mode [ 219.693857][T12959] syzkaller0: entered allmulticast mode [ 219.716702][T12959] tipc: Resetting bearer [ 219.730703][T12958] tipc: Resetting bearer [ 219.759840][T12958] tipc: Disabling bearer [ 219.841901][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.846393][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.850612][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.854617][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.858496][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.863443][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.869346][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.930029][T12967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.077909][ T40] audit: type=1400 audit(1759419261.742:45272): avc: denied { create } for pid=12974 comm="syz.6.2071" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 220.428202][ T29] usb 13-1: USB disconnect, device number 5 [ 220.448659][ T5944] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 220.596550][T12990] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 220.609207][ T5944] usb 11-1: Using ep0 maxpacket: 32 [ 220.612293][ T5944] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 207, changing to 11 [ 220.617909][T12990] bond0: entered promiscuous mode [ 220.620150][ T5944] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1353, setting to 1024 [ 220.624662][ T5944] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.631539][T12990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.631946][ T5944] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 220.637881][ T5944] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 220.639287][T12990] unsupported nla_type 4111 [ 220.640792][ T5944] usb 11-1: Product: syz [ 220.643901][ T5944] usb 11-1: Manufacturer: syz [ 220.645456][ T5944] usb 11-1: SerialNumber: syz [ 220.649964][T12978] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 220.660158][ T5944] input: appletouch as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input22 [ 220.667922][T12990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.672791][ C2] appletouch 11-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 220.681341][T12990] bond0: (slave bond2): making interface the new active one [ 220.685876][T12990] bond2: entered promiscuous mode [ 220.689280][T12990] bond0: (slave bond2): Enslaving as an active interface with an up link [ 220.718067][T12990] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.723330][T12990] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 220.929904][T12978] f2fs: Unknown parameter 'norecoveryú”Øé~[eo€1ø)çåéîÚÏ6s©ŽÍ"å‚X“`›Iž„Æ4-wEÙ¯ÕªCî#Z÷µºÀóvaÔúq>•-]ãÃmC¿(æ3]×´Xþ¸™ [ 220.929904][T12978] x›^LòˉK÷ýq\ÿm (ïï­ß~:è\£S0@Ú@ÂÕD©Ì2šŒ€'õ‡Ü÷-yN ú˜>‚ÔnA(&6)é­ÅÿãNé¶t­žÎìh˜o„^ séóÐo [ 220.929904][T12978] Å?±RÛÊU[rÄ;PÃùh":é' [ 220.942108][T12978] nbd: must specify an index to disconnect [ 220.948745][ T6072] usb 11-1: USB disconnect, device number 15 [ 220.962267][ T6072] appletouch 11-1:1.0: input: appletouch disconnected [ 221.547503][T13007] netlink: 'syz.7.2082': attribute type 13 has an invalid length. [ 221.551801][T13007] netlink: 'syz.7.2082': attribute type 17 has an invalid length. [ 221.564526][T13007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 221.574376][T13007] 9pnet_virtio: no channels available for device syz [ 221.578339][ T40] audit: type=1400 audit(1759419263.136:45273): avc: denied { create } for pid=13005 comm="syz.7.2082" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.596657][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2083'. [ 221.631625][ T40] audit: type=1400 audit(1759419263.192:45274): avc: denied { unlink } for pid=9283 comm="syz-executor" name="file0" dev="tmpfs" ino=1806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.654791][ T40] audit: type=1400 audit(1759419263.211:45275): avc: denied { connect } for pid=13016 comm="syz.7.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.659398][T13018] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 221.662794][ T40] audit: type=1400 audit(1759419263.220:45276): avc: denied { shutdown } for pid=13017 comm="syz.6.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.805597][ T40] audit: type=1400 audit(1759419263.351:45277): avc: denied { accept } for pid=13030 comm="syz.1.2089" path="socket:[59856]" dev="sockfs" ino=59856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.891678][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.898508][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.904159][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.910899][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.919230][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.924592][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.930587][T13034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.955882][ T10] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 221.995225][T13038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.128266][ T10] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.131171][ T10] usb 11-1: config 0 has no interface number 0 [ 222.133855][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 222.137394][ T10] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 222.142107][ T10] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.145886][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.157124][ T10] usb 11-1: config 0 descriptor?? [ 222.159793][T13024] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 222.165745][ T10] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 222.393526][T13024] netlink: 'syz.6.2086': attribute type 4 has an invalid length. [ 222.399275][T13025] netlink: 'syz.6.2086': attribute type 4 has an invalid length. [ 222.404710][ T10] usb 11-1: USB disconnect, device number 16 [ 222.520067][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2098'. [ 222.523813][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2098'. [ 222.939407][ T6072] usb 13-1: new low-speed USB device number 6 using dummy_hcd [ 223.047198][ T40] audit: type=1326 audit(1759419264.520:45278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.6.2100" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5da858eec9 code=0x0 [ 223.051705][T13068] hpfs: Bad magic ... probably not HPFS [ 223.112162][ T6072] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.115648][ T6072] usb 13-1: config 0 has no interface number 0 [ 223.118598][ T6072] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.124236][ T6072] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 223.128492][ T6072] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.132177][ T6072] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.137093][ T6072] usb 13-1: config 0 descriptor?? [ 223.143220][T13065] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 223.149007][ T6072] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 223.152517][ T40] audit: type=1400 audit(1759419264.604:45279): avc: denied { append } for pid=13071 comm="syz.6.2102" name="hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.164527][ T40] audit: type=1400 audit(1759419264.623:45280): avc: denied { execute } for pid=13071 comm="syz.6.2102" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.220601][ T40] audit: type=1400 audit(1759419264.679:45281): avc: denied { watch } for pid=13082 comm="syz.7.2105" path="/343/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 223.234964][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2105'. [ 223.360726][T13083] hsr_slave_1 (unregistering): left promiscuous mode [ 223.365176][ T5944] usb 13-1: USB disconnect, device number 6 [ 223.482980][ T40] audit: type=1400 audit(1759419264.922:45282): avc: denied { getopt } for pid=13091 comm="syz.7.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.565097][T13099] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 223.604111][T13104] dlm: Unknown command passed to DLM device : 255 [ 223.604111][T13104] [ 223.619367][T13105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.634803][T13108] atomic_op ffff8880556f9998 conn xmit_atomic 0000000000000000 [ 223.707466][T13108] syz.1.2113 (13108): drop_caches: 2 [ 223.777685][T13120] cgroup: noprefix used incorrectly [ 223.851987][T13128] IPVS: persistence engine module ip_vs_pe_s not found [ 223.871714][T13125] IPVS: persistence engine module ip_vs_pe_s not found [ 223.873771][ T5944] libceph: connect (1)[c::]:6789 error -13 [ 223.894273][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 223.915443][T13136] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 224.099062][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2124'. [ 224.122330][T13149] netfs: Couldn't get user pages (rc=-14) [ 224.179738][ T5944] libceph: connect (1)[c::]:6789 error -13 [ 224.182062][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 224.484980][T13180] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 224.738399][ T5944] libceph: connect (1)[c::]:6789 error -13 [ 224.741623][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 224.742357][T13132] ceph: No mds server is up or the cluster is laggy [ 225.120106][T13202] autofs: Bad value for 'fd' [ 225.175262][ T10] usb 11-1: new low-speed USB device number 17 using dummy_hcd [ 225.234932][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2140'. [ 225.238523][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2140'. [ 225.238536][T13208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13208 comm=syz.7.2140 [ 225.242055][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2140'. [ 225.251594][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2140'. [ 225.255714][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2140'. [ 225.337915][ T10] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.340741][T13220] netlink: 'syz.7.2143': attribute type 1 has an invalid length. [ 225.341544][ T10] usb 11-1: config 0 has no interface number 0 [ 225.341585][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.354556][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 225.362909][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 225.365078][T13220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 225.370344][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 225.379704][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 225.384696][ T10] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.391705][ T10] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.396349][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.406898][ T10] usb 11-1: config 0 descriptor?? [ 225.411575][T13196] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 225.414553][T13196] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 225.430832][ T10] ldusb 11-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 225.527454][T13241] netlink: 'syz.8.2150': attribute type 2 has an invalid length. [ 225.639916][ T10] usb 11-1: USB disconnect, device number 17 [ 225.646364][ T10] ldusb 11-1:0.55: LD USB Device #1 now disconnected [ 225.794028][ T6072] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 225.930408][T13270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13270 comm=syz.1.2160 [ 225.943497][ T6072] usb 12-1: device descriptor read/64, error -71 [ 226.222493][ T6072] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 226.239979][T13296] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 226.253977][T13296] ./file0: Can't lookup blockdev [ 226.363246][ T6072] usb 12-1: device descriptor read/64, error -71 [ 226.381779][ C1] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 226.386722][ C1] sr 2:0:0:0: [sr0] tag#14 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 226.405290][T13308] syz_tun: entered allmulticast mode [ 226.478318][ T6072] usb usb12-port1: attempt power cycle [ 226.610734][T13307] syz_tun: left allmulticast mode [ 226.769408][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.774977][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.781137][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.787137][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.793526][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.799511][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.806096][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.863088][ T6072] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 226.867020][T13325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.895474][ T6072] usb 12-1: device descriptor read/8, error -71 [ 227.061429][T13331] netlink: 'syz.8.2177': attribute type 7 has an invalid length. [ 227.064782][T13331] netlink: 'syz.8.2177': attribute type 8 has an invalid length. [ 227.069604][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 227.069619][ T40] audit: type=1400 audit(1759419268.280:45369): avc: denied { create } for pid=13330 comm="syz.8.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.083204][ T40] audit: type=1400 audit(1759419268.280:45370): avc: denied { write } for pid=13330 comm="syz.8.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.119143][ T40] audit: type=1400 audit(1759419268.318:45371): avc: denied { connect } for pid=13332 comm="syz.8.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.162336][ T6072] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 227.180338][ T40] audit: type=1400 audit(1759419268.374:45372): avc: denied { read write } for pid=13332 comm="syz.8.2178" name="video6" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.185476][ T6072] usb 12-1: device descriptor read/8, error -71 [ 227.191603][ T40] audit: type=1400 audit(1759419268.374:45373): avc: denied { open } for pid=13332 comm="syz.8.2178" path="/dev/video6" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.204649][ T40] audit: type=1400 audit(1759419268.393:45374): avc: denied { ioctl } for pid=13332 comm="syz.8.2178" path="/dev/video6" dev="devtmpfs" ino=962 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.215590][ T40] audit: type=1400 audit(1759419268.393:45375): avc: denied { create } for pid=13332 comm="syz.8.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.224075][ T40] audit: type=1400 audit(1759419268.393:45376): avc: denied { connect } for pid=13332 comm="syz.8.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.283957][T13345] __nla_validate_parse: 65 callbacks suppressed [ 227.283975][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'. [ 227.301410][ T6072] usb usb12-port1: unable to enumerate USB device [ 227.308030][ T40] audit: type=1400 audit(1759419268.496:45377): avc: denied { ioctl } for pid=13346 comm="syz.8.2183" path="socket:[62690]" dev="sockfs" ino=62690 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.322891][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2180'. [ 227.323903][ T40] audit: type=1400 audit(1759419268.514:45378): avc: denied { read append } for pid=13346 comm="syz.8.2183" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.444980][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2184'. [ 227.449881][T13350] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2184'. [ 227.707528][ T6072] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 227.869405][ T6072] usb 13-1: config 1 has an invalid interface number: 7 but max is 0 [ 227.871995][ T6072] usb 13-1: config 1 has no interface number 0 [ 227.874149][ T6072] usb 13-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 227.877714][ T6072] usb 13-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 8 [ 227.880981][ T6072] usb 13-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.887130][ T6072] usb 13-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 227.890761][ T6072] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.893820][ T6072] usb 13-1: Product: syz [ 227.895241][ T6072] usb 13-1: Manufacturer: syz [ 227.896833][ T6072] usb 13-1: SerialNumber: syz [ 227.901786][T13350] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 228.122399][T13350] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 228.318901][T13358] usb usb8: usbfs: process 13358 (syz.6.2188) did not claim interface 0 before use [ 228.335172][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.338821][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.343448][T13361] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 228.358868][ T6072] sierra_net 13-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 228.380674][T13361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.389346][T13361] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 228.395537][T13361] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 228.401683][T13361] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 228.427689][T13361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.437762][T13361] vlan0: entered allmulticast mode [ 228.439960][T13361] veth1: entered allmulticast mode [ 228.442301][T13361] bond3: (slave vlan0): Opening slave failed [ 228.559058][ T5945] Bluetooth: hci2: unexpected event for opcode 0x7f0c [ 228.559855][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2184'. [ 228.569260][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.572961][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.635179][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2195'. [ 228.639527][ T6072] sierra_net 13-1:1.7 wwan0: Submit SYNC failed -71 [ 228.639554][ T6072] sierra_net 13-1:1.7 wwan0: Send SYNC failed, status -71 [ 228.640019][ T6072] sierra_net 13-1:1.7 wwan0: Submit SYNC failed -71 [ 228.643496][T13380] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 228.646934][ T6072] sierra_net 13-1:1.7 wwan0: Send SYNC failed, status -71 [ 228.653987][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.659671][ T6072] usb 13-1: USB disconnect, device number 7 [ 228.663423][ T6072] sierra_net 13-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem [ 228.738415][ T6072] sierra_net 13-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 228.775953][T13385] fuse: Unknown parameter '000000000000000000001130x0000000000000006' [ 228.826194][T13390] Bluetooth: MGMT ver 1.23 [ 229.021158][T13398] veth1_macvtap: left promiscuous mode [ 229.024002][T13398] macsec0: entered promiscuous mode [ 229.026232][T13398] macsec0: entered allmulticast mode [ 229.032107][T13398] veth1_macvtap: entered promiscuous mode [ 229.035248][T13398] veth1_macvtap: entered allmulticast mode [ 229.037908][T13398] macsec0: left promiscuous mode [ 229.040165][T13398] macsec0: left allmulticast mode [ 229.042487][T13398] veth1_macvtap: left allmulticast mode [ 229.196320][ T70] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 229.354156][ T70] usb 11-1: Using ep0 maxpacket: 8 [ 229.358443][ T70] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 229.361433][ T70] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.365471][ T70] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.368530][ T70] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.371670][ T70] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.376276][ T70] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.379544][ T70] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.603092][ T70] usb 11-1: GET_CAPABILITIES returned 0 [ 229.605185][ T70] usbtmc 11-1:16.0: can't read capabilities [ 229.605444][T13417] SELinux: syz.6.2201 (13417) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 229.724515][T13431] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 229.727186][T13431] UDF-fs: Scanning with blocksize 2048 failed [ 229.730862][T13431] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 229.733324][T13431] UDF-fs: Scanning with blocksize 4096 failed [ 229.743554][T13432] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 229.746487][T13432] UDF-fs: Scanning with blocksize 2048 failed [ 229.749743][T13432] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 229.752279][T13432] UDF-fs: Scanning with blocksize 4096 failed [ 230.315316][T13469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13469 comm=syz.8.2219 [ 230.326764][T13469] tipc: Started in network mode [ 230.329315][T13469] tipc: Node identity 05000000000000004879ffffffffffff, cluster identity 4711 [ 230.345054][T13469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=13469 comm=syz.8.2219 [ 230.422007][ T5945] Bluetooth: hci1: adv larger than maximum supported [ 230.422131][ T5945] Bluetooth: hci1: Malformed LE Event: 0x0d [ 230.459242][T13478] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 230.463740][T13478] SELinux: failed to load policy [ 230.505909][T13481] loop6: detected capacity change from 0 to 63 [ 230.512009][T13481] buffer_io_error: 27 callbacks suppressed [ 230.512027][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.518217][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.522170][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.525982][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.529295][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.536235][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.539152][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.542981][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.546300][T13481] ldm_validate_partition_table(): Disk read failed. [ 230.548716][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.551555][T13481] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.554817][T13481] Dev loop6: unable to read RDB block 0 [ 230.557183][T13481] loop6: unable to read partition table [ 230.559733][T13481] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 230.595802][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2226'. [ 230.860838][T13493] 9pnet_fd: Insufficient options for proto=fd [ 230.908732][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.908860][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.913315][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.916534][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.920793][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.924435][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.929549][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.934880][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.936646][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.943126][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.946371][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.951124][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.954904][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.959017][T13496] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.963259][T13495] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.964246][T13497] loop6: detected capacity change from 0 to 63 [ 231.167320][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2234'. [ 231.805762][T13539] overlayfs: failed to resolve './bus': -2 [ 231.983880][T13552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=13552 comm=syz.1.2247 [ 231.995087][T13552] geneve3: entered promiscuous mode [ 232.180168][T13567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13567 comm=syz.1.2252 [ 232.276855][T13574] binder: 13573:13574 ioctl 80045113 200000000180 returned -22 [ 232.515815][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 232.515834][ T40] audit: type=1400 audit(1759419273.369:45467): avc: denied { connect } for pid=13577 comm="syz.8.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.733082][T13592] netlink: 'syz.8.2262': attribute type 1 has an invalid length. [ 232.747384][T13592] bond6: entered promiscuous mode [ 232.749546][T13592] bond6: entered allmulticast mode [ 232.754877][T13592] macsec0: entered promiscuous mode [ 232.756687][T13592] macsec0: entered allmulticast mode [ 232.758556][T13592] veth1_macvtap: entered allmulticast mode [ 232.910927][T13602] SELinux: security policydb version 17 (MLS) not backwards compatible [ 232.915247][T13602] SELinux: failed to load policy [ 232.950125][ T40] audit: type=1400 audit(1759419273.781:45468): avc: denied { audit_write } for pid=13603 comm="syz.8.2267" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 233.092622][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 233.097925][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.164952][ T40] audit: type=1400 audit(1759419273.977:45469): avc: denied { listen } for pid=13614 comm="syz.8.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.165469][T13615] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.2271'. [ 233.184812][ T40] audit: type=1400 audit(1759419273.996:45470): avc: denied { append } for pid=13624 comm="syz.1.2274" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 233.264532][ T40] audit: type=1400 audit(1759419274.071:45471): avc: denied { shutdown } for pid=13630 comm="syz.8.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.276398][ T40] audit: type=1400 audit(1759419274.071:45472): avc: denied { read } for pid=13630 comm="syz.8.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.302840][ T40] audit: type=1400 audit(1759419274.108:45473): avc: denied { read } for pid=13629 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.376039][ T40] audit: type=1400 audit(1759419274.183:45474): avc: denied { create } for pid=13633 comm="syz.8.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.384589][ T40] audit: type=1400 audit(1759419274.183:45475): avc: denied { connect } for pid=13633 comm="syz.8.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.393415][ T40] audit: type=1400 audit(1759419274.183:45476): avc: denied { write } for pid=13633 comm="syz.8.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.429035][T13635] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.594996][T13635] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.685328][ T5945] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 233.687332][T13659] SELinux: syz.7.2285 (13659) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 233.730721][T13635] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.850697][T13635] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.963257][ T7111] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.974338][ T7111] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.987277][ T7111] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.998861][ T7111] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.240086][T13674] usb usb9: usbfs: process 13674 (syz.8.2288) did not claim interface 1 before use [ 234.421532][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2290'. [ 234.450166][T13684] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2291'. [ 234.527557][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.533455][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.539546][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.546385][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.552424][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.558137][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.566335][T13696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.630369][T13701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.983638][ T54] usb 11-1: USB disconnect, device number 18 [ 235.076836][T13716] input: syz1 as /devices/virtual/input/input26 [ 235.330822][T13723] netlink: 'syz.6.2303': attribute type 2 has an invalid length. [ 235.634668][ T5944] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 235.638562][ T5944] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 235.696928][T13735] binder: 13734:13735 ioctl c0306201 200000000000 returned -14 [ 236.985607][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2323'. [ 236.992065][T13735] Set syz1 is full, maxelem 65536 reached [ 237.083302][T13798] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 237.088486][T13798] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2326'. [ 237.108536][T13798] syz.8.2326 (13798): drop_caches: 2 [ 237.250085][T13810] tipc: Can't bind to reserved service type 2 [ 237.311896][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 3584 [ 237.456130][T13826] binder: 13824:13826 ioctl c0306201 0 returned -14 [ 237.844120][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 237.892658][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 237.892677][ T40] audit: type=1400 audit(1759419278.401:45515): avc: denied { mount } for pid=13848 comm="syz.1.2341" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 237.950222][ T40] audit: type=1400 audit(1759419278.458:45516): avc: denied { mounton } for pid=13848 comm="syz.1.2341" path="/581/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 237.980521][ T40] audit: type=1400 audit(1759419278.476:45517): avc: denied { mount } for pid=13848 comm="syz.1.2341" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 237.983476][T13850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.011897][ T1244] Bluetooth: Error in BCSP hdr checksum [ 238.119683][T13853] tmpfs: Unknown parameter 'nr_Önodes' [ 238.125680][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2342'. [ 238.129952][T13853] x_tables: ip_tables: udp match: only valid for protocol 17 [ 238.224436][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2343'. [ 238.227903][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2343'. [ 238.282817][ T1244] Bluetooth: Error in BCSP hdr checksum [ 238.510390][ T40] audit: type=1400 audit(1759419278.972:45518): avc: denied { bind } for pid=13864 comm="syz.6.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.549550][ T40] audit: type=1400 audit(1759419279.019:45519): avc: denied { write } for pid=13868 comm="syz.8.2347" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.551332][T13869] binder: 13868:13869 ioctl 80089418 2000000053c0 returned -22 [ 238.558572][ T40] audit: type=1400 audit(1759419279.019:45520): avc: denied { map } for pid=13868 comm="syz.8.2347" path="socket:[65979]" dev="sockfs" ino=65979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.558629][ T40] audit: type=1400 audit(1759419279.019:45521): avc: denied { read } for pid=13868 comm="syz.8.2347" path="socket:[65979]" dev="sockfs" ino=65979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.567021][ T40] audit: type=1400 audit(1759419279.028:45522): avc: denied { setopt } for pid=13870 comm="syz.6.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.570857][ T7111] Bluetooth: Error in BCSP hdr checksum [ 238.651357][ T40] audit: type=1400 audit(1759419279.112:45523): avc: denied { map } for pid=13875 comm="syz.8.2350" path="socket:[63240]" dev="sockfs" ino=63240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 238.661869][T13876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=13876 comm=syz.8.2350 [ 239.172971][ T40] audit: type=1400 audit(1759419279.599:45524): avc: denied { create } for pid=13891 comm="syz.7.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 239.217554][T13896] random: crng reseeded on system resumption [ 239.224419][T13896] Restarting kernel threads ... [ 239.226893][T13896] Done restarting kernel threads. [ 239.856484][T13925] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 239.859208][T13925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.862281][T13925] vhci_hcd vhci_hcd.0: Device attached [ 239.869506][T13928] vhci_hcd vhci_hcd.0: port 0 already used [ 239.875185][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 239.877734][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.880436][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.887066][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(11) [ 239.889980][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.893399][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.901442][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(13) [ 239.905218][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.909659][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.909844][T13918] delete_channel: no stack [ 239.913757][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 239.916909][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.920641][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.927272][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(17) [ 239.930637][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.933825][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.940722][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(21) [ 239.943837][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.947804][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.956553][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(23) [ 239.959472][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.963200][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.968785][T13928] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(25) [ 239.971832][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.976838][T13928] vhci_hcd vhci_hcd.0: Device attached [ 239.994203][T13942] vhci_hcd: connection closed [ 239.994271][T13940] vhci_hcd: connection closed [ 239.994521][ T7099] vhci_hcd: stop threads [ 239.995331][T13935] vhci_hcd: connection closed [ 239.996413][T13944] vhci_hcd: connection closed [ 239.997921][T13937] vhci_hcd: connection closed [ 239.998098][T13926] vhci_hcd: connection closed [ 239.998336][ T7099] vhci_hcd: release socket [ 239.998714][T13933] vhci_hcd: connection closed [ 240.000029][T13931] vhci_hcd: connection closed [ 240.006314][T13946] vhci_hcd: connection closed [ 240.006787][ T7099] vhci_hcd: disconnect device [ 240.017660][ T7099] vhci_hcd: stop threads [ 240.019350][ T7099] vhci_hcd: release socket [ 240.021021][ T7099] vhci_hcd: disconnect device [ 240.022843][ T7099] vhci_hcd: stop threads [ 240.024450][ T7099] vhci_hcd: release socket [ 240.026247][ T7099] vhci_hcd: disconnect device [ 240.028159][ T7099] vhci_hcd: stop threads [ 240.029725][ T7099] vhci_hcd: release socket [ 240.031317][ T7099] vhci_hcd: disconnect device [ 240.033047][ T7099] vhci_hcd: stop threads [ 240.034828][ T7099] vhci_hcd: release socket [ 240.036590][ T7099] vhci_hcd: disconnect device [ 240.038547][ T7099] vhci_hcd: stop threads [ 240.040222][ T7099] vhci_hcd: release socket [ 240.041968][ T7099] vhci_hcd: disconnect device [ 240.043677][ T7099] vhci_hcd: stop threads [ 240.045248][ T7099] vhci_hcd: release socket [ 240.046844][ T7099] vhci_hcd: disconnect device [ 240.048822][ T7099] vhci_hcd: stop threads [ 240.050520][ T7099] vhci_hcd: release socket [ 240.052214][ T7099] vhci_hcd: disconnect device [ 240.053900][ T7099] vhci_hcd: stop threads [ 240.055479][ T7099] vhci_hcd: release socket [ 240.056950][ T7099] vhci_hcd: disconnect device [ 240.183483][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 240.183519][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 240.330877][T13959] fuse: Bad value for 'fd' [ 240.441447][T13961] __nla_validate_parse: 21 callbacks suppressed [ 240.441458][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 240.631637][ T5996] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.650593][ T5996] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 241.107831][T13987] tmpfs: Unknown parameter 'mpoØÉl' [ 241.112564][T13987] syzkaller0: entered promiscuous mode [ 241.115293][T13987] syzkaller0: entered allmulticast mode [ 241.213591][T13996] netlink: 328 bytes leftover after parsing attributes in process `syz.8.2378'. [ 241.223401][T13996] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2378'. [ 241.351939][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2383'. [ 241.371217][T14011] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.382029][T14011] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 241.387320][T14011] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.802059][T14038] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 241.858324][T14043] tipc: Failed to remove unknown binding: 66,1,1/0:4223897834/4223897836 [ 241.871841][T14043] tipc: Failed to remove unknown binding: 66,1,1/0:4223897834/4223897836 [ 241.876289][T14043] tipc: Failed to remove unknown binding: 66,1,1/0:4223897834/4223897836 [ 242.035632][T14068] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 242.154451][T14085] IPVS: set_ctl: invalid protocol: 29287 0.0.0.0:0 [ 242.163946][T14085] IPVS: set_ctl: invalid protocol: 29287 0.0.0.0:0 [ 242.166958][T14085] IPVS: set_ctl: invalid protocol: 29287 0.0.0.0:0 [ 242.231851][T14096] fuse: Unknown parameter 'ro\A¤U;Œ’0000000000000000100000' [ 242.234805][T14096] fuse: Unknown parameter 'ro\A¤U;Œ’0000000000000000100000' [ 242.239632][T14096] fuse: Unknown parameter 'ro\A¤U;Œ’0000000000000000100000' [ 242.242448][T14096] fuse: Unknown parameter 'ro\A¤U;Œ’0000000000000000100000' [ 242.723898][ T5945] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 242.874467][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2426'. [ 242.881507][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2426'. [ 242.998875][T14163] netlink: 'syz.8.2428': attribute type 30 has an invalid length. [ 243.072916][T14174] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 243.137759][T14176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.142092][T14176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.152379][T14176] policy can only be matched on NF_INET_PRE_ROUTING [ 243.152397][T14176] unable to load match [ 243.166207][ T54] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 243.239966][T14184] netlink: 'syz.7.2435': attribute type 3 has an invalid length. [ 243.243093][T14184] netlink: 'syz.7.2435': attribute type 1 has an invalid length. [ 243.245772][T14184] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2435'. [ 243.248834][T14184] NCSI netlink: No device for ifindex 33022 [ 243.340213][ T54] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.343123][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.345749][ T54] usb 11-1: Product: syz [ 243.347310][ T54] usb 11-1: Manufacturer: syz [ 243.352810][ T54] usb 11-1: SerialNumber: syz [ 243.359855][ T54] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.373730][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 243.373745][ T40] audit: type=1400 audit(1759419283.527:45578): avc: denied { firmware_load } for pid=6072 comm="kworker/2:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 243.394250][ T6072] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.500709][T14190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14190 comm=syz.7.2437 [ 243.550992][ T40] audit: type=1400 audit(1759419283.696:45579): avc: denied { bind } for pid=14191 comm="syz.8.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.558040][ T40] audit: type=1400 audit(1759419283.696:45580): avc: denied { name_bind } for pid=14191 comm="syz.8.2438" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 243.567722][ T40] audit: type=1400 audit(1759419283.696:45581): avc: denied { node_bind } for pid=14191 comm="syz.8.2438" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 243.620133][T14194] xt_HMARK: spi-set and port-set can't be combined [ 243.742120][ T40] audit: type=1400 audit(1759419283.864:45582): avc: denied { bind } for pid=14204 comm="syz.7.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.004338][ T40] audit: type=1400 audit(1759419284.117:45583): avc: denied { bind } for pid=14211 comm="syz.7.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.093615][T14215] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 244.100336][T14216] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 244.267194][ T5944] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 244.427691][ T5944] usb 12-1: Using ep0 maxpacket: 8 [ 244.431991][ T5944] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 244.436144][ T5944] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.441035][ T5944] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.445203][ T5944] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32800, setting to 1024 [ 244.450756][ T5944] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.456169][ T5944] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.463410][ T5944] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.467250][ T5944] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.540397][T14223] overlayfs: missing 'lowerdir' [ 244.570831][ T40] audit: type=1400 audit(1759419284.650:45584): avc: denied { execute } for pid=14225 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 244.596965][ T40] audit: type=1400 audit(1759419284.650:45585): avc: denied { execute_no_trans } for pid=14225 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 244.633792][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.635246][ T6016] usb 6-1: USB disconnect, device number 15 [ 244.642902][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.649869][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.656987][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.662292][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.668863][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.677850][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.694859][ T5944] usb 12-1: usb_control_msg returned -32 [ 244.697516][ T5944] usbtmc 12-1:16.0: can't read capabilities [ 244.716564][ T6072] usb 11-1: Service connection timeout for: 256 [ 244.719341][ T6072] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.742221][ T6072] ath9k_htc: Failed to initialize the device [ 244.747017][T14228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.754216][ T6072] usb 11-1: ath9k_htc: USB layer deinitialized [ 244.778513][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.785063][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.791150][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.796392][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.799546][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.811951][ T40] audit: type=1400 audit(1759419284.865:45586): avc: denied { mounton } for pid=14229 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 244.923964][T14229] chnl_net:caif_netlink_parms(): no params data found [ 245.034115][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.038061][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.041214][T14229] bridge_slave_0: entered allmulticast mode [ 245.045165][T14229] bridge_slave_0: entered promiscuous mode [ 245.052481][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.055374][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.058113][T14229] bridge_slave_1: entered allmulticast mode [ 245.061211][T14229] bridge_slave_1: entered promiscuous mode [ 245.072995][T14237] usbtmc 12-1:16.0: control status returned 0 [ 245.099389][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.104765][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.144030][T14229] team0: Port device team_slave_0 added [ 245.149846][T14229] team0: Port device team_slave_1 added [ 245.205537][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.208919][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.221722][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.228934][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.232380][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.243503][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.318216][T14229] hsr_slave_0: entered promiscuous mode [ 245.321467][T14229] hsr_slave_1: entered promiscuous mode [ 245.324352][T14229] debugfs: 'hsr0' already exists in 'hsr' [ 245.328178][T14229] Cannot create hsr debugfs directory [ 245.488747][T14229] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.492167][T14229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.584428][T14229] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.587527][T14229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.654874][T14229] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.659474][T14229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.725286][T14229] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.728914][T14229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.857556][T14229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.865532][T14229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.872989][T14229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.885748][T14229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.959458][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.982249][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.990981][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.993927][ T7111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.005210][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.008294][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.157803][ T70] usb 11-1: USB disconnect, device number 19 [ 246.176793][ T40] audit: type=1400 audit(1759419286.147:45587): avc: denied { create } for pid=14248 comm="syz.8.2451" name="#60" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.198600][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.234407][T14252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2452'. [ 246.275642][T14229] veth0_vlan: entered promiscuous mode [ 246.328208][T14229] veth1_vlan: entered promiscuous mode [ 246.349378][T14229] veth0_macvtap: entered promiscuous mode [ 246.351363][T14257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14257 comm=syz.8.2453 [ 246.355796][T14229] veth1_macvtap: entered promiscuous mode [ 246.369569][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.378134][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.386843][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.391347][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.403613][ T7096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.413832][ T7096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.466610][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.474570][ T7111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.477810][ T7111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.495964][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.499407][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.501381][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.503347][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.509008][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.516046][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.520666][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.527315][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.576863][T14272] SELinux: ebitmap start bit (20) is not a multiple of the map unit size (64) [ 246.589175][T14272] SELinux: failed to load policy [ 246.589234][T14277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.633697][T14279] batadv0: entered promiscuous mode [ 246.635760][T14279] macvtap1: entered promiscuous mode [ 246.638210][T14279] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 246.642940][T14279] batadv0: left promiscuous mode [ 246.751198][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.754285][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.757263][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.761179][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.765483][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.768606][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.771831][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.775615][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.782495][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.785683][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.788610][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.791774][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.795518][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.798969][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.802861][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.807056][T14288] usb usb9: usbfs: process 14288 (syz.8.2462) did not claim interface 16 before use [ 246.885204][T14292] sp0: Synchronizing with TNC [ 246.890224][T14291] [U] è [ 246.957352][T14296] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 247.026872][ T62] Bluetooth: hci4: command tx timeout [ 247.031308][ T5945] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 247.035885][ T5945] Bluetooth: hci2: Injecting HCI hardware error event [ 247.044671][T14304] binder_alloc: 14303: binder_alloc_buf size 12528 failed, no address space [ 247.049569][T14304] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 247.092613][T14306] random: crng reseeded on system resumption [ 247.152495][ T70] usb 12-1: USB disconnect, device number 11 [ 247.579277][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2477'. [ 247.588065][ C3] vcan0: j1939_xtp_rx_dat: no tx connection found [ 247.591448][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.595018][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.598197][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.601468][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.605279][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.608759][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.612088][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.614941][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.617735][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.620252][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.622761][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.625340][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.628011][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.630515][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.632966][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.635538][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.638750][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 248.041504][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2485'. [ 248.068159][T14351] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2485'. [ 248.072078][T14351] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2485'. [ 248.083062][T14351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.145540][T14358] loop4: detected capacity change from 0 to 128 [ 248.221006][T14364] netlink: 'syz.7.2489': attribute type 29 has an invalid length. [ 248.283617][T14365] netlink: 'syz.7.2489': attribute type 29 has an invalid length. [ 248.288448][T14365] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2489'. [ 248.353920][T14364] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.413887][T14364] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.425881][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.432349][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.439342][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.443680][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.448046][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.453460][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.460376][T14367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.474332][T14364] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.523774][T14368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.542882][T14364] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.629267][ T7111] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.636420][ T7111] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.648519][ T7111] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.662250][ T7111] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.711064][T14370] bond0: entered promiscuous mode [ 248.713181][T14370] bond_slave_0: entered promiscuous mode [ 248.717581][T14370] bond_slave_1: entered promiscuous mode [ 248.722422][T14370] batadv0: entered promiscuous mode [ 248.726173][T14370] debugfs: 'hsr1' already exists in 'hsr' [ 248.728736][T14370] Cannot create hsr debugfs directory [ 248.731877][T14370] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 248.738100][T14370] bond0: left promiscuous mode [ 248.740297][T14370] bond_slave_0: left promiscuous mode [ 248.742335][T14370] bond_slave_1: left promiscuous mode [ 248.744754][T14370] batadv0: left promiscuous mode [ 248.761986][T14371] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2491'. [ 248.765871][T14371] IPv6: Can't replace route, no match found [ 248.859754][T14373] fuse: Unknown parameter 'fdåq‘–ø$‘ë' [ 248.887288][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 248.887308][ T40] audit: type=1326 audit(1759419288.691:45615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.6.2482" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5da858eec9 code=0x7fc00000 [ 248.902193][ T5945] Bluetooth: hci1: unexpected event for opcode 0xe8d5 [ 248.921159][ T40] audit: type=1400 audit(1759419288.719:45616): avc: denied { connect } for pid=14380 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.929570][ T40] audit: type=1400 audit(1759419288.719:45617): avc: denied { shutdown } for pid=14380 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.182447][ T54] usb 12-1: new low-speed USB device number 12 using dummy_hcd [ 249.242196][T14394] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.259793][ T5945] Bluetooth: hci4: command tx timeout [ 249.345335][ T54] usb 12-1: Invalid ep0 maxpacket: 64 [ 249.484227][ T54] usb 12-1: new low-speed USB device number 13 using dummy_hcd [ 249.665984][ T54] usb 12-1: Invalid ep0 maxpacket: 64 [ 249.668225][ T54] usb usb12-port1: attempt power cycle [ 249.950931][ T40] audit: type=1400 audit(1759419289.682:45618): avc: denied { read write } for pid=14397 comm="syz.6.2501" name="mouse0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.951155][T14398] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 249.960988][ T40] audit: type=1400 audit(1759419289.682:45619): avc: denied { open } for pid=14397 comm="syz.6.2501" path="/dev/input/mouse0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.973904][ T40] audit: type=1400 audit(1759419289.701:45620): avc: denied { append } for pid=14397 comm="syz.6.2501" name="event2" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.989529][ T40] audit: type=1400 audit(1759419289.720:45621): avc: denied { accept } for pid=14399 comm="syz.8.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.996884][ T40] audit: type=1400 audit(1759419289.720:45622): avc: denied { listen } for pid=14399 comm="syz.8.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.004544][ T40] audit: type=1400 audit(1759419289.720:45623): avc: denied { accept } for pid=14399 comm="syz.8.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.040135][ T54] usb 12-1: new low-speed USB device number 14 using dummy_hcd [ 250.046080][T14403] netlink: 'syz.8.2502': attribute type 1 has an invalid length. [ 250.061957][T14403] 8021q: adding VLAN 0 to HW filter on device bond9 [ 250.064820][ T54] usb 12-1: Invalid ep0 maxpacket: 64 [ 250.171921][ T40] audit: type=1400 audit(1759419289.888:45624): avc: denied { unmount } for pid=9540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 250.211427][ T54] usb 12-1: new low-speed USB device number 15 using dummy_hcd [ 250.235170][ T54] usb 12-1: Invalid ep0 maxpacket: 64 [ 250.237207][ T54] usb usb12-port1: unable to enumerate USB device [ 250.257268][T14417] netlink: 'syz.6.2506': attribute type 11 has an invalid length. [ 250.368199][T14427] fuse: Unknown parameter '0x0000000000000007' [ 250.434431][T14423] overlayfs: missing 'workdir' [ 250.476913][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.484129][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.490121][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.495955][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.502109][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.508632][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.516999][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.579614][T14431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.119990][T14436] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 251.122771][T14436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.126364][T14436] vhci_hcd vhci_hcd.0: Device attached [ 251.166301][T14437] vhci_hcd: connection closed [ 251.166529][ T7096] vhci_hcd: stop threads [ 251.169760][ T7096] vhci_hcd: release socket [ 251.171461][ T7096] vhci_hcd: disconnect device [ 251.189846][T14443] tun0: tun_chr_ioctl cmd 1074025675 [ 251.191885][T14443] tun0: persist disabled [ 251.197083][T14443] sctp: [Deprecated]: syz.1.2513 (pid 14443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.197083][T14443] Use struct sctp_sack_info instead [ 251.472888][ T5945] Bluetooth: hci4: command tx timeout [ 251.594467][T14469] xt_bpf: check failed: parse error [ 251.596661][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2521'. [ 251.612879][ T6016] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 251.786182][ T6016] usb 6-1: Using ep0 maxpacket: 8 [ 251.789683][ T6016] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 251.792458][ T6016] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.796325][ T6016] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.800781][ T6016] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.805038][ T6016] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.810335][ T6016] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.813806][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.007642][ T7979] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 252.035413][ T6016] usb 6-1: usb_control_msg returned -32 [ 252.037344][ T6016] usbtmc 6-1:16.0: can't read capabilities [ 252.147341][ T6072] usb 6-1: USB disconnect, device number 16 [ 252.167507][ T7979] usb 13-1: Using ep0 maxpacket: 8 [ 252.170569][ T7979] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 252.173320][ T7979] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.178526][ T7979] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.181783][ T7979] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32800, setting to 1024 [ 252.187549][ T7979] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 252.194735][ T7979] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.203272][ T7979] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.206438][ T7979] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.259408][T14495] QAT: failed to copy from user cfg_data. [ 252.416880][T14497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2547562470 (81521999040 ns) > initial count (36636592608 ns). Using initial count to start timer. [ 252.444175][ T7979] usb 13-1: usb_control_msg returned -32 [ 252.456285][ T7979] usbtmc 13-1:16.0: can't read capabilities [ 252.480253][T14501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.494424][T14497] kvm: pic: non byte write [ 252.674936][T14510] efs: cannot read volume header [ 252.827890][T14523] usbtmc 13-1:16.0: control status returned 0 [ 253.081188][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2542'. [ 253.098088][ T6072] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 253.178398][ T7979] IPVS: starting estimator thread 0... [ 253.221664][T14548] tmpfs: Cannot enable quota on remount [ 253.269102][ T6072] usb 6-1: Using ep0 maxpacket: 8 [ 253.274475][ T6072] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 253.278722][ T6072] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.280586][T14546] IPVS: using max 47 ests per chain, 112800 per kthread [ 253.283021][ T6072] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.289444][ T6072] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.294456][ T6072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.306503][ T6072] hub 6-1:1.0: bad descriptor, ignoring hub [ 253.309079][ T6072] hub 6-1:1.0: probe with driver hub failed with error -5 [ 253.313352][ T6072] cdc_wdm 6-1:1.0: skipping garbage [ 253.320954][ T6072] cdc_wdm 6-1:1.0: skipping garbage [ 253.324661][ T6072] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 253.524799][T14525] binder: 14524:14525 ioctl c0306201 200000000540 returned -22 [ 253.530249][T14525] input: syz1 as /devices/virtual/input/input29 [ 253.664444][ T6147] usb 6-1: USB disconnect, device number 17 [ 253.707212][ T5945] Bluetooth: hci4: command tx timeout [ 254.142790][T14576] tipc: Enabling of bearer rejected, failed to enable media [ 254.275063][T14573] netlink: 'syz.1.2553': attribute type 32 has an invalid length. [ 254.277942][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 254.281776][T14573] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 254.350139][T14585] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2557'. [ 254.353466][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2557'. [ 254.360137][T14585] IPv6: sit2: Disabled Multicast RS [ 254.362534][T14585] sit2: entered allmulticast mode [ 254.416538][T14587] 9p: Unknown Cache mode or invalid value fs [ 254.582250][T14602] overlayfs: cannot append lower layer [ 254.633849][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 254.633861][ T40] audit: type=1400 audit(1759419294.060:45642): avc: denied { ioctl } for pid=14604 comm="syz.1.2564" path="socket:[71240]" dev="sockfs" ino=71240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.820000][T14619] kvm: pic: non byte read [ 254.846586][ T29] usb 13-1: USB disconnect, device number 8 [ 254.960959][ T40] audit: type=1400 audit(1759419294.369:45643): avc: denied { validate_trans } for pid=14636 comm="syz.8.2574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 254.996179][ T40] audit: type=1400 audit(1759419294.397:45644): avc: denied { mount } for pid=14642 comm="syz.8.2575" name="/" dev="autofs" ino=70623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 255.095864][T14646] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2576'. [ 255.104868][T14646] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 255.107322][T14646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 255.110092][T14646] vhci_hcd vhci_hcd.0: Device attached [ 255.116906][T14646] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 255.119627][T14646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.123445][T14646] vhci_hcd vhci_hcd.0: Device attached [ 255.125920][T14649] usbip_core: unknown command [ 255.126333][T14647] vhci_hcd: connection closed [ 255.127340][T14649] vhci_hcd: unknown pdu 65536 [ 255.127350][T14649] usbip_core: unknown command [ 255.127719][ T7118] vhci_hcd: stop threads [ 255.133735][ T7118] vhci_hcd: release socket [ 255.135257][ T7118] vhci_hcd: disconnect device [ 255.137076][ T7118] vhci_hcd: stop threads [ 255.138773][ T7118] vhci_hcd: release socket [ 255.141108][ T7118] vhci_hcd: disconnect device [ 255.342760][ T29] usb 13-1: new low-speed USB device number 9 using dummy_hcd [ 255.518637][T14657] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 255.529808][ T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 255.534271][ T29] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 255.539250][ T29] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 255.550442][ T29] usb 13-1: string descriptor 0 read error: -22 [ 255.553431][ T29] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.558330][ T29] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.569914][T14643] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 255.678710][T14665] binder: Bad value for 'max' [ 255.678736][ T40] audit: type=1400 audit(1759419295.042:45645): avc: denied { mounton } for pid=14664 comm="syz.6.2581" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.771362][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 255.775508][ T40] audit: type=1400 audit(1759419295.126:45646): avc: denied { ioctl } for pid=14670 comm="syz.1.2584" path="socket:[73099]" dev="sockfs" ino=73099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.775552][T14674] Device name not specified. [ 255.775552][T14674] [ 255.805814][ T29] cdc_ncm 13-1:1.0: bind() failure [ 255.823282][ T29] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 255.828964][ T29] cdc_ncm 13-1:1.1: bind() failure [ 255.837792][ T29] usb 13-1: USB disconnect, device number 9 [ 255.899827][T14682] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2587'. [ 255.934818][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2588'. [ 256.362407][ T40] audit: type=1400 audit(1759419295.678:45647): avc: denied { unmount } for pid=9540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 257.896318][T14695] xt_limit: Overflow, try lower: 271964/0 [ 257.963799][T14698] syz_tun: entered promiscuous mode [ 257.966566][T14698] batadv_slave_0: entered promiscuous mode [ 257.971511][T14698] debugfs: 'hsr1' already exists in 'hsr' [ 257.974952][T14698] Cannot create hsr debugfs directory [ 258.055986][T14698] kvm: kvm [14697]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 258.065903][T14698] kvm: kvm [14697]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 258.116231][ T40] audit: type=1400 audit(1759419297.315:45648): avc: denied { write } for pid=14712 comm="syz.7.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.324058][ T40] audit: type=1400 audit(1759419297.512:45649): avc: denied { nlmsg_read } for pid=14716 comm="syz.1.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.324167][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 258.349945][ T40] audit: type=1400 audit(1759419297.540:45650): avc: denied { read } for pid=14716 comm="syz.1.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.350237][T14717] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 258.367687][T14717] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2598'. [ 258.384080][T14723] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2601'. [ 258.431289][T14729] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 258.477697][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.483443][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.489053][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.494502][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.500477][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.507520][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.514947][T14736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.577576][T14744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.805352][ T40] audit: type=1800 audit(1759419297.961:45651): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2608" name="SYSV798dd830" dev="tmpfs" ino=0 res=0 errno=0 [ 258.900726][T14755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2610'. [ 258.904489][T14755] netlink: 'syz.6.2610': attribute type 7 has an invalid length. [ 258.907280][T14755] netlink: 'syz.6.2610': attribute type 8 has an invalid length. [ 258.912258][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2610'. [ 258.953982][T14757] : entered promiscuous mode [ 259.149430][T14770] syzkaller0: entered promiscuous mode [ 259.151949][T14770] syzkaller0: entered allmulticast mode [ 259.318163][T14787] overlayfs: failed lookup in lower (newroot/459, name='file1', err=-40): overlapping layers [ 259.329223][T14789] IPVS: Error connecting to the multicast addr [ 259.340207][T14789] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 259.459568][T14796] 9pnet_fd: Insufficient options for proto=fd [ 259.488068][T14800] trusted_key: encrypted_key: insufficient parameters specified [ 259.495354][T14800] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 259.497945][T14801] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2626'. [ 259.550289][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2628'. [ 259.912584][T14830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2638'. [ 260.173797][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 260.173816][ T40] audit: type=1400 audit(1759419299.242:45659): avc: denied { relabelfrom } for pid=14842 comm="syz.1.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 260.187921][ T40] audit: type=1400 audit(1759419299.242:45660): avc: denied { relabelto } for pid=14842 comm="syz.1.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 260.232767][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2644'. [ 260.236391][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2644'. [ 260.411432][ T40] audit: type=1400 audit(1759419299.467:45661): avc: denied { listen } for pid=14848 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.417527][ T40] audit: type=1400 audit(1759419299.467:45662): avc: denied { connect } for pid=14848 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.500612][T14859] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 260.757854][T14877] bridge0: port 3(syz_tun) entered blocking state [ 260.761065][T14877] bridge0: port 3(syz_tun) entered disabled state [ 260.766291][T14877] syz_tun: entered allmulticast mode [ 260.773589][T14877] syz_tun: left allmulticast mode [ 261.655834][ T40] audit: type=1400 audit(1759419300.627:45663): avc: denied { setattr } for pid=14899 comm="syz.1.2662" name="SCTPv6" dev="sockfs" ino=73379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.674628][ T40] audit: type=1800 audit(1759419300.645:45664): pid=14902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2661" name="bus" dev="overlay" ino=2571 res=0 errno=0 [ 262.181475][ T40] audit: type=1400 audit(1759419301.122:45665): avc: denied { append } for pid=14912 comm="syz.6.2667" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.182716][T14915] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 262.197407][T14915] cramfs: wrong magic [ 262.221944][ T40] audit: type=1400 audit(1759419301.160:45666): avc: denied { read } for pid=14910 comm="syz.1.2666" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.278226][ T40] audit: type=1400 audit(1759419301.207:45667): avc: denied { getopt } for pid=14910 comm="syz.1.2666" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.170436][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.176815][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.183192][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.187353][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.192055][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.197298][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.205017][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.232934][T14941] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 263.267282][T14942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.332833][T14963] fuse: Bad value for 'fd' [ 264.474114][T14971] ptm ptm57: ldisc open failed (-12), clearing slot 57 [ 264.506266][ T40] audit: type=1400 audit(1759419303.302:45668): avc: denied { ioctl } for pid=14972 comm="syz.7.2682" path="socket:[74954]" dev="sockfs" ino=74954 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.585777][T14984] __nla_validate_parse: 1 callbacks suppressed [ 264.585821][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2685'. [ 264.587261][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2684'. [ 264.631356][T14985] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 264.635505][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2684'. [ 264.644714][T14985] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 264.648776][T14985] team0: Device ipvlan0 is already an upper device of the team interface [ 264.790766][T15003] XFS (nullb0): Invalid superblock magic number [ 264.845593][T15003] tipc: Enabled bearer , priority 0 [ 264.849006][T15010] tipc: Enabling of bearer rejected, already enabled [ 264.853111][T15003] syzkaller0: entered allmulticast mode [ 264.863185][T15003] tipc: Resetting bearer [ 264.865971][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2691'. [ 264.873581][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2691'. [ 264.877204][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2691'. [ 264.896596][T15002] tipc: Disabling bearer [ 264.938517][T15012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.947202][T15012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2692'. [ 265.001310][T15019] sctp: [Deprecated]: syz.1.2693 (pid 15019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.001310][T15019] Use struct sctp_sack_info instead [ 265.044715][T15025] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 265.082175][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.087884][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.093420][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.098363][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.104581][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.110950][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.119029][T15028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.185057][T15029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.728758][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2700'. [ 266.518598][T15042] binder: transaction release 100 bad handle 1, ret = -22 [ 266.570109][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=382 sclass=netlink_route_socket pid=15044 comm=syz.6.2702 [ 266.579690][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 266.579704][ T40] audit: type=1400 audit(1759419305.238:45676): avc: denied { write } for pid=15043 comm="syz.6.2702" path="socket:[75013]" dev="sockfs" ino=75013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.673705][T15048] /dev/sg0: Can't lookup blockdev [ 266.681667][T15050] qnx6: unable to read the first superblock [ 266.683998][T15050] qnx6: unable to read the first superblock [ 266.687253][T15050] qnx6: unable to read the first superblock [ 266.701081][ T40] audit: type=1400 audit(1759419305.350:45677): avc: denied { create } for pid=15051 comm="syz.1.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 266.706425][T15052] ufs: You didn't specify the type of your ufs filesystem [ 266.706425][T15052] [ 266.706425][T15052] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 266.706425][T15052] [ 266.706425][T15052] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 266.715334][ T40] audit: type=1400 audit(1759419305.350:45678): avc: denied { setopt } for pid=15051 comm="syz.1.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 266.724812][T15052] ufs: ufstype=old is supported read-only [ 266.733054][T15052] ufs: ufs_fill_super(): bad magic number [ 266.971316][T15061] geneve2: entered promiscuous mode [ 266.973097][T15061] geneve2: entered allmulticast mode [ 267.139788][T15068] openvswitch: netlink: Flow key attr not present in new flow. [ 267.240290][ T40] audit: type=1400 audit(1759943593.847:45679): avc: denied { read write } for pid=15069 comm="syz.1.2713" name="file0" dev="fuse" ino=144115188075855873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 267.241300][T15070] sd 0:0:0:0: PR command failed: 1026 [ 267.251372][ T40] audit: type=1400 audit(1759943593.847:45680): avc: denied { open } for pid=15069 comm="syz.1.2713" path="/71/file0/file0" dev="fuse" ino=144115188075855873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 267.251426][ T40] audit: type=1400 audit(1759943593.847:45681): avc: denied { ioctl } for pid=15069 comm="syz.1.2713" path="/71/file0/file0" dev="fuse" ino=144115188075855873 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 267.272921][T15070] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 267.275539][T15070] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 267.455138][ T54] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 267.637223][ T54] usb 11-1: Using ep0 maxpacket: 8 [ 267.640644][ T54] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 267.644163][ T54] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.648475][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.652331][ T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.656798][ T54] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.662602][ T54] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.666085][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.775933][ T6072] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 267.950873][ T6072] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.954617][ T6072] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.958549][ T6072] usb 12-1: Product: syz [ 267.960430][ T6072] usb 12-1: Manufacturer: syz [ 267.962387][ T6072] usb 12-1: SerialNumber: syz [ 267.968568][ T6072] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.981909][ T7271] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 268.303446][ T6072] usb 12-1: USB disconnect, device number 16 [ 268.483917][T15092] usbtmc 11-1:16.0: simple usb_control_msg failed -32 [ 268.486906][T15072] netlink: 'syz.6.2714': attribute type 1 has an invalid length. [ 268.490520][T15072] netlink: 'syz.6.2714': attribute type 2 has an invalid length. [ 268.496363][ T54] usb 11-1: USB disconnect, device number 20 [ 268.796341][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 269.091203][ T7271] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 269.094339][ T7271] ath9k_htc: Failed to initialize the device [ 269.100148][ T6072] usb 12-1: ath9k_htc: USB layer deinitialized [ 269.106175][ T40] audit: type=1400 audit(1759943595.596:45682): avc: denied { map } for pid=15109 comm="syz.6.2725" path="socket:[74577]" dev="sockfs" ino=74577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 269.115032][ T40] audit: type=1400 audit(1759943595.596:45683): avc: denied { bind } for pid=15109 comm="syz.6.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 269.261433][T15117] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2727'. [ 270.180151][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2736'. [ 270.245656][T15144] bond2: entered promiscuous mode [ 270.250711][T15144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.255266][T15144] bond0: (slave bond2): Enslaving as an active interface with an up link [ 270.271488][T15144] geneve3: entered promiscuous mode [ 270.273438][T15144] geneve3: entered allmulticast mode [ 270.565125][ T7271] ================================================================== [ 270.569254][ T7271] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe87/0x1060 [ 270.572513][ T7271] Read of size 8 at addr ffff888054d58b20 by task kworker/2:4/7271 [ 270.577807][ T7271] [ 270.578848][ T7271] CPU: 2 UID: 0 PID: 7271 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 270.578870][ T7271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.578883][ T7271] Workqueue: events l2cap_chan_timeout [ 270.578909][ T7271] Call Trace: [ 270.578915][ T7271] [ 270.578922][ T7271] dump_stack_lvl+0x116/0x1f0 [ 270.578947][ T7271] print_report+0xcd/0x630 [ 270.578963][ T7271] ? __virt_addr_valid+0x81/0x610 [ 270.578989][ T7271] ? __phys_addr+0xe8/0x180 [ 270.579018][ T7271] ? __mutex_lock+0xe87/0x1060 [ 270.579042][ T7271] kasan_report+0xe0/0x110 [ 270.579057][ T7271] ? __mutex_lock+0xe87/0x1060 [ 270.579084][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.579102][ T7271] __mutex_lock+0xe87/0x1060 [ 270.579125][ T7271] ? add_lock_to_list+0x9d/0x130 [ 270.579149][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.579170][ T7271] ? __pfx___mutex_lock+0x10/0x10 [ 270.579195][ T7271] ? debug_object_deactivate+0x1ec/0x3a0 [ 270.579239][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.579258][ T7271] l2cap_chan_timeout+0x6d/0x310 [ 270.579278][ T7271] process_one_work+0x9cf/0x1b70 [ 270.579303][ T7271] ? __pfx_process_one_work+0x10/0x10 [ 270.579325][ T7271] ? assign_work+0x1a0/0x250 [ 270.579344][ T7271] worker_thread+0x6c8/0xf10 [ 270.579367][ T7271] ? __kthread_parkme+0x19e/0x250 [ 270.579393][ T7271] ? __pfx_worker_thread+0x10/0x10 [ 270.579421][ T7271] kthread+0x3c5/0x780 [ 270.579439][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.579458][ T7271] ? rcu_is_watching+0x12/0xc0 [ 270.579481][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.579499][ T7271] ret_from_fork+0x56a/0x730 [ 270.579517][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.579534][ T7271] ret_from_fork_asm+0x1a/0x30 [ 270.579562][ T7271] [ 270.579568][ T7271] [ 270.647521][ T7271] Allocated by task 13333: [ 270.649136][ T7271] kasan_save_stack+0x33/0x60 [ 270.650861][ T7271] kasan_save_track+0x14/0x30 [ 270.652607][ T7271] __kasan_kmalloc+0xaa/0xb0 [ 270.654322][ T7271] l2cap_conn_add.part.0+0x60/0xa60 [ 270.656215][ T7271] l2cap_chan_connect+0x15e5/0x2020 [ 270.658247][ T7271] l2cap_sock_connect+0x3ba/0x740 [ 270.660404][ T7271] kernel_connect+0x107/0x180 [ 270.662596][ T7271] rfcomm_dlc_open+0x821/0xaa0 [ 270.664589][ T7271] rfcomm_sock_connect+0x423/0x670 [ 270.666499][ T7271] __sys_connect_file+0x141/0x1a0 [ 270.668346][ T7271] __sys_connect+0x13b/0x160 [ 270.670055][ T7271] __x64_sys_connect+0x72/0xb0 [ 270.671795][ T7271] do_syscall_64+0xcd/0x4e0 [ 270.673524][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.675699][ T7271] [ 270.676657][ T7271] Freed by task 13760: [ 270.678222][ T7271] kasan_save_stack+0x33/0x60 [ 270.680191][ T7271] kasan_save_track+0x14/0x30 [ 270.682157][ T7271] kasan_save_free_info+0x3b/0x60 [ 270.684283][ T7271] __kasan_slab_free+0x60/0x70 [ 270.686051][ T7271] kfree+0x2b4/0x4d0 [ 270.687500][ T7271] l2cap_conn_del+0x59c/0x730 [ 270.689220][ T7271] l2cap_disconn_cfm+0x96/0xd0 [ 270.691003][ T7271] hci_conn_hash_flush+0x10e/0x260 [ 270.692885][ T7271] hci_dev_close_sync+0x602/0x11d0 [ 270.694789][ T7271] hci_dev_do_close+0x2e/0x90 [ 270.696508][ T7271] hci_unregister_dev+0x227/0x640 [ 270.698353][ T7271] vhci_release+0x17d/0x230 [ 270.700021][ T7271] __fput+0x402/0xb70 [ 270.701552][ T7271] task_work_run+0x14d/0x240 [ 270.703498][ T7271] do_exit+0x86f/0x2bf0 [ 270.705159][ T7271] do_group_exit+0xd3/0x2a0 [ 270.707067][ T7271] get_signal+0x2671/0x26d0 [ 270.708902][ T7271] arch_do_signal_or_restart+0x8f/0x7c0 [ 270.710936][ T7271] exit_to_user_mode_loop+0x7a/0x100 [ 270.712879][ T7271] do_syscall_64+0x419/0x4e0 [ 270.714602][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.716760][ T7271] [ 270.717623][ T7271] The buggy address belongs to the object at ffff888054d58800 [ 270.717623][ T7271] which belongs to the cache kmalloc-1k of size 1024 [ 270.723099][ T7271] The buggy address is located 800 bytes inside of [ 270.723099][ T7271] freed 1024-byte region [ffff888054d58800, ffff888054d58c00) [ 270.728847][ T7271] [ 270.729980][ T7271] The buggy address belongs to the physical page: [ 270.733121][ T7271] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54d58 [ 270.735784][ T7271] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 270.738401][ T7271] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 270.740784][ T7271] page_type: f5(slab) [ 270.742387][ T7271] raw: 00fff00000000040 ffff88801b042dc0 dead000000000100 dead000000000122 [ 270.746262][ T7271] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 270.749015][ T7271] head: 00fff00000000040 ffff88801b042dc0 dead000000000100 dead000000000122 [ 270.752483][ T7271] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 270.756110][ T7271] head: 00fff00000000003 ffffea0001535601 00000000ffffffff 00000000ffffffff [ 270.759004][ T7271] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 270.761718][ T7271] page dumped because: kasan: bad access detected [ 270.763814][ T7271] page_owner tracks the page as allocated [ 270.765624][ T7271] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5947, tgid 5947 (syz-executor), ts 55332180689, free_ts 0 [ 270.771924][ T7271] post_alloc_hook+0x1c0/0x230 [ 270.773507][ T7271] get_page_from_freelist+0x132b/0x38e0 [ 270.775526][ T7271] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 270.778044][ T7271] alloc_pages_mpol+0x1fb/0x550 [ 270.780064][ T7271] new_slab+0x247/0x330 [ 270.781877][ T7271] ___slab_alloc+0xcf2/0x1750 [ 270.783679][ T7271] __slab_alloc.constprop.0+0x56/0xb0 [ 270.785385][ T7271] __kmalloc_node_noprof+0x2ed/0x500 [ 270.787070][ T7271] qdisc_alloc+0xbb/0xc50 [ 270.788440][ T7271] qdisc_create_dflt+0x94/0x490 [ 270.790179][ T7271] dev_activate+0x63f/0x12d0 [ 270.791768][ T7271] __dev_open+0x432/0x7c0 [ 270.793319][ T7271] __dev_change_flags+0x55d/0x720 [ 270.794909][ T7271] netif_change_flags+0x8d/0x160 [ 270.796478][ T7271] do_setlink.constprop.0+0xb53/0x4380 [ 270.798427][ T7271] rtnl_newlink+0x1446/0x2000 [ 270.799949][ T7271] page_owner free stack trace missing [ 270.802050][ T7271] [ 270.803135][ T7271] Memory state around the buggy address: [ 270.805208][ T7271] ffff888054d58a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.808332][ T7271] ffff888054d58a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.811294][ T7271] >ffff888054d58b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.814159][ T7271] ^ [ 270.815777][ T7271] ffff888054d58b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.818273][ T7271] ffff888054d58c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 270.820756][ T7271] ================================================================== [ 270.823761][ T7271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.826322][ T7271] CPU: 2 UID: 0 PID: 7271 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 270.829849][ T7271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.833316][ T7271] Workqueue: events l2cap_chan_timeout [ 270.835493][ T7271] Call Trace: [ 270.836845][ T7271] [ 270.838141][ T7271] dump_stack_lvl+0x3d/0x1f0 [ 270.840237][ T7271] vpanic+0x6e8/0x7a0 [ 270.842462][ T7271] ? __pfx_vpanic+0x10/0x10 [ 270.844494][ T7271] ? __pfx_vprintk_emit+0x10/0x10 [ 270.846361][ T7271] ? __mutex_lock+0xe87/0x1060 [ 270.847923][ T7271] panic+0xca/0xd0 [ 270.849123][ T7271] ? __pfx_panic+0x10/0x10 [ 270.850583][ T7271] ? check_panic_on_warn+0x1f/0xb0 [ 270.852189][ T7271] check_panic_on_warn+0xab/0xb0 [ 270.854191][ T7271] end_report+0x107/0x170 [ 270.855686][ T7271] kasan_report+0xee/0x110 [ 270.857201][ T7271] ? __mutex_lock+0xe87/0x1060 [ 270.859199][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.860828][ T7271] __mutex_lock+0xe87/0x1060 [ 270.862296][ T7271] ? add_lock_to_list+0x9d/0x130 [ 270.864043][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.865689][ T7271] ? __pfx___mutex_lock+0x10/0x10 [ 270.867302][ T7271] ? debug_object_deactivate+0x1ec/0x3a0 [ 270.869262][ T7271] ? l2cap_chan_timeout+0x6d/0x310 [ 270.871316][ T7271] l2cap_chan_timeout+0x6d/0x310 [ 270.872999][ T7271] process_one_work+0x9cf/0x1b70 [ 270.874631][ T7271] ? __pfx_process_one_work+0x10/0x10 [ 270.876639][ T7271] ? assign_work+0x1a0/0x250 [ 270.878563][ T7271] worker_thread+0x6c8/0xf10 [ 270.880574][ T7271] ? __kthread_parkme+0x19e/0x250 [ 270.882437][ T7271] ? __pfx_worker_thread+0x10/0x10 [ 270.884099][ T7271] kthread+0x3c5/0x780 [ 270.885405][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.886883][ T7271] ? rcu_is_watching+0x12/0xc0 [ 270.888419][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.890000][ T7271] ret_from_fork+0x56a/0x730 [ 270.891594][ T7271] ? __pfx_kthread+0x10/0x10 [ 270.893194][ T7271] ret_from_fork_asm+0x1a/0x30 [ 270.894824][ T7271] [ 270.896549][ T7271] Kernel Offset: disabled [ 270.897946][ T7271] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:35:36 Registers: info registers vcpu 0 CPU#0 RAX=ffffea0000dc4b40 RBX=ffffea0000dc4b40 RCX=ffffffff8206bab6 RDX=ffff888028d3a480 RSI=0000000000000008 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90006b8f608 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007f8bb80a1000 R13=ffffc90006b8f790 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8207ec9d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d0b3e7dac CR3=000000003b8b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac574cc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac574e46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac574e46 00007ffeac574e4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b21305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d0b21313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a73b500 RCX=ffffffff81af23b3 RDX=ffff88801d6b4900 RSI=ffffffff81af238d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c39c96 R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4e76a1 RIP=ffffffff81af2393 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557c1a0808 CR3=000000000df82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bd61f ffffffff812bd61f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bd61f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc795b96 00007ffdfc795b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb8612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb8612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb8612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb8612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb861305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bb861313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85200855 RDI=ffffffff9ab64ae0 RBP=ffffffff9ab64aa0 RSP=ffffc90005927530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=000000000000006f R14=ffffffff9ab64aa0 R15=ffffffff852007f0 RIP=ffffffff8520087f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7060000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d0b172b60 CR3=0000000033097000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6078fa16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6078fa16 00007fff6078fa1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da8612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da8612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da8612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da8612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da861305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da861313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da87b74a8 00007f5da87b74a0 00007f5da87b7498 00007f5da87b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da931d100 00007f5da87b7460 00007f5da87b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5da87b74b8 00007f5da87b74b0 00007f5da87b74a8 00007f5da87b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000004010a06 0000008800000000 307a797300010009 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004003000800 0000004003000812 0000004001000803 0000004002000830 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004001000802 000000400100080c 0000004003000880 02003c0062696600 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100088001004880 04004c0000000030 7a79730001000900 006e65676d756e00 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000b8001001080 0400140000000040 0b00080000000100 0000000000000004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000001225b RBX=0000000000000001 RCX=000000000001225b RDX=dffffc0000000000 RSI=00000000000a5476 RDI=ffffffff91b2d544 RBP=ffffc90006e1f4f8 RSP=ffffc90006e1f440 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=000000000001225b R12=ffffc90006e1f500 R13=ffffc90006e1f4b0 R14=ffffc90006e1f4e5 R15=ffffffff82225b62 RIP=ffffffff816a8736 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7160000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff6078dfe8 CR3=000000005e5fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000ffc2fefc Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c65ea1ddb2e98059 b07ff6a74f382141 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53a0859373f1c5b3 0225af87fdf2fd65 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d6dcc9008847f295 8d2d7370f9ca96e2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 13cfe5ef60e17df8 c2447d11bfa16e7a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005980 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000a507 065b3e006a1aa400 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000a50700000000 0000a50900000001 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000be090c00 09c80900ad927c00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92290f00aa50ae00 0000a5092bb27800 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2042285fa378c0dc 375fe83a56d65472 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 89bf39f63eb5cb4e 948330d1527954dd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000