last executing test programs: 5m13.587386549s ago: executing program 1 (id=716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x5c25, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x7ffd, 0xfe, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x100, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) (async) lseek(r4, 0x3, 0x0) (async) getdents64(r4, &(0x7f0000003440)=""/99, 0x63) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) (async) recvmsg$unix(r8, &(0x7f0000000240)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/195, 0xc3}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10152) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0xfff1}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) (async) syz_clone3(&(0x7f0000000380)={0x43000780, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x74, 0x0, 0x0, 0x0, {r6}}, 0x58) (async) r11 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m12.989107382s ago: executing program 1 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x8905, &(0x7f0000000040)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xae) 5m12.891020701s ago: executing program 32 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x8905, &(0x7f0000000040)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xae) 2m41.493234231s ago: executing program 3 (id=2208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r4, &(0x7f0000000100)="7226fbb175a1dceab1f8585749b7a83964bf4306069ee9bd0acadcf061b44a8de04f72d8db703e5a2afd1fd649fe9b46efa3b36e9ada76f0adbc4c9465149dc795d5b4f37387afbb6c1207de21ff", 0x4e, 0x1, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xac, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {}, {0xb, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000004) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0xc1485544, &(0x7f00000003c0)) 2m40.416987255s ago: executing program 3 (id=2220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0x10}, {0x5, 0x8, 0xf8, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x63}, {0x2, 0x7, 0x2, '\x00', 0xa}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x3, 0x3, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xd, '\x00', 0x3}, {0x7f, 0x6, 0xce, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m40.118350988s ago: executing program 3 (id=2224): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095", @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x4}, {0x6000, 0x10000, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xff, 0x2}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x81}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x40}, {0x2, 0x0, 0xc, 0x0, 0x0, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000, 0x5}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x200000000000000, 0xb14, 0x4]}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x1, 0xfff1}, {0xf, 0x6}}}, 0x24}}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000d00)="280320000500140001007ef506be00000000000000000000000000143baa111f1f858ce632f470425f0365124944d5563629ef0400195eb3cf545a41b6d78839980700e67bee78895e16239c375e", 0x4e, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @broadcast}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0xffffffffffffff54) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x4e24, 0x7f, 0x4e21, 0x2, 0xa, 0x80, 0x40, 0x2f, r12, 0xffffffffffffffff}, {0x588b0072, 0x4, 0x7, 0x7, 0x4, 0x25, 0xffffffffffffffc0, 0x1}, {0x5, 0x7, 0x1, 0x2}, 0x9e, 0xfffffffc, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x1, 0x2, 0x56, 0x7f, 0x6}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f0000000580)=@raw=[@jmp={0x5, 0x1, 0x0, 0x9, 0x1, 0xfffffffffffffff8, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @tail_call, @exit], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x8, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x9, 0x8, 0xfd6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000009c0)=[{0x4, 0x5, 0xc, 0x4}, {0x0, 0x1, 0x10008, 0x5}, {0x0, 0x4, 0xf, 0x5}, {0x5, 0x3, 0x4, 0x1}], 0x10, 0x7}, 0x94) 2m39.928884964s ago: executing program 3 (id=2227): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xc0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10002, 0x4, 0x41000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xa002a008}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xa}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0xfec00000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 2m39.42920815s ago: executing program 3 (id=2229): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x403, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) r1 = memfd_secret(0x0) r2 = accept4$unix(r1, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0x80800) connect$unix(r2, &(0x7f0000000340)=@file={0x1, './file0/file1/file0\x00'}, 0x6e) umount2(&(0x7f00000000c0)='./bus\x00', 0x9) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m39.08941059s ago: executing program 3 (id=2230): mount(&(0x7f0000000100)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='pvfs2\x00', 0x800, 0x0) 2m39.06064583s ago: executing program 33 (id=2230): mount(&(0x7f0000000100)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='pvfs2\x00', 0x800, 0x0) 2m32.487005952s ago: executing program 5 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 2m32.395028326s ago: executing program 5 (id=2315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="200100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x7, 0x9, 0xc4db, 0x7, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x8, 0x8000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0xfff4, 0x10}, {0xffff, 0xffff}, {0x4, 0xfffc}}}, 0x24}}, 0x4000010) 2m32.39397603s ago: executing program 5 (id=2316): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0) 2m32.309582124s ago: executing program 5 (id=2317): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x20042, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r6, 0x541d) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r3, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat$cgroup_int(r2, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000a006) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m32.233505487s ago: executing program 5 (id=2319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') (async, rerun: 32) write$cgroup_subtree(r2, 0x0, 0x0) (rerun: 32) io_setup(0x8, &(0x7f0000000b40)=0x0) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) write$FUSE_WRITE(r5, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async, rerun: 32) io_pgetevents(r4, 0x6, 0x6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0), 0x0) (async, rerun: 32) io_getevents(r4, 0x7fffffff, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0) 2m31.917233956s ago: executing program 5 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x81) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r10, 0x301, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8905}, 0x20000880) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m31.783450095s ago: executing program 34 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x81) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r10, 0x301, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8905}, 0x20000880) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m39.122758692s ago: executing program 6 (id=3105): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1m39.062590951s ago: executing program 6 (id=3106): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x10b, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000277000/0x4000)=nil, 0x4000}, 0x1}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) 1m38.850853084s ago: executing program 6 (id=3107): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/202, 0xca}], 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0xe97b}, 0x400000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x40) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_emit_ethernet(0x104, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0xf6, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7ff], "51cb45d3b06f30deac9f6bb82e54018b5a5f5658077ff99b66fc77eb3fe1db8a670eb86467de9a74af5445711c1eb66e57e420bac91fc301afcc5f335a3cfe7bcacc34e9151a9051375ceb505088180d394c28243c3bb083130af0c5a05d9e5ce27dc5f19f22ac80c570f9fd7396799cb76f28904016c0d1572dfd5d98c4c5259f2e3c95bc6e2d2c4cfc2cd79ba20056d177fc121eef5c57ceb67602"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x2, {0x1, 0x8, 0x2, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x10, 0xe}, {0xffe0, 0x3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x4, 0x6, 0x2, 0x2, 0x4, 0xf, 0x0, 0x8, [{0x2, 0x7, 0x7, 0xfffffffc}, {0x8, 0xd, 0x3, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0xffff}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x8004) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 1m38.694807774s ago: executing program 6 (id=3108): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x34, r2, 0xe7816804f9787cab, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x6004a0c9) socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r9, 0x1, 0x60e7a120aa6c43aa, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x37400000}, @ETHTOOL_A_CHANNELS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffff8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$afs(&(0x7f0000000100), &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{}, {@flock_strict}], [{@subj_user={'subj_user', 0x3d, 'lowerdir'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1m37.848231634s ago: executing program 6 (id=3117): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x44) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) (async) accept4(r3, 0x0, 0x0, 0x80000) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x2000000001, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x43, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) read$alg(r7, &(0x7f0000000ac0)=""/104, 0x68) (async) r8 = dup2(r1, r1) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) (async) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) (async) write$tun(r8, &(0x7f0000000200)={@void, @void, @ipv4=@generic={{0x11, 0x4, 0x3, 0x37, 0xd5, 0x68, 0x0, 0x2, 0x21, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0xc, [{@local, 0x8}]}, @cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "1c"}]}, @generic={0x94, 0x3, "9d"}, @rr={0x7, 0x17, 0x4, [@loopback, @rand_addr=0x64010100, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}, "e993cd016f655cc8317e7eee42ad54e02e1f24ee06901b9379000c1e82712aa2c7a5edf88d986df175c61c74b9d72b53fbfebefd0881ef56e66031f66335024774623c83b0a0a0c2220500e6291a3fe40f0f9fb705cba610409e03bdbe8a3bfe3b97207abbd1644ab6a4f53fde16cb1b4a6ec684eca6b2e1370cddec57e4be6d0e7d47adb47c9b68a0965b8af7fb28b3c2"}}, 0xd5) (async, rerun: 64) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) (async) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m37.730605194s ago: executing program 6 (id=3119): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"7edc1f43ec107f9c847be371470d40d5", 0x0, 0x0, {0x2, 0x2}, {0x6, 0x2}, 0x1, [0x2, 0x0, 0xb44, 0xfffffffffffffffb, 0xa, 0xb0, 0x6, 0x2, 0x4, 0x7, 0x3, 0x8, 0x9, 0x10, 0x388, 0x2]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"00ec0178892a35d498d86880f23c020d", r1, r2, {0x6, 0x4}, {0x1eb9403a, 0x8}, 0x7, [0x100, 0xe, 0x31, 0x97, 0xf, 0x3, 0xd, 0x7ff, 0x1a1c, 0x80000001, 0x401, 0x9, 0x9, 0x10, 0x5, 0x4]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) r4 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000180)=0x58, 0x3fffff) fcntl$setstatus(r3, 0x4, 0x6c00) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f00000011c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001880)=[{@fixed}]}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m22.66740792s ago: executing program 35 (id=3119): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"7edc1f43ec107f9c847be371470d40d5", 0x0, 0x0, {0x2, 0x2}, {0x6, 0x2}, 0x1, [0x2, 0x0, 0xb44, 0xfffffffffffffffb, 0xa, 0xb0, 0x6, 0x2, 0x4, 0x7, 0x3, 0x8, 0x9, 0x10, 0x388, 0x2]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"00ec0178892a35d498d86880f23c020d", r1, r2, {0x6, 0x4}, {0x1eb9403a, 0x8}, 0x7, [0x100, 0xe, 0x31, 0x97, 0xf, 0x3, 0xd, 0x7ff, 0x1a1c, 0x80000001, 0x401, 0x9, 0x9, 0x10, 0x5, 0x4]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) r4 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000180)=0x58, 0x3fffff) fcntl$setstatus(r3, 0x4, 0x6c00) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f00000011c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001880)=[{@fixed}]}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m4.349128195s ago: executing program 0 (id=3649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c46070905020300000000000000020003000300000040000000380000002b020000cad40000010420000100090007000104000000000100000001000000fdffffff020000000800000006000000030000000b000000a045a2dc6d1686d3d5b4267d7b89b7dc9ea08b3b993daf93b327b645d0a0a73cdbe957bcf7da9ca40ee428a835723978ca3407d3aa7363ff1d473264081739dea46f3225ce57a9970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d227c255cf43bcd0f02ac291dafaec698a1bb82ea4fe88a5f9c72d6ae29aaa8cf9dd918e00d4f3a61974995062d83161978e6185b0a706cedf8f9dd8cb5bfd9ee0f4fa95aaf2093d9870e8b3d23086e4c0e5778037c46cb332e99d08a04a499914129cfbb0c70c7797f03948b27f290c0cf0005c169f2c8b7de77591766c02e50cd81dd9e2da3793d54bd34e5eb7b9b89dab2b5e5d0a5"], 0x6a0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x10000a006) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000340)={0x0, 0x6894, 0x10100, 0x0, 0x3ffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) r9 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @sched_cls=0x2f, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x3, 0xc, 0xa}], 0x10, 0x800}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="2fc2aff251e3b99758ce23a7c8277ec6bed663f6e1bb855bfa9e140359f29da8d83e705872be1e113c5dfc548b93560c5775043b4135e2b32480fe39b354743a92a0b4a9e0c2de9a5f105301026f5e8fd832615a5d4aec5f830efae0f74826c4d3c190a3a4ecbea719f53a2c468f990285dcbf68bdb2379badc772b3f74cd545f286a377fb57e55266a59893c1c4d0d57d21e8ba2b423f02c626ac93b70cfd3ffd214d01", 0xa4}, {&(0x7f0000000100)}, {&(0x7f0000000680)="de9ab3315f240587d25055f0332c6ceca12c6429dd69f69ba78242f09b0c36916483f98eea12e66c6b9328ef399084e306b1fa1655683624ad680d0c2cbb5df8d70dedb54ba092a4bbe245250fc0981bc514adcbedc22dedd48a35abd52129cc653705844c240124fd7d025490e2b5087ce94069e301b10ebfee557d2d5b092448bdd3f7cbb688e58daaba0908b4176ae1136e04796e6762e67128392ec03fda3fd827c3a41e9541c0478368d06ad78319c24d11c6d79355792d8d8ce3bce988b294713871f580df31571c23f0523240e7cbec168f9ec4efcf871f9c2990b21387a104c5ceb2e41f2a1cb550141938", 0xef}], 0x3, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x404000d}], 0x1, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m4.06247468s ago: executing program 0 (id=3655): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2485043d4beb231c4e5a5209095f000000", @ANYRES16=r3, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async, rerun: 64) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (rerun: 64) 1m3.98174173s ago: executing program 0 (id=3656): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a002300000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x804d, {0xa, 0x14, 0x10, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x2400}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11, 0x0, 0x2000000}, 0x20000080) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x1000}], 0x1) 1m3.978567753s ago: executing program 0 (id=3657): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x610402, 0x10f) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e21, 0x1, @local, 0x4}}}, 0x38) truncate(&(0x7f0000000140)='./file0\x00', 0x8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r3, 0x34, 0x0, @void}, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x4, r8, &(0x7f0000001040), 0x282d) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00002fb000/0x4000)=nil, 0x400000, 0x2, 0x2}) 1m3.872003905s ago: executing program 0 (id=3658): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="b8b2822503000000000000008100", 0x36}], 0x1}, 0x20000000) r1 = socket$inet(0x2, 0x1, 0x2053) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x30000, 0xb, 0x593, 0x2a34, 0x7fffffff]}, &(0x7f0000000080)=0x78) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81012dbd7000d90200000100000008"], 0x1c}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x80200, 0x104) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x402800, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x123, 0x235, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x50}]}, 0x2c}}, 0x0) flock(r3, 0x1) flock(r3, 0x1) flock(r2, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000380)={r11, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x3, 0x62f, 0x7, 0xffc5, 0xfffd, 0x8, 0x1], &(0x7f0000000340)=[0x401, 0x4, 0x81]}) 1m3.512245269s ago: executing program 0 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x1b201100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1m3.434598295s ago: executing program 36 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x1b201100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 25.908232309s ago: executing program 7 (id=4148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000163000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000600)={@local, @broadcast, @void, {@generic={0x5, "c08e23dbea"}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x7, 0x8, 0x800, 0x7e, 0xa58c, 0xffffffffffffffff}) ptrace(0x4207, r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close_range(r5, r5, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x108, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x343f7953}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x577e203d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf84}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc0000000}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$CDROMEJECT(r7, 0x5382) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xa) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000000000001700"], 0x30}}, 0x0) 25.828192208s ago: executing program 7 (id=4151): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b966643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x4fcb6233, {0x0, 0xd, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0x804, r2, 0x0, 0xc000, '\x00', 0x8, 0x81, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0x809}, {0x1, 0xd}, {0x1000000000, 0xa00}, 0x2, 0xd, 0xfffffe00, 0xb}}}}) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 25.766736199s ago: executing program 7 (id=4154): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c", 0x2e}], 0x1}, 0x4040044) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000140)=""/185) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') accept(r1, 0x0, &(0x7f00000000c0)) preadv(r6, 0x0, 0x0, 0x8, 0xffffffff) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000100), 0xffff, 0x800) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000140)=@fd={0xfb49, 0x5, 0x4, 0x4000, 0x5, {0x0, 0xea60}, {0x5, 0x1, 0x0, 0x8, 0x7f, 0x1, "b6b7c0d4"}, 0x1, 0x4, {}, 0x8, 0x0, r6}) r9 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 22.719457277s ago: executing program 7 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0) 22.719134985s ago: executing program 7 (id=4187): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r2 = accept4(r1, &(0x7f00000000c0)=@x25, &(0x7f0000000040)=0x80, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x2}}, 0x26) 22.659552352s ago: executing program 7 (id=4188): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000025000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000380)=0x3, 0x3, 0x3) ioctl(r1, 0x8b27, &(0x7f0000000040)) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r2 = io_uring_setup(0x7a63, &(0x7f0000000300)={0x0, 0xbae6, 0x0, 0x2, 0x37e}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250800000208000c0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000000c0)={0x0, 0x7667, 0x2, 0x1, 0x29d, 0x0, r5}, 0x1) inotify_rm_watch(r0, 0x0) sync() r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r9, 0x29, 0x21, 0x0, 0x5b) io_uring_enter(r0, 0x572c, 0x6081, 0x45, &(0x7f0000000140)={[0x5]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 7.62028623s ago: executing program 37 (id=4188): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000025000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000380)=0x3, 0x3, 0x3) ioctl(r1, 0x8b27, &(0x7f0000000040)) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r2 = io_uring_setup(0x7a63, &(0x7f0000000300)={0x0, 0xbae6, 0x0, 0x2, 0x37e}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250800000208000c0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000000c0)={0x0, 0x7667, 0x2, 0x1, 0x29d, 0x0, r5}, 0x1) inotify_rm_watch(r0, 0x0) sync() r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r9, 0x29, 0x21, 0x0, 0x5b) io_uring_enter(r0, 0x572c, 0x6081, 0x45, &(0x7f0000000140)={[0x5]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 6.167274336s ago: executing program 4 (id=4370): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x123942) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) 6.164391134s ago: executing program 4 (id=4371): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 6.052960031s ago: executing program 4 (id=4372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0xfa1acb988fd987e3) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x30, r1, 0xe7816804f9787cab, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4004e0cc) 5.876460899s ago: executing program 4 (id=4374): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc00, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="f46bddbbb6abec8c8d9e9dabfc0acdf46bf9bacf85c15cbd20"]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000019ed110027bd7000000000001d01000005000d000c000000"], 0x1c}}, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1a2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9192909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d074c0936cd3b78130daa6bd8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aa090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080578386522449df466c632b3570243f989cce3803f465e41e610c2021d653a552f9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341adbe50861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357ca8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795eff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee532592897cd12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ffca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160eca6b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4cf8d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb17167fbeac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb5cebff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa03c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea9400004facfd4c735a20307c737afae5136651b1b9bc522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abbd02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d96dfda3c4f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a935908001cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1f1d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488ef5d989d385cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd41d95af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f480f6f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fdedda7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c218b0868cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000021d71f00000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000100a000084"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) r4 = socket(0x10, 0x3, 0x0) dup(r4) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x3, 0x7, 0x50000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r7) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x1b}) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fchown(r2, 0x0, 0x0) 5.106501862s ago: executing program 4 (id=4391): r0 = socket$inet_sctp(0x2, 0x7159880274cddc79, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = semget$private(0x0, 0x7, 0x191) semtimedop(r1, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(r1, &(0x7f0000000140)=[{0x1, 0xce97, 0x800}, {0x3, 0x5, 0x1000}], 0x2) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap$snddsp_status(&(0x7f0000122000/0x4000)=nil, 0x1000, 0x2000002, 0x10, r2, 0x82000000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x1, r4, &(0x7f0000000540), 0x282d) r5 = syz_open_procfs(r4, &(0x7f0000019300)='uid_map\x00') r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000019200), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000019240)='dctcp\x00', 0x6) getsockname$l2tp(r2, &(0x7f0000019280)={0x2, 0x0, @initdev}, &(0x7f00000192c0)=0x10) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000180)={"e45c47db9ba1ebb6a86edcd9", &(0x7f00000000c0)="bafcf04c6f864b2a46e12687fb17b6", 0xf, 0xfffff136, &(0x7f0000000100)={0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, "b43e213a", 0xd, "2a13d6a0", 0x7, 0xf3, 0x4, '\x00', "a8d70e0af9e338b9b70c59a63a8c4d278c0189db61827e61bc1884dd2be9067becfd4f32dda20575ec1cf33bea23"}, 0x1, 0x1b, 0x3f1, &(0x7f0000000140)}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000019380)=ANY=[@ANYBLOB="18fbff28b44e5b000000278726066890d4b4d98630eddfdd83c40db4f45908fd6db4f189e0d2ba24227f3c2cbf7e60ebed3116609b58c7f772794d2b4001885c152ef09bd7ded78bc0f480b332fce870b9b21bfe71a070cea8fcb8d37899bb738289969fa0ecd8be9e30cbd83ae8433c2567240851cb82865e33ada2d4f5d3bc7850c1d74914f6ca6c36a1fcf167d82a2d30b994c8c72b4cf0cc3f25a67bc8354a35290a84dcd3250f95e4c7e03e058cd941dff30a4b2ad482c6d51b34bbc5"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$lan78xx(0x6, 0xffb0, &(0x7f0000019340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0xfffffffffffffc6e}}]}}, 0x0) ioctl$EVIOCRMFF(r8, 0x4004550f, 0x0) pread64(r0, &(0x7f0000000200)=""/102392, 0x18ff8, 0xfffffffff) 4.606994424s ago: executing program 2 (id=4401): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c4a696e7465726c656176653d7374617469032c00"]) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x27, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="dec6d1405447ebe1151e93cf66120110012b95d908e204121410ca0502030109021b000102faa0bf0904000801080662000905090100020408f8"], 0x0) 4.327996741s ago: executing program 4 (id=4404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) close(0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 4.23158647s ago: executing program 38 (id=4404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) close(0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf253b000000680033008000e100ffffffffffff0802110000005050505050500020000000000000000001000100010003010a0406f89702000200060207002503fd687d3c0400b14f04ad1db1366683ff87a42000990c2d1a00040cffffffffffffffff350001000f0000000700066e2afbb26a249a014f005a9f0b6604774e29afb45e7e1e7ecde83a9324092582e60b72d997b4c2b0a44275f9d8a8ad05dbe9238aa7cb59c359e776cc678b000000000000000000000000d76a0000b217e6aad4e84ec0e7a12fed1fd0ac69ab12b8e04ab67db77a7cff84efc2e817c58e2a264868ae8f856c7f428388c941cab1b765452327e8af1b893296e8d31a62ad5c0974e7fcd331e2173b57d75f100a69e9627d42fa1b070fcffe842296b4787d959dbd0b3baee60f9502fb5af207bf4a4bd46e05661ec935d0920eae42178e3a055e6250b6401c5e4ad6f6b4f090cfea06abcf736703e1d4010a11f8ce102f94f153c773c2442e8baa6870042f9877db98dfce930f5d1b34369a8b02165e9f3dbd4413e57868bc4540fa6b7010edaae202c224f1253c6d774db853398674a029885809466b55cc33af0a50f73a1b4ee4123c1396283b3eec8e26e431f419a428500798b64a9ccb5e46e7e0f304ff260d0b5d71baf4fc3706f100120e4fc1ea268584c7e4c68196b327d4f196a2dcd41cd09ac5"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 2.632827207s ago: executing program 1 (id=4405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000000801010000000000000000000000010900010073797a3100000000060002400000000005000300060000000900010073797a30000000000600024000180000440004800800014000000007080007400000000b08000240000000070800024000000e07080004400000000208000940"], 0x98}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xf6, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast2, 0x700, 0x20, 0x800, 0x8}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000600)=""/159, 0x9f, 0x0, &(0x7f00000006c0)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x3, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x1000, &(0x7f0000000840)=""/4096, 0x40f00, 0x1, '\x00', r4, @fallback=0x16, r5, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x5, 0xc58, 0xfffffffc}, 0x10, r6, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x31d, '\x00', 0x0, r5, 0x1, 0x5}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0xffffffffffffffff, 0x80000001}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x16, 0x4, &(0x7f00000019c0)=@raw=[@ldst={0x1, 0x2, 0x1, 0x7, 0x7, 0xffffffffffffffff, 0x4}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r7}], &(0x7f0000001a00)='GPL\x00', 0x3, 0xa, &(0x7f0000001a40)=""/10, 0x41000, 0x40, '\x00', 0x0, @fallback=0xa, r5, 0x8, &(0x7f0000001a80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0xa, &(0x7f0000001b00)=[r8, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000001b40)=[{0x1, 0x1, 0x10, 0xb}, {0x4, 0x2, 0x4, 0xb}, {0x3, 0x1, 0xd, 0x5}, {0x3, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x4, 0x7}, {0x2, 0x3, 0xe, 0xb}, {0x3, 0x3, 0x6, 0x11}, {0x1, 0x4, 0x4, 0x5}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x3, 0x6, 0x4}]}, 0x94) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x14000) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f0000000100)={0x55, 0x80a, 0x8, {0xffff, 0x6}, {0x8, 0x5}, @rumble={0x2, 0x9}}) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001900)={0x0, 0x4, 0x5}, 0xc) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x42) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) 2.539124629s ago: executing program 1 (id=4411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {0x0}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xc0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) (async) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r0, 0x0, 0x0, 0x80400) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x240000, 0x44, 0x12}, 0x18) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) timer_delete(0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000640)={{r9, r10+10000000}, {r11, r12+10000000}}, &(0x7f0000000680)) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd707efbdbdf25130000000300000068c053ada322a2e8a32f4b1aa355a0af5de242ffc0e520a9e20e379e24e9cef93f4ecb0b62fbb6172f0de1cdc9153f8b23a52aef120fc68ec718c4c0f350794acaabd8f987f7ed6ee4af83c83a4c409f0641c9262a6470a267dcdc68673bfd61ed8720b07fa868a92ac7461651f96668a1fc7be31dca573cb08f0bc96d050f0fdeb8f99f24cea1b9de4bc277493c9cda776b1bbedb90cba77f8994f417b92d3cfdf5", @ANYRES32=r2, @ANYBLOB="040013000a000600080211000000000006001200000000000600b500850100000500190001000000"], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) (async) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r13, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0}) 2.53884305s ago: executing program 1 (id=4412): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x460481, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_SYMLINKAT={0x26, 0x19, 0x0, r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@remote, 0x0, 0x0, 0x20, 0x0, [{@empty}, {@multicast1}]}}) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x8, 0x2, 0x0, 0x8, 0x3b, 0x1, 0x0, 0x3, 0xf6, 0x6, 0x1ff, 0x3, 0x8, 0x7, 0x7a, 0x7, [0x2, 0x4]}}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) 2.479227405s ago: executing program 1 (id=4413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000001090700000000000000090400000080829900"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x972, &(0x7f0000000080)="d59165c1bf027d007d2b0695657ca12b3b349e1f5b1f789e427eb4a5e18fd8d9d23f7b59ff720ea481f3dde0389b375bf5b1613d2163a93e127e88b2dc79bf568ac75106623932055861111387b0571e9b5fa8c673e82ccfb3da6299c39fd1187dfec1f2f24eb2a8992012a94c9d973b5168109176a720cfae68bbfd94", &(0x7f00000001c0)="47776d1eb2e587c4cf47bd55bb08988bcd390f489f0e665af145cc86d2f25d383be2cd680fd674a1ef26c34cb8e430db63f229db3e7ed29627aca83b9d5cfe80a689dacf1aa9edbf3a2cfbbc074270146abd132634b39d3dd53964234c7c", 0x7d, 0x5e}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.199132406s ago: executing program 9 (id=4418): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x144481, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000040)=0x1f) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0xd4) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fchown(r1, r3, 0xffffffffffffffff) 1.997855532s ago: executing program 9 (id=4421): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x400, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 1.85927879s ago: executing program 8 (id=4422): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8040, 0x3, 0x3}, 0x18, 0x1) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x12f00, 0x0) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/242, 0xf2}, {&(0x7f0000002400)=""/57, 0x39}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/189, 0xbd}, {&(0x7f0000003500)=""/6, 0x6}], 0x6, &(0x7f00000035c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000038c0)=""/21, 0x15}, {&(0x7f0000003900)=""/84, 0x54}, {&(0x7f0000003980)=""/147, 0x93}, {&(0x7f0000003a40)=""/157, 0x9d}], 0x4, &(0x7f0000003b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003cc0)=""/134, 0x86}, {&(0x7f0000003d80)=""/38, 0x26}, {&(0x7f0000003dc0)=""/226, 0xe2}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/15, 0xf}], 0x5, &(0x7f0000004f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x98}}, {{&(0x7f0000005040), 0x6e, &(0x7f0000005200)=[{&(0x7f00000050c0)=""/64, 0x40}, {&(0x7f0000005100)=""/230, 0xe6}], 0x2, &(0x7f0000005240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000005280), 0x6e, &(0x7f0000005340)=[{&(0x7f0000005300)=""/23, 0x17}], 0x1, &(0x7f0000005380)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f00000053c0)=""/219, 0xdb}, {&(0x7f00000054c0)=""/177, 0xb1}, {&(0x7f0000005580)=""/88, 0x58}, {&(0x7f0000005600)=""/175, 0xaf}, {&(0x7f00000056c0)=""/74, 0x4a}, {&(0x7f0000005740)=""/246, 0xf6}, {&(0x7f0000005840)=""/218, 0xda}, {&(0x7f0000005940)=""/133, 0x85}], 0x8, &(0x7f0000005a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005ac0), 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005b40)=""/255, 0xff}, {&(0x7f0000005c40)=""/95, 0x5f}, {&(0x7f0000005cc0)=""/29, 0x1d}, {&(0x7f0000005d00)=""/166, 0xa6}, {&(0x7f0000005dc0)=""/247, 0xf7}, {&(0x7f0000005ec0)=""/51, 0x33}], 0x6, &(0x7f0000005f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x9, 0x2001, &(0x7f0000006280)={r3, r4+60000000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000062c0)={0x0, 0x4}, &(0x7f0000006300)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000006340)={r18, 0x1}, 0x8) r19 = syz_open_dev$ndb(&(0x7f0000006380), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r19, 0xab0a, 0xfa3) getpid() r20 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000063c0), 0x2, 0x0) r21 = syz_io_uring_setup(0x73ba, &(0x7f0000006400)={0x0, 0x548, 0x800, 0x3, 0x37, 0x0, r11}, &(0x7f0000006480), &(0x7f00000064c0)) io_uring_enter(r21, 0x3133, 0x21ba, 0x44, &(0x7f0000006500)={[0x2]}, 0x8) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000006540), &(0x7f0000006580)=0x4) r22 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000065c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r22, 0x40045613, &(0x7f0000006600)=0x6) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x23, &(0x7f0000006640), &(0x7f0000006680)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, r14, 0x0, &(0x7f00000066c0)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r15, 0x8002f515, &(0x7f0000006700)) setreuid(r5, 0xee01) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) get_robust_list(r17, &(0x7f0000006840)=&(0x7f0000006800)={&(0x7f0000006780)={&(0x7f0000006740)}, 0x0, &(0x7f00000067c0)}, &(0x7f0000006880)=0x18) ioctl$VIDIOC_QUERYSTD(r16, 0x8008563f, &(0x7f00000068c0)) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f0000006900)) ioctl$VIDIOC_S_AUDOUT(r20, 0x40345632, &(0x7f0000006980)={0x2, "06cbdb6fb803cf84e570a7b25085eb4857e899f88dea48910d9d66c3f5172646", 0x2, 0x1}) set_robust_list(&(0x7f0000006a00)={&(0x7f00000069c0), 0x9}, 0x18) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000006a40)=""/53, &(0x7f0000006a80)=0x35) readv(r6, &(0x7f0000007d40)=[{&(0x7f0000006ac0)=""/226, 0xe2}, {&(0x7f0000006bc0)=""/143, 0x8f}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/148, 0x94}], 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000007d80)={0x1, 0xfd1c}) ftruncate(r15, 0x7) 1.799325397s ago: executing program 8 (id=4423): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x15, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.745453634s ago: executing program 8 (id=4424): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r1, {0x1}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1.529368668s ago: executing program 8 (id=4425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000140002000f34e9b300000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426fe6a47dbb8eec61c53b5c4295ea19e48837b364fcb12ade516353eb4b2fc6345b678d884ceefd929776c29bc996442e774d46f9c8131042b24f3c776ff8628b822b17781de7a668134e"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 1.528926725s ago: executing program 8 (id=4426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r5], 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000300)={r3, r7, 0x0, 0xbde, 0x3, 0x6, 0xfffffffb, 0x7e, 0x8, 0x8cbe, 0xad64, 0xc}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x8, 0x1a801, 0x0, 0x0}], 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02200000200000001c0812800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.43963488s ago: executing program 2 (id=4427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) wait4(r5, 0x0, 0x80000000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x80}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) r6 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd69, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x6}]}}]}, 0x38}}, 0x4048000) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0}]) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 999.888706ms ago: executing program 2 (id=4428): mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)=0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x658, 0x360, 0x0, 0xffffffff, 0xf0, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, &(0x7f0000000280), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff], 'geneve0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x8, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@private1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @gre_key=0x5}}}, {{@ipv6={@remote, @private0, [0xff000000, 0x0, 0x7fffffff, 0xff000000], [0x0, 0xff, 0xffffffff], 'batadv_slave_1\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x2, 0x50}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0xa, 0x6, 0x1, [0xfff8, 0x1, 0x0, 0x5, 0x2, 0x5, 0xe, 0x0, 0x6, 0x7, 0xfffe, 0x9, 0x401, 0x5, 0x6a8d], 0x8}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x100000000}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast2, @gre_key=0x1, @icmp_id=0x67}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xff], 'macvlan0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x33, 0xd8, 0x1, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x800, 0xa0a0], 0xe57, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x0, 0x2}}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffffff], 'pim6reg\x00', '\x00', {}, {}, 0x3c, 0x4}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x0, 0x9], 0x7, 0x1, 0x4, [@remote, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @local, @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}], 0xe}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, @ipv6=@empty, @gre_key=0xa24a, @gre_key=0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x658, 0x360, 0x0, 0xffffffff, 0xf0, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, &(0x7f0000000280), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff], 'geneve0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x29, 0x8, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@private1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @gre_key=0x5}}}, {{@ipv6={@remote, @private0, [0xff000000, 0x0, 0x7fffffff, 0xff000000], [0x0, 0xff, 0xffffffff], 'batadv_slave_1\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x2, 0x50}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0xa, 0x6, 0x1, [0xfff8, 0x1, 0x0, 0x5, 0x2, 0x5, 0xe, 0x0, 0x6, 0x7, 0xfffe, 0x9, 0x401, 0x5, 0x6a8d], 0x8}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x100000000}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast2, @gre_key=0x1, @icmp_id=0x67}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xff], 'macvlan0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x33, 0xd8, 0x1, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x800, 0xa0a0], 0xe57, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x0, 0x2}}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffffff], 'pim6reg\x00', '\x00', {}, {}, 0x3c, 0x4}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x0, 0x9], 0x7, 0x1, 0x4, [@remote, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @local, @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}], 0xe}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, @ipv6=@empty, @gre_key=0xa24a, @gre_key=0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) (async) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$fb(r1, &(0x7f0000000300)="fe29f36eda9e56521113b146f089ea887b464933acbc6fd7a26c76970f59280b767a0f67a05a57efe8a6934494f695e72742af3b05b0cf8949eb2fcc26cd320517857768f10714d1c7c2d5c70ba7289d4a90384f867b0ea18f68efc9eb8cc4a673c8c4246ee84bf3d3c4d29f1ed2bfa68b5972c2e4bcdaaa5668c3ded1d4ad1b2ebe9635c6e782547c8f35fd5fd86eedd882c2407b8525a319818f63d247109b0f877ea49bb2df91f2", 0xa9) (async) write$fb(r1, &(0x7f0000000300)="fe29f36eda9e56521113b146f089ea887b464933acbc6fd7a26c76970f59280b767a0f67a05a57efe8a6934494f695e72742af3b05b0cf8949eb2fcc26cd320517857768f10714d1c7c2d5c70ba7289d4a90384f867b0ea18f68efc9eb8cc4a673c8c4246ee84bf3d3c4d29f1ed2bfa68b5972c2e4bcdaaa5668c3ded1d4ad1b2ebe9635c6e782547c8f35fd5fd86eedd882c2407b8525a319818f63d247109b0f877ea49bb2df91f2", 0xa9) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) chown(&(0x7f0000000000)='./file0\x00', r3, r5) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00') 934.999635ms ago: executing program 2 (id=4429): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 934.530183ms ago: executing program 2 (id=4430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) clock_gettime(0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x406}}}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000180)=[{&(0x7f0000005240)="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", 0x100}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0d294861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="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", 0x14f}, {&(0x7f0000004480)="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", 0xd77}, {&(0x7f0000000240)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a40750feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf3", 0xa2}, {&(0x7f0000002480)="c97a88346df66dc806356e1c85d733680cc02564c94f5f37c7634acca95056e312e2c4e2aae43958a102a119a8409f0614e58311ea1b31bca31fba9a638c7c274b8caf83b750dd9decc6abf210c35fbd825f88154d569747dfd2c6b722cb3f9099b47b3e71cf8b9607a37930598ba484da31766119af0802938049d220ca835cfba3445e57144ce6490edc384b4f6aa0a18c39c6c288134c56ccdf02ca0bb82ad9166d84f4cf57cbba1b8510b59e1e1f05a5a59762d5a4499fa60a5e37ddd1f3ecc114191d029cd516bed757b945653b27ec471addfc4c7e1781895cc40e823236d85f1ce35f6e281906788def77b1a9c0801c5b6a4ed5be855df7fdac2ee9d05386795de9bb191c90a6d9f0d1b0af10d07d9cbbf96c3128fe9479e156ff8033c958b52651f850db80a112cb8deef82cd07c9eeca9e79f9a3d2c68ac334e696a5b2451e845e63bd45f95196fd8779bbecc7419f4d551bd64c2c4c5f6a65658752fcb4ec33cb0f69e5eba554a4b74873699a3c2b3cf102d00ba5ee9cd5712c0ea3019cdc8857a272a80d6dd19c716b6c37b69eb4978b52bb5d4b399768617afb153f68242aec7610e375e36602ed746c29652afd1beb2b1408cce1f7d600e7d867d584c5a6c014b7eff90bb3fe6858d28a859c366d93e517eaf6b977aa2462a90e36eff6a3a0a08cbe6c9909e61d0dfcf130f8e213fe5ac78cd721f8d02b02c0095a12524ac68058eb6f81b560eb9befeaa15d5df273529a4ddf8a0a05746e27bd3383ce6a3a90a4c40ccde276d4a433b31afa8ba4ed2c3c954933e78c7eeeab597696ee13e5947a8a441c0c42caebee1cdcc6ef52963aa718e99f979c7dfba653954a886eb421ac39a30e14acddabf6536542f18129ce8bd02a886fe9aa15799185d866c980869ce035b78910df718d4d0b32bb7e3b736ca493a7040a6443e024f2beca2995553177c80a6aa3ae6d53110db0bd099450e41e1fe16592b6e67e076129020a04a49b9e406ff7908049258b8f3b966097503dffe4962db096ae189ccecb81b7b26259b8d8ba4e3ca0de7cb1d1c34c1f34e575e98c5cb5aa91afab8e5819483f097b166935382d42b20d032a63a3887f950b2a435c1575334dfadaac0bf2ef2e1c40a3f63b5505ae6bd810a681a531ae3ef2821cdc929a335ef7d7a1491cb8c1abcfadccfcd212df07997ab36b3c5d82f1318cd069c3e6df2167e1168462958b0437f3b18678aca2977ef8ae3d610a2f31c6b19581411384a4e0d88bdeb7b80106277685f157413ed92ce2815b74a2f5437a3a6fb6b08ace0776173f8219c709e1f8b965f62a949b842020a766820c1f457ba15dc41764d01925c05fc5f9f48808fe46cfb364861cdb3a4008338c55f31ce4b0317cdd3578bc8efc37285bb3fe0309f83b5dc622af1c02d5df2b73530d0a6dcf94f27012bfa79be3bc19f5fe389555d8fbdce26fa31f0dc910a95525336a2d83d35b3d0e2e3a9a74d8af294a58845ceb134f0003dd8c2085504842508313342b9aafb2ff3a1104e657967858e24ebbb0eea5d688b7315bf918aa3b20b71c635c84eee5a23de1c7a2d4c5bd7714134a1cec622f24c26b11428263d25518ed9e85d33b807e1110cf2c2c31fbcb34cfd69abe5363b7e838e8a3f3766a6c953d32ccbfc9e8e3c02d7486692849888899be048e8bb30355a9e592f406717c6d44891192f59dc712872a73c5f1fef0b040f1b5445be8b4427c0f7925a2c77b1e4684de6158235e303254dbd5e09a55d689b9d4e5e8f5fe04ea39dbf779e3d9ff616fbe9be261c086e30c27c89df5acf8624be587af6d13b11d0abcf16cd70f82897963e8dd327526999d053a39bb6f39d7f5bbd43352cd8e776025f4144589e1a8c24cdfa97cc09a7ba4bd442bc9fa02e56ced0454edef90089db6b82ae2979dc7b4a53d4b6b812a56dcda4121e26a3a3232cc81cd1c38644af4e206784e3d1c1f3d9d78f1d75272cd45bd4e8552f071598194b128413ed9f92175add17399fa3741f36750ed9716e00089fd003f3c0864eb0fc991dcb7eb59a827e19575cc79ca269e7e42729234bd8b0c1756ac0c7095484a980ba2406e818fd8a126fc2e2276f28736857f6d5933548b57ed5ac87145bd1acfc89962276d24d6374a939f9950c4298ba663b3f57af1795e1140fdcbf82ac5b4c686fd44a713a39e5a9a04f26403a9b99f143d2ce6ed5a82eb515f0880d049175d635f5060e99538c68fbe7c1e883738a168cb7a1d63975e5fd8339cfba10daa95dc1becad4173d8c78ec70470b501df74679d973bec49d0be291b2ce3a0a0721fbb1ea0282fed83a64725c457c60627cecb4a630ebfdd913fc2a6c1790a50dc88f5a4dea352960590d5d613a5852c3474277b4feeef891c263a55e8b5e830a94dd994d862d929242820f6587bb17feeaf341aa9b30c7cedaf1c89dfc3d702f09d7734fd45f01d6fe9bbb4ea1f1b2b862889c3512dbdbc0aacf220edf911b0daaa4d579641e74801c259e005b4127ce4a8ac698fabe38e0e70c31c39576542a54eb9b95ddb0de57fdf9dae325509bdcb528d99847f2ad9a58d4b4a55e4295805925366b92c6012fd4a667fa59d5f41a13aab9391a53cbf75d32c664835e37e102eaf7da5b3e96b113239c7a4fcba4cf01c6662fee8c51a11ce74772940663cb13c8828ba91f8edb6b7bdbba49647998da494d1a83d2d5a274f0570fdca139a497a8c59b1c324b3e1d6c9a45f83c5da0a49499010835096b1cf8ae8cb708289712253c773dd9597a3febdc82dad5b158c04cef3fba54d2a4b16925b388b38433d0ad7a855ae9502f53bdc38a91d515004d7fffa0243034e92c2ea2d0e7bb3dc43c75753bc82a36b9d8e46ec583ffc7901c8415437a6cbd448410e5254f0b3dc1eb16097b337d3d523744d4ce65ff5d39517d0ee76e8d7154c1bdc1e437a9fa1c96d92ec2b1447dbf091bb7dc1586b6fed74ffbcaa1db7c7f04812e7c562b82f0a4aacc300b68b640a1972b5c70c5f7f1483e294e8a72d478c522ff5cfcfc26f137719bb1a029c5364abd366eb3cea1fdbc579a51f97ec7bd91816c63c74ef6ee6e103e53291c26620a70d819f85f14c4ba2360667256a7303ba1a56900091606fd665263d6207396e40968f69707261fde8cfeb0360277655cd09daabce4dcd3537237f1c1b92d0c0923c66b2fe81501208454ab7057c3642b7e29db1a36e3dd8fa7cde9d54d908ef68a90dc28397f8407b32a7329c0bbf81c7d42f92407095c6db6d19b710cfe00c794756ce1660a27b52cc1a4acfb4c174400e1d00bd62f6710c5cde3476f6470ef7c0c62d6e9615da5320f419d8c05278e2b29966d309460a2adc95fe8155c99a4a38289bd7ef9cd7a6a42c7ee44489e4cd35bc1d2c5ef4cdce4d307ff69cad271a00524ac98d9dc191009e2a44dc31e0afe6394b0484efa23f3c32d17faae9c63f87bc538bb680a98284959a6f4148494d1d45b782f4117aeb2febca50807bb53d81bf434a4d818cc649541f027c1907d2b7bfcfcfbd339e86117a7d0c4dde3e0378ae60f367cb61ca08dbac4975ba1fc6132a20d698cada9e52070ddbb96e0d0c5c4221777d6887229a9d51edfb9ac86a51647e551d191aa442b684d833bfae3f9ff1cced55fcaa85cf58cef43b1af69ed48fd206699dad52fb21b8dfd2aa0d5078a72a621d67ce60f66f1147b58919f914df31e13ae9dd31b6ed76cd345dd0cfdf1ad9635c0b0e4b7f143cba65ae1a98ac9d195fa3fe5e483e676442c9680e221a1c1c02ffe41caebcb419571be8c8f32843dcda7b56fb648d2bb26210dcc39c2db781b6646264a1ebd6408947ab31e9274d2f1bbab0db4655855c15d34b51bc02d442070218955d801892f7a81ccdd533418f15b950f896715366ab55d0b4db39a2ecb9ef98f9182b2112698816e644d9b52350524ebc75bf4b6d7eaf96611d57a2a01222d47d00a4c92c685ecd281752fc42c2e7ed3eec58d80f591769db5ee9bae4f0b70b01da8f4616ac5e897cb80a3bc01aaa9b33cdf4eb6451c4fbad22f5877e63667b95e29da22735061551fffe2a4a889ff6624b3f83b3fa4094f1b2f6e762c9d98b651fd8f989828cc615a4ff715b49f912d66b6526250caa621751ef7aa379f22f412a52892719043da80c4f1ad97f0960e0698cf12b1f9e2ad099b955a272e045aa2c58a70472c499cf8635849a8afc7e8d3137ea579652d1f56a01b3150ea882677f72c479909fc81887681ff0910bcfe6e29df00f2f94cf26ce377e1b0ca37af20934ab9842dd3680ab1484a771a981c8354b0ca0bd434e566e013d40d9e0fbc1410b49babec6e8d38e630f35a4339dbf9cfc6f19bce4140aa9d6a646905464b3884067da8b621f3c931eb98a9224558113550c42648a9c9cf5667b3f27e61c553c99a124da1be4c1c05d266e172e3119f7e9ab8de0931311be321fa1c7f11718fce89171bf95190f4317753c7fd2e42fa7c66dd1cd322af5b5a6bc5eb14693a8a5c4242a5017a0f0fbd1c1711d179f824c4c1b58f9c3119e20b3797ce6d6c7d1e6d8ae38e098b823f568eb36ed6cbd776119df7448c095599ea10ee7e695faca0c4574a4cd446d6a92071b02c90cf6caa5d6d7073308adea22a37422f075187e9396b7472b086db25f1204488663aeef8f34e71db91fa0c2ae52963b1bd40e23b40b8b95e86885277dbb3048fb9abc3216d6675f8e0a28a4d652a51637bcd8eb4fb58f56c1c9b1e93dfb55cbffe14cfb34dba703205c26fa76360b736a2b2d6dbc446765ca8b60e166ba89cb8166a2920488071fd4707d0219630d4880ebab41beb11613ecbdbb3a74ba74e289b5300361d4e7ea99197077f90dfc75f37ad4cebefded0a2056bee2fff166d7094c7a51ad912875ff5bc4d3f6735024e788bd821ffe73406f0f25018c5afe021cdd3913016a9ca889859a6b2adccbb50078c1dd405a9361f10ee64a49100c58e1097c662f226a815f2f6bbf5a0caa9504e85e112d3f0df01b70b0aa294d7cf32c616581fb84c1c6e545e8f77ba4c47738cc1ddb38363959d242ef370832fd21278a613f6b9e6321e8ba5def3930d04ee18e022ba4eb5007ff5612a00cf65346120793bb793fc4befb80f07010ac16626f7ae3563fd073e9e066ecc21efaed8d1cebe352b8b8e524b918e1dee293fb53bc7d37e39d5e32b5e6bd43fb6528a8a17c1eab484e2ddac2f7f0b865112af10536ee68b843c9af735cb8560396a2888eaa490bf813bb404184cce3b4497b209ebd25a1b6fb4ec60281e42d85311cd167532892a57bcb8c53d38220e3339bfcc5f333f635fba2ec4c3d9284ed7290194b97f4a87993ae2c50942c049bf1057ebdaf74a2222a435cca98f02057911b8db7ac946aaa6d3887f7b32d0ed15da2ca53d9f4334c5aa9cda26f9d69ee6066eba1e3f6437ee517aa822a77ac8de8072ad3b722446d74e04320764624ffe64443994be848b8028be293009d304553811953cb3a7637522086efb759434f9224f49cd60e6a628b16ee3d0991399b24a535f9512b1fa76e444edd9d3e406f9a22dcf6fe68bf4eca04adc0b00f522a5e1a3ed06e4509eafdcd849c9ca9e9e66066e6f0f683e9ad83fadcdfcf73a2cc49a225f2b9d7b6b83c8b211adcf5ae5a6ec346a2056fb7b63f026e9a730ee646f83e556252fe6a516681ef69019ecc959db88e767b2347680ae38d7565ae1a7dfb7f160cb67cb3577770b85ca7530f048d67dc780a1", 0xfe6}, {&(0x7f0000003480)="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", 0xf16}], 0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) clock_nanosleep(0x1, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000300)) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 377.407148ms ago: executing program 9 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050027bd7000002000040600000008000300", @ANYRES32=r2, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) socket(0x8, 0x803, 0xfffffffd) 370.715841ms ago: executing program 9 (id=4432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0xd9, &(0x7f0000000100)=0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r3 = gettid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000ed0332d90cf3171c23da430e7e90d68a51285170ad62ec8b9e6b9ae845d41802bb0fff4345cfe27b7d2251217ffee608ae577aef97bcf3402047ed8aa1d10e49c25cf2c9e9241f3230b97795e640c2ed0c0f19845966173ea72205951025cf6f08e469f1ff83641d45d0a002c98dd89aba73cc21b844d8583eca0e83b6577f3a3e2e5481c27ef5d5a12448705136665d2a665ce43a533696f8325803f7c5c115f3ada67c8efedf56f777d4de45e690de", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x81, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3d8, 0x1e, 0x300, 0x70bd2c, 0x25dfdbfc, {0x11}, [@typed={0x4, 0x81}, @typed={0x8, 0x84, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x10b, 0x0, 0x0, @u64=0x1}, @generic="d2feaf81f4cb2fc0f4f54cf96cd6c23b41b4218a7170eb80acacf2e388c2800694b0dbb8ecd87efd86f3484064ce385e7909b3da0f4b4454057816e790db0ea5b5fc662f95ee227226f861d14fefaca06d85b43d83cfd189", @generic="26b5eb40b0ae8272e908b354993e00c5f1cc595a11d4b96b504a8ec3f64b402e71945dbc6e9c4705f5c5997b7e27ca0473b0cebd1335a43ea31869b2c8f0cb88dab972ca500e59f0ffc12483b81cb88cbf1b80d6ab", @generic="e5e8be9dd8584a236225f13ec0059576cede4e005a9e38a08eab3eb9396bc2446f7cc1d2ed6f575ed2d7ed78fe0d94ca92a6e68792cbf52f82ca5cc418fcbe2d8da541f71f2de4f6689637f80d03c291eeb8be54001392b190de07", @nested={0x157, 0x76, 0x0, 0x1, [@generic="dc9e7704e7683394e6e10f10de8affec2400dc6ad13035ff3420565483e3debf2aacbf81d51efdd2e7e27102c634073da8b2037a37a2", @generic="ca8a3095b742822916837b598097c7358da1db548d344de7ee119c56c8d4ce116a2f1da3cd8b28bdee852f132b7c9322ba25e11348d871c50786dce297767d90", @generic="29b5f93733134ff5ca24698aa6c19870f30f1298f1cb08482260444041541eb6dcfca06d2429252e14a16970845cb5ccb453060571de1d95670f3997076c2c2236707b9658cfd6aa9c419c9e580bc848114e9cda3fc052880a54a439d51858a518fa15ec3f8669275b14026f6eca73a7f74b3279b73a68e7c3d26471b7c36b8be6a4ca5c07b23df5c61d0e59868311696d1e085ff3c1dc9fd0f8f9032c940ca4e11ecb97835a12adc4a91b8fdb2a9aed0b823dd6671d03888c4c84d89b426b204951bcbf74e8941cbd8f74b280c1bf556056ac37cf23835a3e95c14be9"]}, @nested={0xb2, 0xfa, 0x0, 0x1, [@typed={0x4, 0x126}, @nested={0x4, 0xa9}, @typed={0x8, 0x3b, 0x0, 0x0, @pid=r3}, @generic="0679e83b6d4b5a6f8c90cf9de8540c466343c3a4b3208f30f370c0edcbd4d52a8cc38e2995f272ea3956d51db3bafb6e40173dfabe0b02ec195a004358d4e45f4f5477d8af2357d0e15a633f77e9b6c827f657621027d94ef89ad0ce015c9cda085617fb785f781ed483ba62c8888e2b9c81d6dd585e8bf1a26361b434f96d7d3cc85d92d88ee2cb21d74ea1f1bf6ef8cd37e967a87f38b19c95daa7bb72"]}, @generic="ddcd086606d8d1abd0f128228d890fc5aa2dd655e0810a841765fb5d9e1ec1d57cc56b3f8e61e174f71f63927b895dc73511fd2d9dc53095ddf921a66ff77f7053251cf26b0d6c47be9b00f621cb5eb1299dbae0f2d21818f28096929b49eef9793bf13f7c314444fc41090555218e304b441785985c47ad68e3f32ef8b0effaa843634619f61a7ba943ebdef79b2f3aa217c2a44e3dac"]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8804}, 0x8064) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) 279.816621ms ago: executing program 9 (id=4433): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300460d1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 64) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (rerun: 64) 180.353219ms ago: executing program 9 (id=4434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r5 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0}) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000640)={r3, 0x5, 0x5}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x103200, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000180)="d9286992e82eb45fb2375cbd06e7662684a51841f621596e484eac115b232d155548893400c35452dd3624d0d740b7cb3c128e85426531085a1181a2366e3bb90ab662a01a03f202ffd666a9e892671f82742fdeb5648ed1c60eab1da40626a236b0733da85d7dc141dc8a81d765b6b06d0d65984caaabb1937558ac69", 0x7d}, {&(0x7f0000000440)="ed19dcfd529a3f071da99d9f695bfe261c8e43ea618410033a114674b0530c8033ee61bacfb1ea89ba10e97a046a0588095590d2da88aaf1442450d68e238d7448ffe6509ea9f42e410d44d1e50cbc6043c4dadfb6d97024db06750910b7f50c654b1d11048746ee2caa162ad48973d89d8d2022285ef2792d525dc0048e445a34d6db300dc8d1ff29d1dfcb3d1e1eb0441d4a3cb0f1714995d6ed6e1b590af80a3598f9bed345a7a6f59b84a5ce5ee1277d8cdaa62357f8968c40224dfac6a80c02206d1872", 0xc6}], 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f00009ef000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000072, 0xda71}}], 0x20}) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x2dd, 0x5, 0xfc, 0x5, 0xfffffffb, 0xfff}) 99.95196ms ago: executing program 8 (id=4435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000840000000400800009000000000000007a465faf23d29bbd6083796a800332ab5f2e3040833448ee722fa1090c8d642d159d6548d7213c1187a05badeb0b72a55df698cc089c81e476cae87192a1c16135019e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pstore\x00', 0x8000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000840000000400800009000000000000007a465faf23d29bbd6083796a800332ab5f2e3040833448ee722fa1090c8d642d159d6548d7213c1187a05badeb0b72a55df698cc089c81e476cae87192a1c16135019e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pstore\x00', 0x8000, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x13) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 0s ago: executing program 2 (id=4436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000025deffff2400000003000000050000d01c565d0400000009000000030000000d0000000460330e0a9dbea3fd9d2e0659cab50019fa7bb805a7b00205575d299fac68241c447189e48424e1a3a1e7d6f617"], 0x0, 0x3f, 0x0, 0x8}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32], 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 0s ago: executing program 8 (id=4437): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000100000000000000d9637d220174cb58750d4f729294bc7c48c44b1ad6fe5391c6816876c1ffd81ddbe61e00"/76, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00Oy', @ANYRES64=r2], 0x40}}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.2.3678'. [ 381.793581][T19012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3678'. [ 382.079261][ T6032] hid (null): global environment stack underflow [ 382.083653][T19018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19018 comm=syz.7.3681 [ 382.100186][ T6032] hid_parser_main: 4086 callbacks suppressed [ 382.100205][ T6032] hid-generic 0002:653C80:0008.0014: unknown main item tag 0x1 [ 382.106476][ T6032] hid-generic 0002:653C80:0008.0014: global environment stack underflow [ 382.110634][ T6032] hid-generic 0002:653C80:0008.0014: item 0 1 1 11 parsing failed [ 382.114860][ T6032] hid-generic 0002:653C80:0008.0014: probe with driver hid-generic failed with error -22 [ 382.145665][T14407] team0 (unregistering): Port device team_slave_1 removed [ 382.198017][T18883] Bluetooth: hci0: command tx timeout [ 382.202773][T14407] team0 (unregistering): Port device team_slave_0 removed [ 382.215946][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3682'. [ 382.263605][T19026] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 382.353852][T19037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.696841][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.700187][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.703633][T18957] bridge_slave_0: entered allmulticast mode [ 382.708118][T18957] bridge_slave_0: entered promiscuous mode [ 382.712977][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.716537][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.719873][T18957] bridge_slave_1: entered allmulticast mode [ 382.724092][T18957] bridge_slave_1: entered promiscuous mode [ 382.761426][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.771549][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.802147][T18957] team0: Port device team_slave_0 added [ 382.807568][T18957] team0: Port device team_slave_1 added [ 382.835582][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.838739][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.851361][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.858335][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.861677][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.873645][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.916994][T18957] hsr_slave_0: entered promiscuous mode [ 382.919576][T18957] hsr_slave_1: entered promiscuous mode [ 382.948949][ T60] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 383.050857][T18957] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.059860][T18957] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.063011][ T40] audit: type=1400 audit(2000524362.378:24235): avc: denied { listen } for pid=19060 comm="syz.4.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 383.064298][T18957] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.078918][T18957] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.079081][ T40] audit: type=1400 audit(2000524362.398:24236): avc: denied { accept } for pid=19060 comm="syz.4.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 383.098171][ T60] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.101955][ T60] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.103072][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.106455][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.108773][T18957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.112729][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 383.115059][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.115108][T18957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.126869][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 383.133306][ T60] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.133510][T19068] tmpfs: Bad value for 'mpol' [ 383.137480][ T60] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.142617][ T60] usb 7-1: Product: syz [ 383.142690][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.144388][ T60] usb 7-1: Manufacturer: syz [ 383.154206][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 383.154738][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.157777][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 383.167863][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.168688][ T60] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 383.173584][ T60] cdc_wdm 7-1:1.0: Unknown control protocol [ 383.191493][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.210406][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.213505][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.230546][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.233527][T14407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.307076][T14407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.358742][ T60] usb 7-1: USB disconnect, device number 29 [ 383.397074][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.569006][T18957] veth0_vlan: entered promiscuous mode [ 383.574503][T18957] veth1_vlan: entered promiscuous mode [ 383.618979][T18957] veth0_macvtap: entered promiscuous mode [ 383.627096][T18957] veth1_macvtap: entered promiscuous mode [ 383.647352][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.662839][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.674586][ T66] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.679941][ T66] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.682969][ T66] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.689394][ T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.745861][T19085] 9p: Bad value for 'rfdno' [ 383.770977][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.773788][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.813614][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.818159][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.884299][ T40] audit: type=1400 audit(2000524363.198:24237): avc: denied { setopt } for pid=19089 comm="syz.8.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.958658][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.981876][T19087] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 383.983063][T19102] netlink: 'syz.2.3693': attribute type 6 has an invalid length. [ 383.993453][T19087] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 384.062042][T19108] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.3699'. [ 384.067834][T19110] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3700'. [ 384.073876][T19112] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3700'. [ 384.121126][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3699'. [ 384.235755][ T60] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 384.265940][T18883] Bluetooth: hci0: command tx timeout [ 384.397265][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.401279][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.405440][ T60] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.410176][ T60] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.414639][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.419508][ T60] usb 13-1: config 0 descriptor?? [ 384.445791][ T6023] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 384.596014][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 384.600745][ T6023] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.604317][ T6023] usb 7-1: config 179 has no interface number 0 [ 384.606982][ T6023] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 384.611640][ T6023] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 384.617490][ T6023] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.622798][ T6023] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 384.627893][ T6023] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 384.633585][ T6023] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 384.638409][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.645060][T19116] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 384.652025][ T6023] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 384.827164][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x1 [ 384.829696][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 384.832282][ T60] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 384.844228][ T60] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 384.876474][ T10] usb 7-1: USB disconnect, device number 30 [ 384.922919][T19127] netlink: 'syz.7.3703': attribute type 4 has an invalid length. [ 384.934509][T19126] netlink: Unknown conntrack attr (type=2304, max=9) [ 384.935727][T19127] netlink: 'syz.7.3703': attribute type 1 has an invalid length. [ 384.936832][ T66] Bluetooth: hci4: Frame reassembly failed (-84) [ 385.161597][ T60] usb 13-1: USB disconnect, device number 2 [ 385.165223][T19103] plantronics 0003:047F:FFFF.0015: usb_submit_urb(ctrl) failed: -19 [ 385.255759][ T6032] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 385.405758][ T6032] usb 12-1: Using ep0 maxpacket: 8 [ 385.409986][ T6032] usb 12-1: config 244 has an invalid interface number: 248 but max is 2 [ 385.413747][ T6032] usb 12-1: config 244 has an invalid interface number: 206 but max is 2 [ 385.416876][ T6032] usb 12-1: config 244 has an invalid interface number: 97 but max is 2 [ 385.419778][ T6032] usb 12-1: config 244 contains an unexpected descriptor of type 0x2, skipping [ 385.422885][ T6032] usb 12-1: config 244 has no interface number 0 [ 385.425151][ T6032] usb 12-1: config 244 has no interface number 1 [ 385.427405][ T6032] usb 12-1: config 244 has no interface number 2 [ 385.429654][ T6032] usb 12-1: config 244 interface 248 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 385.433649][ T6032] usb 12-1: config 244 interface 248 altsetting 254 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 385.437631][ T6032] usb 12-1: config 244 interface 248 altsetting 254 has a duplicate endpoint with address 0x2, skipping [ 385.441404][ T6032] usb 12-1: config 244 interface 248 altsetting 254 endpoint 0x6 has invalid maxpacket 80, setting to 64 [ 385.446017][ T6032] usb 12-1: config 244 interface 206 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 385.449800][ T6032] usb 12-1: config 244 interface 206 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 385.453382][ T6032] usb 12-1: config 244 interface 206 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 385.457274][ T6032] usb 12-1: config 244 interface 206 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 385.461190][ T6032] usb 12-1: config 244 interface 206 altsetting 5 bulk endpoint 0xC has invalid maxpacket 560 [ 385.464592][ T6032] usb 12-1: config 244 interface 206 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 385.468413][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 385.472300][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 385.476117][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 385.479758][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 385.483317][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 385.487125][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 385.490643][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has an endpoint descriptor with address 0x51, changing to 0x1 [ 385.494513][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 385.498924][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0xC, skipping [ 385.502955][ T6032] usb 12-1: config 244 interface 97 altsetting 127 endpoint 0x84 has an invalid bInterval 32, changing to 9 [ 385.506790][ T6032] usb 12-1: config 244 interface 97 altsetting 127 endpoint 0x84 has invalid maxpacket 1848, setting to 1024 [ 385.510564][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 385.514175][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 385.518024][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 385.521722][ T6032] usb 12-1: config 244 interface 97 altsetting 127 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 385.526268][ T6032] usb 12-1: config 244 interface 248 has no altsetting 0 [ 385.528694][ T6032] usb 12-1: config 244 interface 206 has no altsetting 0 [ 385.531097][ T6032] usb 12-1: config 244 interface 97 has no altsetting 0 [ 385.535571][ T6032] usb 12-1: Dual-Role OTG device on HNP port [ 385.537864][ T6032] usb 12-1: New USB device found, idVendor=1231, idProduct=ce02, bcdDevice=cb.69 [ 385.541084][ T6032] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.543717][ T6032] usb 12-1: Manufacturer: â¡‚ã¶ä¡¥í‡°ï§ªè¼žëœé§­î »Þ¥î¶ë·µì»¨áŸä©´â»ˆë–²æ¸’⹎抆걢䟻酼⭎绳랞弚緸⒇Ʊ쨖瞉î®ë’ŸëœŽê«î¦¶ã–犋鈢⮽êŠä¬Œî‰¼ä‚Žäžè’“â§á¾²ç¢‰å’‡ä”‚ᆭ젢籬ჲ딪给撥䯘늜焽퇂⥹՛톡ꋥ纫ఴﭨ [ 385.552183][ T6032] usb 12-1: SerialNumber: syz [ 385.732120][T19152] __nla_validate_parse: 4 callbacks suppressed [ 385.732132][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3711'. [ 385.802531][ T40] audit: type=1400 audit(2000524365.118:24238): avc: denied { mounton } for pid=19159 comm="syz.8.3712" path="/4/file0/bus" dev="autofs" ino=96701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 385.802577][T19160] overlay: filesystem on ./bus not supported [ 385.821521][ T6032] usb 12-1: USB disconnect, device number 3 [ 385.832754][T19166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.839309][T19166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.877391][ C1] Unknown status report in ack skb [ 385.880601][T19171] program syz.8.3715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.917571][ T40] audit: type=1400 audit(2000524365.238:24239): avc: denied { read } for pid=19172 comm="syz.2.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.918464][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 385.969220][ T40] audit: type=1400 audit(2000524365.288:24240): avc: denied { map } for pid=19181 comm="syz.8.3718" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 385.994172][T19184] tipc: Enabling of bearer rejected, failed to enable media [ 385.999827][T19186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=19186 comm=syz.2.3719 [ 386.005070][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.126026][ T6032] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 386.225875][ T60] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 386.256029][ T6032] usb 12-1: device descriptor read/64, error -71 [ 386.347187][ T5942] Bluetooth: hci0: command tx timeout [ 386.399823][ T60] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.402991][ T60] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.405980][ T60] usb 13-1: Product: syz [ 386.407473][ T60] usb 13-1: Manufacturer: syz [ 386.409190][ T60] usb 13-1: SerialNumber: syz [ 386.414378][ T60] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 386.431587][ T5990] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 386.495846][ T6032] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 386.550981][T19188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.561812][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3720'. [ 386.626122][ T6032] usb 12-1: device descriptor read/64, error -71 [ 386.656540][ T60] usb 13-1: USB disconnect, device number 3 [ 386.736221][ T6032] usb usb12-port1: attempt power cycle [ 386.958127][T19196] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 386.988293][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 386.991269][T18883] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 387.046669][T19206] mac80211_hwsim hwsim73 : renamed from wlan1 (while UP) [ 387.086044][ T6032] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 387.106844][ T6032] usb 12-1: device descriptor read/8, error -71 [ 387.113169][T19206] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3724'. [ 387.299028][T19225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.308004][ T40] audit: type=1400 audit(2000524366.628:24241): avc: denied { getopt } for pid=19222 comm="syz.2.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 387.353092][ T40] audit: type=1400 audit(2000524366.668:24242): avc: denied { write } for pid=19223 comm="syz.4.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.353908][T19228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.359998][ T6032] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 387.386621][ T6032] usb 12-1: device descriptor read/8, error -71 [ 387.442527][ T40] audit: type=1400 audit(2000524366.758:24243): avc: denied { map } for pid=19232 comm="syz.2.3734" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.476103][ T5990] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 387.479232][ T5990] ath9k_htc: Failed to initialize the device [ 387.483924][ T60] usb 13-1: ath9k_htc: USB layer deinitialized [ 387.496165][ T6032] usb usb12-port1: unable to enumerate USB device [ 387.525070][T19243] syzkaller0: entered allmulticast mode [ 387.597803][T19246] lo speed is unknown, defaulting to 1000 [ 387.601931][T19246] lo speed is unknown, defaulting to 1000 [ 387.614824][T19245] lo speed is unknown, defaulting to 1000 [ 387.679918][T19253] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3739'. [ 387.706917][T19245] lo speed is unknown, defaulting to 1000 [ 387.914583][T19269] syzkaller0: entered promiscuous mode [ 387.926029][T19269] syzkaller0: entered allmulticast mode [ 388.346647][ T1246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.360352][T19308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3753'. [ 388.436293][T18883] Bluetooth: hci0: command tx timeout [ 388.571766][T19328] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.822303][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3765'. [ 388.921420][T19350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238726434 (542556983552 ns) > initial count (358389898240 ns). Using initial count to start timer. [ 389.072775][T19356] lo speed is unknown, defaulting to 1000 [ 389.075400][T19356] lo speed is unknown, defaulting to 1000 [ 389.117996][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3768'. [ 389.160300][T19359] openvswitch: netlink: IPv4 tun info is not correct [ 389.164968][T19359] openvswitch: netlink: IPv4 tun info is not correct [ 389.260064][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 389.263998][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 389.338392][T19378] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 389.341332][T19378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.349333][T19378] vhci_hcd vhci_hcd.0: Device attached [ 389.354227][T19378] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 389.357139][T19378] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.362360][T19378] vhci_hcd vhci_hcd.0: Device attached [ 389.449261][T19378] netlink: 'syz.4.3774': attribute type 5 has an invalid length. [ 389.596799][ T6023] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 389.637942][T19381] vhci_hcd: connection closed [ 389.638111][T19379] vhci_hcd: connection reset by peer [ 389.642125][ T7925] vhci_hcd vhci_hcd.4: stop threads [ 389.645942][ T7925] vhci_hcd vhci_hcd.4: release socket [ 389.648525][ T7925] vhci_hcd vhci_hcd.4: disconnect device [ 389.652202][ T7925] vhci_hcd vhci_hcd.4: stop threads [ 389.654501][ T7925] vhci_hcd vhci_hcd.4: release socket [ 389.657366][ T7925] vhci_hcd vhci_hcd.4: disconnect device [ 389.859671][T19410] binder: 19409:19410 ioctl c018620b 2000000000c0 returned -14 [ 389.991172][T19419] netlink: 'syz.8.3785': attribute type 322 has an invalid length. [ 389.997228][ T6032] hid-generic 0362:07FF:7FFFFFFF.0016: item fetching failed at offset 0/2 [ 390.000320][ T6032] hid-generic 0362:07FF:7FFFFFFF.0016: probe with driver hid-generic failed with error -22 [ 390.189923][T19433] XFS (nbd4): no-recovery mounts must be read-only. [ 390.201135][T19436] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 390.362271][ T40] audit: type=1400 audit(2000524369.678:24244): avc: denied { setattr } for pid=19450 comm="syz.4.3794" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 390.498986][T19467] FAT-fs (sr0): unable to read boot sector [ 390.511860][T19468] nbd: illegal input index 1879048192 [ 390.577331][T19478] Bluetooth: MGMT ver 1.23 [ 390.584231][T19476] qnx6: unable to set blocksize [ 390.743795][T19496] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 390.825868][ T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 390.843106][T19502] Cannot find add_set index 65532 as target [ 390.844211][ T40] audit: type=1400 audit(2000524370.158:24245): avc: denied { connect } for pid=19500 comm="syz.8.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 390.896280][ T60] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 390.976022][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 390.980753][ T24] usb 9-1: config 1 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 390.982046][T19511] 9p: Could not find request transport: v [ 390.985594][ T24] usb 9-1: config 1 interface 0 altsetting 24 bulk endpoint 0x82 has invalid maxpacket 1023 [ 390.985613][ T24] usb 9-1: config 1 interface 0 altsetting 24 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.985630][ T24] usb 9-1: config 1 interface 0 has no altsetting 0 [ 390.987539][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.987556][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.987568][ T24] usb 9-1: Product:   [ 390.987577][ T24] usb 9-1: Manufacturer: Б [ 390.987586][ T24] usb 9-1: SerialNumber: syz [ 390.990981][T19476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.015558][T19476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.036565][T19516] __nla_validate_parse: 6 callbacks suppressed [ 391.036578][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3815'. [ 391.079459][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 391.083352][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.089043][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.093276][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 391.098366][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.104655][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.109469][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.321340][ T60] usb 7-1: GET_CAPABILITIES returned 0 [ 391.323285][ T60] usbtmc 7-1:16.0: can't read capabilities [ 391.429667][ T24] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 391.437328][ T24] usb 9-1: USB disconnect, device number 32 [ 391.501984][T19539] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 391.502490][T19541] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 391.526074][ T5990] usb 7-1: USB disconnect, device number 31 [ 391.534426][T19539] VFS: Can't find a romfs filesystem on dev nullb0. [ 391.534426][T19539] [ 391.541413][T19541] VFS: Can't find a romfs filesystem on dev nullb0. [ 391.541413][T19541] [ 391.842006][T19550] bond2: entered allmulticast mode [ 391.844912][T19550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.851818][T19550] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 391.863038][T19550] bond1: (slave lo): speed changed to 0 on port 1 [ 391.867819][T19550] bond1: (slave lo): Enslaving as a backup interface with an up link [ 391.874524][T19550] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 391.876099][ T24] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 391.975027][T19556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3827'. [ 392.047806][ T24] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.052981][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 392.058724][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.063698][ T24] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.069825][ T24] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.074058][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.082244][ T24] usb 13-1: config 0 descriptor?? [ 392.085422][T19546] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 392.222050][T19566] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 392.291864][T19573] input: syz0 as /devices/virtual/input/input47 [ 392.409083][ T40] audit: type=1400 audit(2000524371.728:24246): avc: denied { getopt } for pid=19575 comm="syz.2.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 392.492767][ T24] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 392.509097][ T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 393.563079][ T69] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 150 seconds [ 393.566861][ T69] block nbd1: Possible stuck request ffff888028360200: control (read@1024,1024B). Runtime 150 seconds [ 393.570441][ T69] block nbd1: Possible stuck request ffff888028360400: control (read@2048,1024B). Runtime 150 seconds [ 393.573986][ T69] block nbd1: Possible stuck request ffff888028360600: control (read@3072,1024B). Runtime 150 seconds [ 394.196050][ T7915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.665581][T19579] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 394.665799][T18883] Bluetooth: hci2: command 0x0405 tx timeout [ 394.735933][ T6023] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 395.464996][T19579] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.467326][T19579] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 395.478063][T19579] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 395.482434][T19579] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.484565][T19579] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 395.487683][T19579] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 395.508985][ T66] Bluetooth: hci4: Frame reassembly failed (-84) [ 395.526432][ T6512] usb 13-1: USB disconnect, device number 4 [ 395.657986][ T24] IPVS: starting estimator thread 0... [ 395.658096][T19609] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 395.755441][T19610] IPVS: using max 44 ests per chain, 105600 per kthread [ 395.762531][T19612] kvm: pic: non byte read [ 395.972553][T19620] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 395.978559][T19620] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 395.982196][T19620] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 396.636694][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3845'. [ 396.641937][T19629] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.686714][T19631] openvswitch: netlink: IP tunnel dst address not specified [ 396.735555][ T6512] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 396.746044][ T5942] Bluetooth: hci5: command 0x0c1a tx timeout [ 396.890666][ T6512] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 396.893376][ T6512] usb 13-1: config 0 interface 0 has no altsetting 0 [ 396.898064][ T6512] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 396.901488][ T6512] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 396.904244][ T6512] usb 13-1: Product: syz [ 396.906039][ T6512] usb 13-1: Manufacturer: syz [ 396.907644][ T6512] usb 13-1: SerialNumber: syz [ 396.916015][ T6512] usb 13-1: config 0 descriptor?? [ 396.919800][ T6512] hub 13-1:0.0: bad descriptor, ignoring hub [ 396.923171][ T6512] hub 13-1:0.0: probe with driver hub failed with error -5 [ 396.928283][ T6512] usb 13-1: selecting invalid altsetting 0 [ 396.928612][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3849'. [ 396.938998][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3849'. [ 397.010393][T19647] netlink: 'syz.2.3852': attribute type 12 has an invalid length. [ 397.014190][ T40] audit: type=1400 audit(2000524376.329:24247): avc: denied { bind } for pid=19645 comm="syz.2.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 397.545020][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 397.545632][T18883] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 397.548896][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 397.804796][T19623] usb 13-1: reset high-speed USB device number 5 using dummy_hcd [ 397.844780][ T24] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 397.968028][T19623] usb 13-1: device firmware changed [ 397.970853][ T6032] usb 13-1: USB disconnect, device number 5 [ 397.995183][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 397.999624][ T24] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.003143][ T24] usb 9-1: config 179 has no interface number 0 [ 398.005722][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.010762][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 398.015102][ T24] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 398.019709][ T24] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.028125][ T24] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 398.032770][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.048992][T19666] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 398.134583][ T6032] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 398.181155][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3860'. [ 398.184254][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3860'. [ 398.225925][T19679] netlink: 'syz.2.3861': attribute type 1 has an invalid length. [ 398.241296][T19679] bond3: entered promiscuous mode [ 398.243992][T19679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.286638][ T6032] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 398.289647][ T6032] usb 13-1: config 0 interface 0 has no altsetting 0 [ 398.295178][ T6032] usb 13-1: string descriptor 0 read error: -22 [ 398.297751][ T6032] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.300744][ T6032] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.309364][ T6032] usb 13-1: config 0 descriptor?? [ 398.312858][ T6022] usb 9-1: USB disconnect, device number 33 [ 398.316908][ T6032] hub 13-1:0.0: bad descriptor, ignoring hub [ 398.319094][ T6032] hub 13-1:0.0: probe with driver hub failed with error -5 [ 398.327849][ T6032] usb 13-1: selecting invalid altsetting 0 [ 398.422112][T19684] bond3: (slave bridge2): making interface the new active one [ 398.425184][T19684] bridge2: entered promiscuous mode [ 398.427688][T19684] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 398.824810][T18883] Bluetooth: hci5: command 0x0c1a tx timeout [ 398.892949][ T40] audit: type=1800 audit(2000524378.209:24248): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3862" name="file0" dev="tmpfs" ino=657 res=0 errno=0 [ 398.902238][ T40] audit: type=1804 audit(2000524378.229:24249): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.3862" name="/newroot/120/file0" dev="tmpfs" ino=657 res=1 errno=0 [ 398.913590][T19688] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 398.916336][T19688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.924522][T19688] vhci_hcd vhci_hcd.0: Device attached [ 398.926900][T19690] vhci_hcd: unknown pdu 2 [ 398.930207][ T66] vhci_hcd vhci_hcd.4: stop threads [ 398.933418][ T66] vhci_hcd vhci_hcd.4: release socket [ 398.937088][ T66] vhci_hcd vhci_hcd.4: disconnect device [ 399.291749][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3871'. [ 399.624338][T18883] Bluetooth: hci0: command 0x0c1a tx timeout [ 399.625756][T18883] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 399.694612][ T6020] usb 13-1: USB disconnect, device number 6 [ 399.732683][ T40] audit: type=1400 audit(2000524379.049:24250): avc: denied { getopt } for pid=19751 comm="syz.2.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.748515][T19753] : entered promiscuous mode [ 399.796993][T19759] lo speed is unknown, defaulting to 1000 [ 399.799652][T19759] lo speed is unknown, defaulting to 1000 [ 399.841567][ T40] audit: type=1400 audit(2000524379.159:24251): avc: denied { getopt } for pid=19757 comm="syz.2.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 399.945951][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.022684][ T40] audit: type=1400 audit(2000524379.339:24252): avc: denied { write } for pid=19765 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 400.103433][T19784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.155645][T19787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.175020][ T40] audit: type=1400 audit(2000524379.499:24253): avc: denied { mounton } for pid=19786 comm="syz.4.3890" path="/212/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 400.274267][ T10] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 400.283424][T19799] No source specified [ 400.313496][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 400.368202][ T40] audit: type=1400 audit(2000524379.690:24254): avc: denied { map } for pid=19810 comm="syz.4.3897" path="/proc/737/task" dev="proc" ino=101884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 400.426914][ T10] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 400.430627][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.434706][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.438161][ T10] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 400.444986][ T10] usb 13-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 400.445681][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 400.448959][ T10] usb 13-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 400.448980][ T10] usb 13-1: Manufacturer: syz [ 400.453785][ T10] usb 13-1: config 0 descriptor?? [ 400.458406][T19820] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.466760][ T40] audit: type=1400 audit(2000524379.790:24255): avc: denied { remount } for pid=19819 comm="syz.4.3900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 400.571762][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 400.620952][T19830] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3903'. [ 400.696564][ T10] usbhid 13-1:0.0: can't add hid device: -71 [ 400.704355][ T10] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 400.711522][ T10] usb 13-1: USB disconnect, device number 7 [ 400.720155][T19830] lo speed is unknown, defaulting to 1000 [ 400.722788][T19830] lo speed is unknown, defaulting to 1000 [ 401.049242][T19845] netlink: 'syz.4.3907': attribute type 1 has an invalid length. [ 401.052047][T19845] netlink: 'syz.4.3907': attribute type 3 has an invalid length. [ 401.055293][T19845] netlink: 'syz.4.3907': attribute type 3 has an invalid length. [ 401.152021][T19847] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 401.155244][T19847] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 401.311731][T19847] syz.4.3908 (19847): drop_caches: 2 [ 401.395031][T19823] 9pnet_fd: p9_fd_create_tcp (19823): problem connecting socket to 127.0.0.1 [ 401.502631][T19855] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 401.508856][T19855] macsec1: entered promiscuous mode [ 401.510853][T19855] macsec1: entered allmulticast mode [ 401.512738][T19855] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 401.713983][T18883] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.800325][T19861] gfs2: error -5 reading superblock [ 401.857103][T19877] xt_cgroup: path and classid specified [ 401.901777][T19882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.921075][ T40] audit: type=1400 audit(2000524381.240:24256): avc: denied { execute_no_trans } for pid=19883 comm="syz.4.3920" path="/228/file0" dev="tmpfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.971364][T19891] program syz.8.3922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.057425][T19902] __nla_validate_parse: 3 callbacks suppressed [ 402.057443][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3925'. [ 402.167141][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3926'. [ 402.365895][T19921] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3930'. [ 402.369701][T19922] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3930'. [ 402.467960][T19928] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3932'. [ 402.472395][T19928] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3932'. [ 402.512422][T19928] binder: 19927:19928 ioctl c0046209 0 returned -22 [ 402.515844][ T40] audit: type=1326 audit(2000524381.840:24257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19927 comm="syz.7.3932" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082118f7c9 code=0x0 [ 402.777361][T19935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3934'. [ 402.797873][T19889] 9pnet_fd: p9_fd_create_tcp (19889): problem connecting socket to 127.0.0.1 [ 403.071494][T19949] binder: 19948:19949 ioctl c0306201 2000000003c0 returned -14 [ 403.227198][T19955] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 403.236801][T19955] netlink: 'syz.4.3941': attribute type 3 has an invalid length. [ 403.240469][T19955] netlink: 'syz.4.3941': attribute type 3 has an invalid length. [ 403.262953][T19959] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.393285][ T24] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 403.531729][T19980] netlink: 'syz.4.3951': attribute type 1 has an invalid length. [ 403.549615][T19980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.565260][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 403.568654][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.575172][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.580699][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.584824][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.589435][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 403.592637][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.596451][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.600311][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.604936][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.610042][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 403.612623][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.616381][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.620504][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.624864][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.631638][ T40] audit: type=1400 audit(2000524382.950:24258): avc: denied { create } for pid=19988 comm="syz.4.3953" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 403.658722][ T24] usb 7-1: string descriptor 0 read error: -22 [ 403.660900][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 403.662698][T19991] 9pnet_virtio: no channels available for device syz [ 403.665657][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.681690][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.703744][T19993] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3956'. [ 403.797054][T20001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 403.932795][T20004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.937844][T20004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.954203][ T6032] usb 7-1: USB disconnect, device number 32 [ 404.025567][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'. [ 404.033346][ T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 404.069126][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 404.183464][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 404.188735][ T24] usb 9-1: config 0 has no interfaces? [ 404.191529][ T24] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 404.196092][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.206854][ T24] usb 9-1: config 0 descriptor?? [ 404.398422][T20030] KVM: debugfs: duplicate directory 20030-78 [ 404.404084][T20030] KVM: debugfs: duplicate directory 20030-79 [ 404.409026][T20030] KVM: debugfs: duplicate directory 20030-80 [ 404.416038][ T24] usb 9-1: USB disconnect, device number 34 [ 404.435551][ T6020] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 404.593805][ T6020] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 404.597610][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.600692][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.604423][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.607444][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.611828][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.615818][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.618865][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.621984][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.626008][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.633159][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.637027][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.641039][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.644553][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.647865][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.651931][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.655659][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.659189][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.663101][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.665926][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.668954][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.674431][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.677456][ T6020] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.680911][ T6020] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 404.686291][ T6020] usb 13-1: config 0 interface 0 has no altsetting 0 [ 404.690759][ T6020] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 404.694820][ T6020] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 404.697798][ T6020] usb 13-1: Product: syz [ 404.699458][ T6020] usb 13-1: Manufacturer: syz [ 404.701672][ T6020] usb 13-1: SerialNumber: syz [ 404.705269][ T6020] usb 13-1: config 0 descriptor?? [ 404.713547][ T6020] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 404.967706][T20034] gfs2: error -5 reading superblock [ 404.976437][ T6022] usb 13-1: USB disconnect, device number 8 [ 404.980576][ T6022] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 405.082790][T20040] input: syz1 as /devices/virtual/input/input49 [ 405.436652][T20050] x_tables: duplicate underflow at hook 1 [ 405.703103][ T7915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.001212][T20077] netlink: zone id is out of range [ 406.018729][T20077] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 406.032914][T20077] bond4: entered promiscuous mode [ 406.035004][T20077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.059089][T20077] bond4: (slave bridge5): making interface the new active one [ 406.062344][T20077] bridge5: entered promiscuous mode [ 406.067093][T20077] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 406.180993][T20088] IPVS: Scheduler module ip_vs_sip not found [ 406.314998][T20103] mmap: syz.4.3988 (20103): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 406.406156][ T40] audit: type=1400 audit(2000524385.731:24259): avc: denied { mounton } for pid=20107 comm="syz.4.3990" path="/file0" dev="ramfs" ino=103706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 406.407288][T20108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 406.417885][T20108] overlayfs: failed to set xattr on upper [ 406.420566][T20108] overlayfs: ...falling back to redirect_dir=nofollow. [ 406.423857][T20108] overlayfs: ...falling back to index=off. [ 406.426253][T20108] overlayfs: ...falling back to uuid=null. [ 406.432192][ T60] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 406.444056][T20108] program syz.4.3990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.449422][T20108] overlay: Unknown parameter 'uid<00000000000000000000' [ 406.551796][T20110] /dev/nullb0: Can't open blockdev [ 406.574682][T20056] 9pnet_fd: p9_fd_create_tcp (20056): problem connecting socket to 127.0.0.1 [ 406.592462][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 406.595908][ T60] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 406.598711][ T60] usb 7-1: config 179 has no interface number 0 [ 406.600976][ T60] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 406.605111][ T60] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 406.608751][ T60] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.612776][ T60] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.616008][ T60] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 406.620410][ T60] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.626988][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.631792][T20094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 406.635972][ T60] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 406.991649][T20138] macsec1: entered promiscuous mode [ 406.994666][T20138] macsec1: entered allmulticast mode [ 407.187856][ T24] usb 7-1: USB disconnect, device number 33 [ 407.209256][T20149] __nla_validate_parse: 6 callbacks suppressed [ 407.209280][T20149] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4003'. [ 407.328002][ T40] audit: type=1400 audit(2000524386.652:24260): avc: denied { connect } for pid=20154 comm="syz.2.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.339659][T20155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4005'. [ 407.376103][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4006'. [ 407.378260][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.386731][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.390095][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.393641][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.396998][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.400135][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.404757][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 407.430101][T20168] netlink: 'syz.8.4008': attribute type 19 has an invalid length. [ 407.567284][T20175] input: syz1 as /devices/virtual/input/input50 [ 407.592642][T20179] 9pnet_virtio: no channels available for device syz [ 407.687255][T20187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20187 comm=syz.7.4015 [ 407.745751][T20194] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.748705][T20194] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.758738][T20194] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.761006][T20194] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.792710][T20182] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 407.959515][T20209] macsec2: entered promiscuous mode [ 407.961686][T20209] macsec2: entered allmulticast mode [ 408.033692][ T40] audit: type=1400 audit(2000524387.362:24261): avc: denied { ioctl } for pid=20216 comm="syz.7.4023" path="socket:[105534]" dev="sockfs" ino=105534 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 408.188342][ T40] audit: type=1400 audit(2000524387.512:24262): avc: denied { accept } for pid=20224 comm="syz.8.4025" path="/76/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 408.592566][T20246] openvswitch: netlink: IP tunnel dst address not specified [ 408.651778][T20248] vxfs: WRONG superblock magic 00000000 at 1 [ 408.654941][T20248] vxfs: WRONG superblock magic 00000000 at 8 [ 408.658429][T20248] vxfs: can't find superblock. [ 408.663246][ T40] audit: type=1400 audit(2000524387.992:24263): avc: denied { append } for pid=20247 comm="syz.2.4030" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 408.890612][T20252] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.894497][T20252] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.992936][T20252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.000866][T20252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.102808][T20252] mac80211_hwsim hwsim76 wlan0: left allmulticast mode [ 409.120168][ T7925] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.123594][ T7925] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.131543][ T7925] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.134986][ T7925] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.614055][T20282] lo speed is unknown, defaulting to 1000 [ 409.616852][T20282] lo speed is unknown, defaulting to 1000 [ 409.633571][T20283] netlink: 'syz.8.4038': attribute type 16 has an invalid length. [ 409.645118][T20283] netlink: 'syz.8.4038': attribute type 17 has an invalid length. [ 409.711282][T20283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.237456][ T40] audit: type=1400 audit(2000524389.563:24264): avc: denied { lock } for pid=20291 comm="syz.8.4041" path="socket:[103304]" dev="sockfs" ino=103304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.251723][T20292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.434640][T20301] bridge3: entered promiscuous mode [ 410.437104][T20301] bridge3: entered allmulticast mode [ 410.824031][ T7914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.911234][ T6020] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 411.090982][ T6020] usb 9-1: Using ep0 maxpacket: 8 [ 411.094082][ T6020] usb 9-1: config 0 has no interfaces? [ 411.096094][ T6020] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 411.099303][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.104974][ T6020] usb 9-1: config 0 descriptor?? [ 411.742479][ T60] usb 9-1: USB disconnect, device number 35 [ 411.791987][ C3] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 411.795468][ C3] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 411.802927][T20331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=20331 comm=syz.2.4053 [ 411.843469][T20334] afs: Unknown parameter 'dynile0' [ 411.855298][T20334] vxfs: WRONG superblock magic 00000000 at 1 [ 411.857529][T20334] vxfs: WRONG superblock magic 00000000 at 8 [ 411.859600][T20334] vxfs: can't find superblock. [ 412.002902][T18883] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 412.038807][ T40] audit: type=1400 audit(2000524391.363:24265): avc: denied { getopt } for pid=20340 comm="syz.8.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.113373][T20350] lo speed is unknown, defaulting to 1000 [ 412.117088][T20351] lo speed is unknown, defaulting to 1000 [ 412.117173][T20350] lo speed is unknown, defaulting to 1000 [ 412.230865][T20351] lo speed is unknown, defaulting to 1000 [ 412.305143][T20358] erofs (device nbd2): cannot find valid erofs superblock [ 412.546709][T20362] __nla_validate_parse: 8 callbacks suppressed [ 412.546727][T20362] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.4062'. [ 412.570493][T20362] openvswitch: netlink: Message has 6 unknown bytes. [ 412.638118][T20364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4063'. [ 412.830521][T20385] loop2: detected capacity change from 0 to 7 [ 412.835798][T16000] Dev loop2: unable to read RDB block 7 [ 412.837856][T16000] loop2: unable to read partition table [ 412.838161][ T40] audit: type=1400 audit(2000524392.164:24266): avc: denied { watch watch_reads } for pid=20386 comm="syz.2.4069" path="pipe:[91175]" dev="pipefs" ino=91175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 412.840175][T16000] loop2: partition table beyond EOD, truncated [ 412.856160][T20385] Dev loop2: unable to read RDB block 7 [ 412.857973][T20385] loop2: unable to read partition table [ 412.859921][T20385] loop2: partition table beyond EOD, truncated [ 412.861960][T20385] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.862942][T20389] pimreg: entered allmulticast mode [ 412.914713][T20391] netlink: 'syz.2.4071': attribute type 5 has an invalid length. [ 412.974218][T20400] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 412.976734][T20400] overlayfs: failed to set xattr on upper [ 412.978659][T20400] overlayfs: ...falling back to redirect_dir=nofollow. [ 412.986956][T20400] overlayfs: ...falling back to index=off. [ 412.989155][T20400] overlayfs: ...falling back to uuid=null. [ 412.996128][T20394] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 413.000626][T20400] overlayfs: cleanup of 'bus/work' failed (-13) [ 413.003187][T20400] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 413.006972][T20400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.013413][T20402] IPVS: dh: FWM 3 0x00000003 - no destination available [ 413.014535][T20400] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 413.106734][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.111491][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.114681][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.117706][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.124114][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.127245][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.131445][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.134586][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.137795][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.159767][ T60] hid-generic 0004:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 413.165127][ T60] hid-generic 0004:FFFFFFFF:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 413.212111][T20419] fido_id[20419]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 413.251123][T20416] SELinux: failed to load policy [ 413.269595][ T40] audit: type=1804 audit(2000524392.584:24267): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4077" name="/newroot/285/bus/bus" dev="overlay" ino=1580 res=1 errno=0 [ 413.449677][ T40] audit: type=1800 audit(2000524392.774:24268): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4079" name="/" dev="fuse" ino=1 res=0 errno=0 [ 413.462407][T20439] netlink: 'syz.4.4080': attribute type 10 has an invalid length. [ 413.540248][T20444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4081'. [ 413.590732][T20444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20444 comm=syz.2.4081 [ 413.792354][T20461] netlink: 'syz.7.4087': attribute type 21 has an invalid length. [ 413.861982][T20465] program syz.4.4088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.867425][ T40] audit: type=1400 audit(2000524393.194:24269): avc: denied { add_name } for pid=20453 comm="syz.2.4085" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 413.877737][ T40] audit: type=1400 audit(2000524393.194:24270): avc: denied { associate } for pid=20453 comm="syz.2.4085" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 413.886536][ T40] audit: type=1400 audit(2000524393.204:24271): avc: denied { mounton } for pid=20453 comm="syz.2.4085" path="/181/file0" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 414.338723][T20480] loop4: detected capacity change from 0 to 2560 [ 414.351537][T20480] buffer_io_error: 138 callbacks suppressed [ 414.351555][T20480] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 414.357869][T20480] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 414.362493][T20480] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 414.366150][T20480] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 414.370390][T20480] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 414.374137][T20480] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 414.377726][T20480] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 414.382915][T20480] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 414.386599][T20480] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 414.390601][T20480] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 414.538601][ T830] IPVS: starting estimator thread 0... [ 414.549886][ T6022] delete_channel: no stack [ 414.639206][T20485] IPVS: using max 44 ests per chain, 105600 per kthread [ 414.946837][T20503] Bluetooth: MGMT ver 1.23 [ 415.067070][T20510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=20510 comm=syz.4.4096 [ 415.122313][T20512] program syz.7.4100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.281148][T20516] syzkaller0: entered promiscuous mode [ 415.283322][T20516] syzkaller0: entered allmulticast mode [ 415.306581][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4105'. [ 415.463356][T20534] netlink: 'syz.8.4108': attribute type 39 has an invalid length. [ 415.666420][T20550] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4113'. [ 415.667227][ T40] audit: type=1107 audit(2000524394.995:24272): pid=20542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 415.671641][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.805484][T20556] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.808804][T20556] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 415.812482][T20556] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.819855][T20556] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 415.892606][T20558] binder: 20557:20558 ioctl c0306201 2000000003c0 returned -14 [ 415.939288][ T7925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.034384][ T40] audit: type=1400 audit(2000524395.365:24273): avc: denied { map } for pid=20563 comm="syz.7.4117" path="/160/file0/pids.events" dev="9p" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 416.039909][T20564] netfs: Couldn't get user pages (rc=-14) [ 416.044879][ T40] audit: type=1400 audit(2000524395.375:24274): avc: denied { execute } for pid=20563 comm="syz.7.4117" path="/160/file0/pids.events" dev="9p" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 416.047043][T20564] netfs: Zero-sized read [R=e] [ 416.335164][T20587] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 416.533756][ T40] audit: type=1400 audit(2000524395.865:24275): avc: denied { map_create } for pid=20606 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.540429][T20607] overlay: ./file0 is not a directory [ 416.557277][ T40] audit: type=1400 audit(2000524395.865:24276): avc: denied { perfmon } for pid=20606 comm="syz.7.4128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.608281][T20608] sg_write: data in/out 1718566228/114 bytes for SCSI command 0x6f-- guessing data in; [ 416.608281][T20608] program syz.7.4128 not setting count and/or reply_len properly [ 416.619037][T20608] CIFS mount error: No usable UNC path provided in device string! [ 416.619037][T20608] [ 416.622566][T20608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 416.646662][T20462] 9pnet_fd: p9_fd_create_tcp (20462): problem connecting socket to 127.0.0.1 [ 416.820632][T20610] netlink: 'syz.8.4129': attribute type 32 has an invalid length. [ 416.824093][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4129'. [ 416.843642][T20610] bond1: Setting coupled_control to off (0) [ 417.140935][T20646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4139'. [ 417.141329][T20647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20647 comm=syz.2.4141 [ 417.207312][T20653] netlink: 'syz.4.4142': attribute type 8 has an invalid length. [ 417.212022][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 417.280322][T20655] hsr_slave_1 (unregistering): left promiscuous mode [ 417.371654][T20657] Mount JFS Failure: -22 [ 417.391260][T20663] x_tables: duplicate underflow at hook 1 [ 417.422231][T20666] netlink: 'syz.7.4147': attribute type 23 has an invalid length. [ 417.547398][T20672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20672 comm=syz.7.4148 [ 417.617470][T20678] fuse: Unknown parameter '¹fd' [ 417.666642][T20682] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4153'. [ 417.672545][T20682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=20682 comm=syz.8.4153 [ 417.757768][ T60] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 417.917750][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 417.920825][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 417.924791][ T60] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 417.928367][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.930126][ T6022] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 417.933590][ T60] usb 9-1: config 0 descriptor?? [ 418.090052][ T6022] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.095805][ T6022] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.100304][ T6022] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 418.103293][ T6022] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.112200][ T6022] usb 12-1: config 0 descriptor?? [ 418.349053][ T60] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 418.420466][T20700] NILFS (nbd2): device size too small [ 418.464801][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 418.464818][ T40] audit: type=1400 audit(2000524397.786:24376): avc: denied { kexec_image_load } for pid=20703 comm="syz.8.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 418.484566][ T40] audit: type=1400 audit(2000524397.806:24377): avc: denied { ioctl } for pid=20705 comm="syz.2.4161" path="socket:[107384]" dev="sockfs" ino=107384 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.494888][ T40] audit: type=1400 audit(2000524397.816:24378): avc: denied { create } for pid=20705 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 418.524771][ T6022] hid_parser_main: 22 callbacks suppressed [ 418.524793][ T6022] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 418.537738][ T40] audit: type=1400 audit(2000524397.856:24379): avc: denied { ioctl } for pid=20709 comm="syz.8.4162" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.538093][ T6022] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 418.548038][ T40] audit: type=1400 audit(2000524397.866:24380): avc: denied { mount } for pid=20709 comm="syz.8.4162" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 418.556981][ T10] usb 9-1: USB disconnect, device number 36 [ 418.560119][ T40] audit: type=1400 audit(2000524397.876:24381): avc: denied { name_bind } for pid=20673 comm="syz.4.4149" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 418.571553][ T6022] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0D8C:0022.001A/input/input51 [ 418.572184][ T40] audit: type=1400 audit(2000524397.896:24382): avc: denied { create } for pid=20705 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 418.586506][ T40] audit: type=1400 audit(2000524397.896:24383): avc: denied { write } for pid=20705 comm="syz.2.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 418.594293][ T40] audit: type=1400 audit(2000524397.896:24384): avc: denied { write } for pid=20705 comm="syz.2.4161" name="unix" dev="proc" ino=4026534965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 418.599098][ T6022] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 418.603865][ T40] audit: type=1400 audit(2000524397.916:24385): avc: denied { read } for pid=5325 comm="acpid" name="event3" dev="devtmpfs" ino=3872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.713082][T20718] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 418.758803][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4165'. [ 418.853584][T20724]  [ 418.904455][T20732]  [ 418.998250][T20738] netlink: 'syz.2.4170': attribute type 11 has an invalid length. [ 419.114639][T20740] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 419.127632][ T24] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 419.139862][T20740] lo speed is unknown, defaulting to 1000 [ 419.143975][T20740] lo speed is unknown, defaulting to 1000 [ 419.289227][ T24] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 419.297142][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.302732][ T24] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 419.306723][ T24] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 419.311300][ T24] usb 13-1: Manufacturer: syz [ 419.315975][ T24] usb 13-1: config 0 descriptor?? [ 419.377245][ T24] rc_core: IR keymap rc-hauppauge not found [ 419.379902][ T24] Registered IR keymap rc-empty [ 419.383994][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 419.392861][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input52 [ 419.472374][T20748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.525636][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.532002][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.561106][T20735] syzkaller0: entered promiscuous mode [ 419.563562][T20735] syzkaller0: entered allmulticast mode [ 419.572070][T20735] tipc: Started in network mode [ 419.574729][T20735] tipc: Node identity 62e6ee87c7a2, cluster identity 4711 [ 419.580810][T20735] tipc: Enabled bearer , priority 0 [ 419.595654][T20734] tipc: Resetting bearer [ 419.616727][T20734] tipc: Disabling bearer [ 419.674777][ T24] usb 13-1: USB disconnect, device number 9 [ 419.847132][ T6003] usb 12-1: reset high-speed USB device number 8 using dummy_hcd [ 420.030146][T20760] xt_connbytes: Forcing CT accounting to be enabled [ 420.032453][T20760] set match dimension is over the limit! [ 420.096192][T20763] program syz.4.4178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.187222][T20768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=20768 comm=syz.4.4179 [ 420.286120][T20773] binder: BINDER_SET_CONTEXT_MGR already set [ 420.288979][T20773] binder: 20772:20773 ioctl 4018620d 2000000002c0 returned -16 [ 420.301796][T20779] input: syz0 as /devices/virtual/input/input53 [ 420.408934][T20781] syzkaller0: entered promiscuous mode [ 420.413031][T20781] syzkaller0: entered allmulticast mode [ 420.490370][T20784] netlink: 'syz.4.4184': attribute type 15 has an invalid length. [ 420.496072][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 420.501684][T20784] netlink: 'syz.4.4184': attribute type 15 has an invalid length. [ 420.505212][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 420.666619][T18883] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.696893][T20789] netlink: 'syz.7.4186': attribute type 11 has an invalid length. [ 420.730977][T20792] overlayfs: conflicting options: nfs_export=on,index=off [ 420.767307][T20794] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 420.796463][ T6020] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 420.946533][ T6020] usb 9-1: Using ep0 maxpacket: 8 [ 420.950406][ T6020] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 420.954369][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.962884][ T6020] pvrusb2: Hardware description: Terratec Grabster AV400 [ 420.965457][ T6020] pvrusb2: ********** [ 420.967290][ T6020] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 420.970750][ T6020] pvrusb2: Important functionality might not be entirely working. [ 420.973600][ T6020] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 420.979215][ T6020] pvrusb2: ********** [ 421.060089][ T7925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.168146][ T2489] pvrusb2: Invalid write control endpoint [ 421.196614][ T2489] pvrusb2: Invalid write control endpoint [ 421.200056][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 421.204219][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 421.208723][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 421.213023][ T2489] pvrusb2: Device being rendered inoperable [ 421.215535][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 421.220035][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 421.223639][ T2489] pvrusb2: Attached sub-driver cx25840 [ 421.225922][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 421.229717][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 421.449502][ T6023] usb 12-1: USB disconnect, device number 8 [ 421.486615][ T60] usb 9-1: USB disconnect, device number 37 [ 422.426164][T18883] Bluetooth: hci2: command 0x0405 tx timeout [ 422.431919][ T6022] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 422.434677][ T6022] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 422.442910][T20835] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 422.492649][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 422.492779][T20835] bond3: entered promiscuous mode [ 422.496574][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4200'. [ 422.500462][T20835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.501786][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4200'. [ 422.562410][T20835] bond3: (slave bridge5): making interface the new active one [ 422.565445][T20835] bridge5: entered promiscuous mode [ 422.570799][T20835] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 422.783257][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 422.925622][ T6032] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 423.087750][ T6032] usb 13-1: config 0 has no interfaces? [ 423.090086][ T6032] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 423.093480][ T6032] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.097995][ T6032] usb 13-1: config 0 descriptor?? [ 423.340157][ T6003] usb 13-1: USB disconnect, device number 10 [ 423.625694][ T69] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 180 seconds [ 423.630061][ T69] block nbd1: Possible stuck request ffff888028360200: control (read@1024,1024B). Runtime 180 seconds [ 423.634384][ T69] block nbd1: Possible stuck request ffff888028360400: control (read@2048,1024B). Runtime 180 seconds [ 423.639250][ T69] block nbd1: Possible stuck request ffff888028360600: control (read@3072,1024B). Runtime 180 seconds [ 423.911488][ T40] kauditd_printk_skb: 590 callbacks suppressed [ 423.911505][ T40] audit: type=1400 audit(2000524403.239:24976): avc: denied { mount } for pid=20863 comm="syz.8.4210" name="/" dev="pstore" ino=7226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 423.947737][ T40] audit: type=1400 audit(2000524403.279:24977): avc: denied { unmount } for pid=18957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 423.991604][T20867] mkiss: ax0: crc mode is auto. [ 423.996800][ T40] audit: type=1400 audit(2000524403.329:24978): avc: denied { getopt } for pid=20866 comm="syz.8.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 424.127305][T20869] can0: slcan on ttyS3. [ 424.185402][T20869] can0 (unregistered): slcan off ttyS3. [ 424.654821][T18883] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.656990][ T6022] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 424.660552][ T6022] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 424.660704][T20858] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 424.718769][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.723110][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.728798][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.738232][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.743399][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.787907][T18883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.791750][T18883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.795858][T18883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.801128][T18883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.805571][T18883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.812890][ T40] audit: type=1400 audit(2000524404.139:24979): avc: denied { mounton } for pid=20785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 424.819932][T20883] loop2: detected capacity change from 0 to 7 [ 424.854890][T20785] lo speed is unknown, defaulting to 1000 [ 424.885438][T20785] lo speed is unknown, defaulting to 1000 [ 425.152754][ T40] audit: type=1400 audit(2000524404.479:24980): avc: denied { mounton } for pid=20890 comm="syz.8.4219" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 425.164108][T20891] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 425.175853][T20891] cramfs: wrong magic [ 425.205685][T20785] chnl_net:caif_netlink_parms(): no params data found [ 425.230911][ T40] audit: type=1400 audit(2000524404.559:24981): avc: denied { create } for pid=20890 comm="syz.8.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 425.240598][ T40] audit: type=1400 audit(2000524404.559:24982): avc: denied { write } for pid=20890 comm="syz.8.4219" path="socket:[109939]" dev="sockfs" ino=109939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 425.318438][T20785] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.321640][T20785] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.325073][T20785] bridge_slave_0: entered allmulticast mode [ 425.329120][T20785] bridge_slave_0: entered promiscuous mode [ 425.334233][T20785] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.337833][T20785] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.341402][T20785] bridge_slave_1: entered allmulticast mode [ 425.345900][T20785] bridge_slave_1: entered promiscuous mode [ 425.377282][T20785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.382955][T20785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.399349][T20785] team0: Port device team_slave_0 added [ 425.402771][T20785] team0: Port device team_slave_1 added [ 425.417150][T20785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.419448][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.428306][T20785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.432899][T20785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.435492][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.444481][T20785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.459509][ T40] audit: type=1400 audit(2000524404.789:24983): avc: denied { connect } for pid=20910 comm="syz.8.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.471578][T20785] hsr_slave_0: entered promiscuous mode [ 425.475196][T20785] hsr_slave_1: entered promiscuous mode [ 425.478247][T20785] debugfs: 'hsr0' already exists in 'hsr' [ 425.480487][T20785] Cannot create hsr debugfs directory [ 425.668191][T20913] mkiss: ax0: crc mode is auto. [ 425.677121][ T6022] hid-generic 0005:16C0:0002.001B: item fetching failed at offset 0/1 [ 425.677816][ T40] audit: type=1400 audit(2000524405.009:24984): avc: denied { read append } for pid=20910 comm="syz.8.4220" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 425.682360][ T6022] hid-generic 0005:16C0:0002.001B: probe with driver hid-generic failed with error -22 [ 425.693777][ T40] audit: type=1400 audit(2000524405.009:24985): avc: denied { open } for pid=20910 comm="syz.8.4220" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 425.927628][T20785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.935903][T20785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.942461][T20785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.949906][T20785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.022460][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.039605][T20785] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.050561][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.053149][T14409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.062918][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.066231][ T7901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.214793][T20785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.250811][T20785] veth0_vlan: entered promiscuous mode [ 426.260316][T20785] veth1_vlan: entered promiscuous mode [ 426.286603][T20785] veth0_macvtap: entered promiscuous mode [ 426.292717][T20785] veth1_macvtap: entered promiscuous mode [ 426.304369][T20785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.312610][T20785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.321219][T14409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.326714][T14409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.333575][T14409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.338112][T14409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.396364][T14409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.399891][T14409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.419885][T14409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.423379][T14409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.525564][T20941] SELinux: Context Ü is not valid (left unmapped). [ 426.563600][T20941] team0 (unregistering): Port device team_slave_0 removed [ 426.569943][T20941] team0 (unregistering): Port device team_slave_1 removed [ 426.574211][ T24] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 426.723946][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 426.727947][ T24] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 426.731901][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.737427][ T24] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.742493][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.747856][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.753134][ T24] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 426.756451][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.760591][ T24] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.765729][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.770118][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.775379][ T24] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 426.778914][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.783383][ T24] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.788698][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.793424][ T24] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.799682][ T24] usb 13-1: string descriptor 0 read error: -22 [ 426.801837][ T24] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 426.805416][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.815956][ T24] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 426.903826][T18883] Bluetooth: hci4: command tx timeout [ 428.079117][T20969] syzkaller0: entered promiscuous mode [ 428.081856][T20969] syzkaller0: entered allmulticast mode [ 428.219916][T20971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4233'. [ 428.379041][T20974] usb usb8: check_ctrlrecip: process 20974 (syz.4.4234) requesting ep 01 but needs 81 [ 428.382409][T20974] usb usb8: usbfs: process 20974 (syz.4.4234) did not claim interface 0 before use [ 428.534724][T20985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4236'. [ 428.618823][T20988] netlink: 'syz.4.4237': attribute type 15 has an invalid length. [ 428.621706][T20988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4237'. [ 428.624986][T20988] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4237'. [ 428.690814][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.710374][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.716703][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 428.972935][T18883] Bluetooth: hci4: command tx timeout [ 429.118454][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 429.118467][ T40] audit: type=1400 audit(2000524408.451:25010): avc: denied { setopt } for pid=21018 comm="syz.2.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.132425][ T40] audit: type=1400 audit(2000524408.451:25011): avc: denied { read } for pid=21018 comm="syz.2.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.144703][T21021] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 429.173929][ T40] audit: type=1804 audit(2000524408.511:25012): pid=21019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.4246" name="/newroot/7/file0" dev="tmpfs" ino=55 res=1 errno=0 [ 429.207253][T21026] jffs2: Unknown parameter '' [ 429.247443][ T40] audit: type=1400 audit(2000524408.581:25013): avc: denied { create } for pid=21027 comm="syz.2.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.256743][ T40] audit: type=1400 audit(2000524408.591:25014): avc: denied { write } for pid=21027 comm="syz.2.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.269251][ T40] audit: type=1400 audit(2000524408.601:25015): avc: denied { setopt } for pid=21028 comm="syz.4.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.278133][ T40] audit: type=1400 audit(2000524408.601:25016): avc: denied { ioctl } for pid=21028 comm="syz.4.4249" path="socket:[112068]" dev="sockfs" ino=112068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.301722][ T40] audit: type=1400 audit(2000524408.601:25017): avc: denied { bind } for pid=21028 comm="syz.4.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.312506][ T40] audit: type=1400 audit(2000524408.601:25018): avc: denied { read } for pid=21027 comm="syz.2.4248" path="socket:[110034]" dev="sockfs" ino=110034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.366366][T21043] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 429.453949][ T10] usb 13-1: USB disconnect, device number 11 [ 429.506442][ T40] audit: type=1400 audit(2000524408.841:25019): avc: denied { bind } for pid=21047 comm="syz.8.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.526648][T21048] Invalid ELF header magic: != ELF [ 429.613474][ T6020] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 429.645664][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'. [ 429.650253][T21061] nfs4: Bad value for 'source' [ 429.658055][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4258'. [ 429.738558][T21074] netlink: 'syz.8.4260': attribute type 2 has an invalid length. [ 429.741940][T21074] netlink: 46 bytes leftover after parsing attributes in process `syz.8.4260'. [ 429.779728][ T6020] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 429.783434][ T6020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.786835][ T6020] usb 9-1: Product: syz [ 429.788790][ T6020] usb 9-1: Manufacturer: syz [ 429.790905][ T6020] usb 9-1: SerialNumber: syz [ 429.801163][ T6020] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 429.830271][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 429.840682][T21081] lo speed is unknown, defaulting to 1000 [ 429.844891][T21081] lo speed is unknown, defaulting to 1000 [ 430.024390][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4263'. [ 430.024665][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4263'. [ 430.031983][T21085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=498 sclass=netlink_route_socket pid=21085 comm=syz.8.4263 [ 430.170838][ T6020] usb 9-1: USB disconnect, device number 38 [ 430.515705][ T7915] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.525820][ T7915] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.530006][ T7915] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.550409][ T7915] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.574396][T21120] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 430.577238][T21120] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 430.616727][T21125] 9pnet_fd: Insufficient options for proto=fd [ 430.685228][T21131] xt_hashlimit: size too large, truncated to 1048576 [ 430.717659][T21133] : entered promiscuous mode [ 430.748541][T21136] syz_tun: refused to change device tx_queue_len [ 430.859190][ T1026] hid-generic FFFE:7000005:0009.001C: reserved main item tag 0xe [ 430.865181][ T1026] hid-generic FFFE:7000005:0009.001C: item fetching failed at offset 16/50 [ 430.868333][ T1026] hid-generic FFFE:7000005:0009.001C: probe with driver hid-generic failed with error -22 [ 430.892462][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 430.894823][ T10] ath9k_htc: Failed to initialize the device [ 430.897164][ T6020] usb 9-1: ath9k_htc: USB layer deinitialized [ 431.051873][T18883] Bluetooth: hci4: command tx timeout [ 431.462969][T21154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.519165][T21156] SELinux: security_context_str_to_sid (sysádm_u) failed with errno=-22 [ 432.450502][T21179] Bluetooth: MGMT ver 1.23 [ 432.780404][T21188] comedi comedi0: Cannot bond this driver to itself! [ 432.894904][T21191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.130910][ T5942] Bluetooth: hci4: command tx timeout [ 433.132987][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 433.138946][T18883] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 433.382176][T21213] __nla_validate_parse: 8 callbacks suppressed [ 433.382187][T21213] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4298'. [ 433.392513][T21215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.396485][T21215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.414281][T21215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.423707][T21215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.482711][T21221] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.536541][T21225] lo speed is unknown, defaulting to 1000 [ 433.540259][T21225] lo speed is unknown, defaulting to 1000 [ 433.674234][T21234] tipc: Started in network mode [ 433.676213][T21234] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 433.679243][T21234] tipc: Enabled bearer , priority 0 [ 433.744131][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 433.999203][T21256] input: syz1 as /devices/virtual/input/input55 [ 434.002581][T21256] input: failed to attach handler leds to device input55, error: -6 [ 434.194608][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 434.194625][ T40] audit: type=1400 audit(2000524413.533:25055): avc: denied { unmount } for pid=16851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 434.201015][T21268] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4315'. [ 434.201034][T21270] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4315'. [ 434.221951][ T40] audit: type=1400 audit(2000524413.563:25056): avc: denied { getopt } for pid=21267 comm="syz.2.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 434.311820][T21272] netlink: 'syz.4.4317': attribute type 6 has an invalid length. [ 434.328518][T21274] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 434.338307][T21274] input: syz1 as /devices/virtual/input/input56 [ 434.350862][T21272] program syz.4.4317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.705701][T21294] tmpfs: Unknown parameter 'usrquota@' [ 434.794185][ T6003] tipc: Node number set to 9611946 [ 434.801719][ T40] audit: type=1400 audit(2000524414.144:25057): avc: denied { append } for pid=21304 comm="syz.2.4329" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 434.812462][T21305] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 434.847313][ T40] audit: type=1400 audit(2000524414.184:25058): avc: denied { create } for pid=21307 comm="syz.2.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 434.862123][ T40] audit: type=1400 audit(2000524414.184:25059): avc: denied { connect } for pid=21307 comm="syz.2.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 435.014354][ T40] audit: type=1400 audit(2000524414.354:25060): avc: denied { getopt } for pid=21321 comm="syz.2.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.150739][ T40] audit: type=1400 audit(2000524414.494:25061): avc: denied { ioctl } for pid=21325 comm="syz.8.4336" path="socket:[112634]" dev="sockfs" ino=112634 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.166563][ T40] audit: type=1400 audit(2000524414.494:25062): avc: denied { bind } for pid=21325 comm="syz.8.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.216596][ T40] audit: type=1400 audit(2000524414.554:25063): avc: denied { listen } for pid=21330 comm="syz.8.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.240232][ T40] audit: type=1400 audit(2000524414.564:25064): avc: denied { create } for pid=21330 comm="syz.8.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 435.282450][T21333] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 435.321968][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4338'. [ 435.414302][T21338] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4339'. [ 435.651763][T21349] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4342'. [ 435.701715][T21351] tipc: Started in network mode [ 435.703857][T21351] tipc: Node identity 84e, cluster identity 4711 [ 435.706557][T21351] tipc: Node number set to 2126 [ 435.764281][T21354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4344'. [ 435.771243][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'. [ 435.774237][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'. [ 435.796365][T21355] netlink: 'syz.8.4342': attribute type 21 has an invalid length. [ 435.911006][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.915798][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.919570][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.923084][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.928513][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.995465][T21362] lo speed is unknown, defaulting to 1000 [ 435.998295][T21362] lo speed is unknown, defaulting to 1000 [ 436.267147][T21362] chnl_net:caif_netlink_parms(): no params data found [ 436.358343][T21400] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 436.413646][T21362] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.416015][T21362] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.418511][T21362] bridge_slave_0: entered allmulticast mode [ 436.431152][T21362] bridge_slave_0: entered promiscuous mode [ 436.440498][T21362] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.442959][T21362] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.445458][T21362] bridge_slave_1: entered allmulticast mode [ 436.448484][T21362] bridge_slave_1: entered promiscuous mode [ 436.470808][T21362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.478850][T21362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.489172][T21413] lo speed is unknown, defaulting to 1000 [ 436.494718][T21413] lo speed is unknown, defaulting to 1000 [ 436.507360][T21362] team0: Port device team_slave_0 added [ 436.518557][T21362] team0: Port device team_slave_1 added [ 436.545466][T21362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.547705][T21362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.556581][T21362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.563911][T21362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.566145][T21362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.576439][T21362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.607993][T21362] hsr_slave_0: entered promiscuous mode [ 436.610467][T21362] hsr_slave_1: entered promiscuous mode [ 436.613192][T21362] debugfs: 'hsr0' already exists in 'hsr' [ 436.615112][T21362] Cannot create hsr debugfs directory [ 436.752230][T21424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.824874][T21362] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 436.850655][T21362] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 436.863102][T21362] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 436.885336][T21362] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 437.064444][T21362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.071282][T21457] affs: No valid root block on device nullb0 [ 437.082510][T21362] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.091211][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.094428][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.106692][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.110016][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.295101][T21362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.526309][T21362] veth0_vlan: entered promiscuous mode [ 437.531721][T21362] veth1_vlan: entered promiscuous mode [ 437.548004][T21362] veth0_macvtap: entered promiscuous mode [ 437.553309][T21482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60697 sclass=netlink_route_socket pid=21482 comm=syz.4.4374 [ 437.553570][T21362] veth1_macvtap: entered promiscuous mode [ 437.567999][T21362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.577297][T21362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.592924][ T7902] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.600041][ T7902] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.602995][ T7902] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.642996][ T7902] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.651472][T21484] devpts: Unknown parameter '5æ{L' [ 437.674260][T21482] lo speed is unknown, defaulting to 1000 [ 437.691994][T21482] lo speed is unknown, defaulting to 1000 [ 437.808085][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.811399][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.878777][ T7899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.882543][ T7899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.957602][T21493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21493 comm=syz.8.4376 [ 438.018566][T18883] Bluetooth: hci5: command tx timeout [ 438.229082][T21523] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 438.477483][T21544] netlink: 'syz.8.4392': attribute type 29 has an invalid length. [ 438.504933][T21549] netlink: 'syz.8.4392': attribute type 29 has an invalid length. [ 438.515519][T21544] __nla_validate_parse: 11 callbacks suppressed [ 438.515531][T21544] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4392'. [ 438.527212][T21544] unsupported nla_type 58 [ 438.773146][T21560] autofs4:pid:21560:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 438.777512][T21560] autofs4:pid:21560:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 438.781990][T21560] : Can't lookup blockdev [ 438.813895][T21564] tmpfs: Unknown parameter 'mpolJinterleave' [ 438.888127][ T6020] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 439.003330][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4403'. [ 439.053296][ T6020] usb 13-1: config index 0 descriptor too short (expected 28277, got 36) [ 439.056016][ T6020] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.060388][ T6020] usb 13-1: config 0 has no interfaces? [ 439.062238][ T6020] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 439.069137][ T6020] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.078722][ T6020] usb 13-1: config 0 descriptor?? [ 439.108302][ T1026] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 439.239935][ T1026] usb 7-1: device descriptor read/64, error -71 [ 439.291197][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.295014][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.296935][ T24] usb 13-1: USB disconnect, device number 12 [ 439.299675][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.303876][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.306507][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.344790][T21578] lo speed is unknown, defaulting to 1000 [ 439.347458][T21578] lo speed is unknown, defaulting to 1000 [ 439.508734][ T1026] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 439.514778][T21578] chnl_net:caif_netlink_parms(): no params data found [ 439.528767][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.585161][T21578] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.587890][T21578] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.590430][T21578] bridge_slave_0: entered allmulticast mode [ 439.593312][T21578] bridge_slave_0: entered promiscuous mode [ 439.597128][T21578] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.600020][T21578] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.603017][T21578] bridge_slave_1: entered allmulticast mode [ 439.606834][T21578] bridge_slave_1: entered promiscuous mode [ 439.630294][T21578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.635362][T21578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.647875][ T1026] usb 7-1: device descriptor read/64, error -71 [ 439.654109][T21578] team0: Port device team_slave_0 added [ 439.657929][T21578] team0: Port device team_slave_1 added [ 439.673605][T21578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.676012][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.684867][T21578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.690792][T21578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.693287][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.702667][T21578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.730034][T21578] hsr_slave_0: entered promiscuous mode [ 439.732616][T21578] hsr_slave_1: entered promiscuous mode [ 439.734875][T21578] debugfs: 'hsr0' already exists in 'hsr' [ 439.736966][T21578] Cannot create hsr debugfs directory [ 439.768048][ T1026] usb usb7-port1: attempt power cycle [ 439.942568][T21589] fuse: Bad value for 'user_id' [ 439.942576][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 439.942591][ T40] audit: type=1400 audit(2000524419.276:25100): avc: denied { mounton } for pid=21588 comm="syz.8.4407" path="/193/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 439.944608][T21589] fuse: Bad value for 'user_id' [ 439.953897][T21591] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4407'. [ 440.028310][T21594] 9pnet_virtio: no channels available for device syz [ 440.087584][T18883] Bluetooth: hci5: command tx timeout [ 440.107556][ T1026] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 440.128420][ T1026] usb 7-1: device descriptor read/8, error -71 [ 440.133024][ T40] audit: type=1326 audit(2000524419.466:25101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.8.4409" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d9618f7c9 code=0x0 [ 440.249056][ T1189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.289439][T21578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.294474][T21578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.309354][T21578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.316444][T21578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.377948][ T1026] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 440.391502][T21578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.394932][T21607] bond0: entered allmulticast mode [ 440.396805][T21607] bond_slave_0: entered allmulticast mode [ 440.397728][ T1026] usb 7-1: device descriptor read/8, error -71 [ 440.399070][T21607] bond_slave_1: entered allmulticast mode [ 440.403102][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4410'. [ 440.406760][T21607] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 440.421639][T21578] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.427613][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.430051][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.436812][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.439860][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.469963][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4410'. [ 440.474336][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4410'. [ 440.518698][ T1026] usb usb7-port1: unable to enumerate USB device [ 440.583140][T21578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.609287][T21578] veth0_vlan: entered promiscuous mode [ 440.614452][T21578] veth1_vlan: entered promiscuous mode [ 440.631070][T21578] veth0_macvtap: entered promiscuous mode [ 440.635400][T21578] veth1_macvtap: entered promiscuous mode [ 440.645827][T21578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.654211][T21578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.665416][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.669351][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.673204][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.676816][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.748099][ T7901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.750841][ T7901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.779826][T18680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.782893][T18680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.832352][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 440.835544][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 441.096702][ T40] audit: type=1400 audit(2000524420.427:25102): avc: denied { accept } for pid=21633 comm="syz.9.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 441.160041][T21636] overlayfs: missing 'workdir' [ 441.247204][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 441.258095][ T40] audit: type=1400 audit(2000524420.597:25103): avc: denied { read } for pid=21640 comm="syz.9.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 441.317879][ T40] audit: type=1400 audit(2000524420.657:25104): avc: denied { setattr } for pid=21640 comm="syz.9.4418" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.367273][T18883] Bluetooth: hci3: command tx timeout [ 441.409947][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 441.413304][ T9] usb 6-1: can't read configurations, error -61 [ 441.446563][ T40] audit: type=1400 audit(2000524420.777:25105): avc: denied { setopt } for pid=21649 comm="syz.8.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 441.547577][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 441.616148][T21658] netlink: 'syz.8.4423': attribute type 4 has an invalid length. [ 441.619582][T21657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21657 comm=syz.8.4423 [ 441.625121][T21657] netlink: 'syz.8.4423': attribute type 4 has an invalid length. [ 441.683248][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4424'. [ 441.712892][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 441.715479][ T9] usb 6-1: can't read configurations, error -61 [ 441.718311][ T9] usb usb6-port1: attempt power cycle [ 442.087691][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 442.110022][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 442.113457][ T9] usb 6-1: can't read configurations, error -61 [ 442.156457][ T6032] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 442.168143][T18883] Bluetooth: hci5: command tx timeout [ 442.247360][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 442.269271][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 442.271674][ T9] usb 6-1: can't read configurations, error -61 [ 442.273847][ T9] usb usb6-port1: unable to enumerate USB device [ 442.316564][ T6032] usb 13-1: Using ep0 maxpacket: 8 [ 442.324550][ T6032] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 442.329266][ T6032] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.335860][ T6032] pvrusb2: Hardware description: Terratec Grabster AV400 [ 442.338579][ T6032] pvrusb2: ********** [ 442.340063][ T6032] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 442.343644][ T6032] pvrusb2: Important functionality might not be entirely working. [ 442.346177][ T6032] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 442.350085][ T6032] pvrusb2: ********** [ 442.403638][T21673] x_tables: duplicate underflow at hook 1 [ 442.406636][T21672] x_tables: duplicate underflow at hook 1 [ 442.412623][T21673] sg_write: data in/out 1381408438/121 bytes for SCSI command 0xa0-- guessing data in; [ 442.412623][T21673] program syz.2.4428 not setting count and/or reply_len properly [ 442.546248][ T2489] pvrusb2: Invalid write control endpoint [ 442.579501][ T2489] pvrusb2: Invalid write control endpoint [ 442.582089][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 442.591675][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 442.594232][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 442.598500][ T2489] pvrusb2: Device being rendered inoperable [ 442.600917][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 442.603265][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 442.609769][ T2489] pvrusb2: Attached sub-driver cx25840 [ 442.611675][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 442.615001][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 442.740336][T21666] pvrusb2: Attempted to execute control transfer when device not ok [ 442.746810][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4426'. [ 442.768414][ T10] usb 13-1: USB disconnect, device number 13 [ 443.013785][T21652] Set syz1 is full, maxelem 65536 reached [ 443.061189][ T40] audit: type=1400 audit(2000524422.398:25106): avc: denied { create } for pid=21680 comm="syz.9.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 443.446210][T18883] Bluetooth: hci3: command tx timeout [ 443.634819][T21705] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 443.639686][T21705] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 443.643595][T21705] CPU: 2 UID: 0 PID: 21705 Comm: syz.8.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.647961][T21705] Tainted: [L]=SOFTLOCKUP [ 443.649890][T21705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 443.654165][T21705] RIP: 0010:h5_recv+0x104/0x950 [ 443.656129][T21705] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 8c 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 443.663855][T21705] RSP: 0018:ffffc9000401fbf0 EFLAGS: 00010293 [ 443.666227][T21705] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885359da [ 443.669558][T21705] RDX: ffff888025ac8000 RSI: ffffffff88535a1f RDI: 0000000000000005 [ 443.672927][T21705] RBP: ffffc9000401fd78 R08: 0000000000000005 R09: 0000000000000000 [ 443.676043][T21705] R10: 0000000000000001 R11: ffff888025ac8b30 R12: 0000000000000001 [ 443.679428][T21705] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947ac0 [ 443.682408][T21705] FS: 00007f2d96ff56c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 443.685202][T21705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.687064][T21705] CR2: 00007f2d96ff4f98 CR3: 00000000560c7000 CR4: 0000000000352ef0 [ 443.689527][T21705] Call Trace: [ 443.690551][T21705] [ 443.691492][T21705] ? __pfx_h5_recv+0x10/0x10 [ 443.693160][T21705] hci_uart_tty_receive+0x254/0x7e0 [ 443.694933][T21705] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 443.697068][T21705] tty_ioctl+0x583/0x1650 [ 443.698788][T21705] ? __pfx_tty_ioctl+0x10/0x10 [ 443.700279][T21705] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 443.702592][T21705] ? hook_file_ioctl_common+0x144/0x410 [ 443.704301][T21705] ? selinux_file_ioctl+0x180/0x270 [ 443.705833][T21705] ? selinux_file_ioctl+0xb4/0x270 [ 443.707596][T21705] ? __pfx_tty_ioctl+0x10/0x10 [ 443.709310][T21705] __x64_sys_ioctl+0x18e/0x210 [ 443.710891][T21705] do_syscall_64+0xcd/0xf80 [ 443.712570][T21705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.714917][T21705] RIP: 0033:0x7f2d9618f7c9 [ 443.716708][T21705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.723439][T21705] RSP: 002b:00007f2d96ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.726033][T21705] RAX: ffffffffffffffda RBX: 00007f2d963e6090 RCX: 00007f2d9618f7c9 [ 443.729005][T21705] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 443.731993][T21705] RBP: 00007f2d96213f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.734361][T21705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.736793][T21705] R13: 00007f2d963e6128 R14: 00007f2d963e6090 R15: 00007ffe1b17ebf8 [ 443.739194][T21705] [ 443.740143][T21705] Modules linked in: [ 443.742200][T21705] ---[ end trace 0000000000000000 ]--- [ 443.744809][ T40] audit: type=1400 audit(2000524423.088:25107): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 443.746399][T21705] RIP: 0010:h5_recv+0x104/0x950 [ 443.756233][T21705] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 8c 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 SYZFAIL: failed to recv rpc [ 443.757786][ T40] audit: type=1400 audit(2000524423.088:25108): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 443.762206][T21705] RSP: 0018:ffffc9000401fbf0 EFLAGS: 00010293 [ 443.772390][ T40] audit: type=1400 audit(2000524423.088:25109): avc: denied { append } for pid=5322 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 443.783634][T21705] [ 443.784541][T21705] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885359da [ 443.787494][T21705] RDX: ffff888025ac8000 RSI: ffffffff88535a1f RDI: 0000000000000005 [ 443.790373][T21705] RBP: ffffc9000401fd78 R08: 0000000000000005 R09: 0000000000000000 [ 443.793027][T21705] R10: 0000000000000001 R11: ffff888025ac8b30 R12: 0000000000000001 [ 443.815700][T21705] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947ac0 [ 443.827619][T21705] FS: 00007f2d96ff56c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 443.831304][T21705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.834117][T21705] CR2: 00007f2d96ff4f98 CR3: 00000000560c7000 CR4: 0000000000352ef0 [ 443.846405][T21705] Kernel panic - not syncing: Fatal exception [ 443.849842][T21705] Kernel Offset: disabled [ 443.851586][T21705] Rebooting in 86400 seconds..