last executing test programs: 1m45.610997791s ago: executing program 2 (id=760): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYRES8=r5], 0x30}, 0x1, 0x0, 0x0, 0x24048040}, 0x81) r6 = socket$unix(0x1, 0x1, 0x0) pwrite64(r0, &(0x7f0000000540)="88e46153cc53d05c10ca329033636cbeafe4d6c67af7fbef688bb25220854803326d1b4a80c52bdd356d0d86455ff6e4724fe6d0a0b5f2f9958e0ba147408e973ac8309b6b66d221e9b8d477c7c1a84ee0913e9ca0d2fc523da2cca4bc9bcaf701679b18c286ebe702631ce136fadf88261bafa0adfbd56a008eae576ef785c57a463598343625ac38bee13955bc564dab3f38705fe8b273aaa3f0ff87916ae8d42bf217e9737941c039486f99bf7f86e10420d40d2917bcad12510fd9bb15907e736e539d4321223678f9940ab73a2a5172f862c3b037c3a63268d7eb8be2018ab3e6a28f2a9eb3b16124986dc8fcdd012260beb652d2f8", 0xf8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) eventfd2(0x100, 0x800) writev(r5, &(0x7f0000000b40)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000800)="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", 0x153}, {&(0x7f0000000440)="1df4cc2d089c13e5e383215e540a57c0cc978f06c30f8a0028505502dc99ae35e806fbebd398b5020b7ccb4b640b9c3709213bb99b9786f30aaa598ccc81", 0x3e}, {&(0x7f0000000980)="28accec356467f6cff9931397925e67ace5cba8893842fd9e046b0610f239d71e227919c6f247f8186ae6f6db421dfec88a2aed853eab89322b27186b4eeb81830104965798aa218c8e56e8083475008ca8ba9c87fc5dadaf7d81215a3bd17dcb64b4ae84dd088976422d1a5ac94219d45fbd4d002fab49acfce4406b1b233dbe4dc1198777c1a8f7533f4770800000000000000dd47ef799bad0367a7", 0x9d}, {&(0x7f0000000a40)="61a7dd34176f7029e06658e87adb24d4c786396935a38ab15fec209caebe6daa950ed09f102a05cad51a05ee86266f34614f9516f779631284c2f6cfdbbd6137c67f4f45e170c708a80c878389a6d674e9580bf860b9727c74b12801c115c17979cb020bc17a6e71f899eec1aeec703c6f6a6697e32d706402efc71c7e23bb54184c4de6eaa55983fa1682b46ddefa149aa4d9a07a0f1cad0683ad2ae95e89b6abc665aaada80b0b321c39e0268b39f88b80a5e95a596ff555ae38f5e1b7e553112dd1064f48b9306543a0595e43c39d23c3", 0xd2}, {&(0x7f0000000d00)="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", 0x148}], 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="0f", 0x1}], 0x1}, 0x4) r12 = socket(0x11, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r14, 0xc040565f, &(0x7f0000000580)={0x2, 0x2, 0x6, {0xc0020006, 0xe7ffffff, 0x4, 0x56ef}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'gre0\x00'}) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000040)=0x4795, 0x4) 1m45.393552517s ago: executing program 2 (id=766): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix_mp={0x8, 0xfffffff7, 0x34565559, 0x8, 0x7, [{0x9, 0x9}, {0x5d81, 0x48}, {0x2, 0xb}, {0x3, 0x1}, {0xe, 0x10000}, {0x7, 0x7fffffff}, {0x4a, 0xffff8000}, {0x8001, 0x3}], 0x55, 0x4, 0x3}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix_mp={0x8, 0xfffffff7, 0x34565559, 0x8, 0x7, [{0x9, 0x9}, {0x5d81, 0x48}, {0x2, 0xb}, {0x3, 0x1}, {0xe, 0x10000}, {0x7, 0x7fffffff}, {0x4a, 0xffff8000}, {0x8001, 0x3}], 0x55, 0x4, 0x3}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x90}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) 1m45.392419421s ago: executing program 2 (id=767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x281, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x2, 0x2}}]}) r6 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001400)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000001540)=0xe8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)={0x118, 0x24, 0x100, 0x70bd28, 0x25dfdbfc, "", [@nested={0xe8, 0x147, 0x0, 0x1, [@typed={0xe4, 0xe4, 0x0, 0x0, @binary="837d8f0309d4bc12fcfe0359eda1a433eb0681799a79bfaf15737c7c96b50c3deabc278d613a94a7bfdb0b26be98abedf757e0a51da487a5088e7e3104d80d1e0ec88e482b6d9c86eae59159b1e0612f10d170b5f2c0493c16037bbc4579ad872cee38b4bbf88fdbc34845d1df9e71199df1120fc96a9b534def49ecabff33f3a90f120213d9bd9f4b78b39315d9d285a33aabdf649a2343b4a2277f24987af40de123f360576003d2c964416170785c2273b538456e0b9653c1cdf5cc8443695d016b38a951505601ca9d68108ab7729b2648f89b4bd7123459f39f6b106188"}]}, @generic="9e129fb9a731dd9a775e082834f86bcf17d8c679ed2b", @typed={0x8, 0x10f, 0x0, 0x0, @uid=r1}]}, 0x118}, {&(0x7f0000002cc0)={0x1610, 0x2d, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x58, 0x140, 0x0, 0x0, @binary="31b96ad2497c162fe08b60c241f0c6430fcda68bdf283b7b7a11c8cbd66674f29afa277ac775dfa2021fd484caa52d53db3e2e7595c7391c66f434f5081abca039e2f838ddddf35ea76ffcad4c0eba22118400ea"}, @nested={0x3da, 0x4b, 0x0, 0x1, [@generic="d34003c6a725eae6f64ef419a600548454d82be27f3277316795d82321767331a70c211857a0a1f5cdfd38860523b5a34f23b33195", @generic="189d2480921317112ca947ff99543c81148fba2702cebba08d41487b95ff79dab4833ec38311f328ec5849e51a0376cc9a26dbd3e006757d585146e1339345b1023cd7a0bb9c4eb624569ea5bd62a243ad4403fa6fbba444a9b359acda57c887d71aef90d57fd113c4762c3bc98f70316277d3926678fdc2d77d01af7f335fc21a974e1eab1586ec0dda764f2c8ec6b3862bd236524ea8b71f2fd5a8b58f6520a11ec84b23574b3a3875a070fc53ccd698dea138a39094b13000a94cdbe95ab038c65b457f6f8b1d21e2", @nested={0x265, 0xe8, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @uid=r8}, @generic="6713fbaea2eb97ef729ae1e4e0aca9a75e", @generic="56bfb52b2376521af8925f0768848dd9bb1b17e5e11ff946b48ccc32b96af3a0afc32f5a6a77b0b69587a316b17010d7564087ecc3519eeaf3792b85eb649feab436445d36fbbc811be94af19234e031eae5bef267a64e992a926910d22471f7567cdf646521a228a71ef49d67fc9f443eef3b1d2aa5a8ff0ac42e9dcb628dcee75f9a392dae057bd2e2bf1d1c3540706c16a8d120d37d5880e9ea295bafa714fce3a230e72f3d1dd7d80d0b8173c372978ae2e52d09c6185d6ec4785ce1324d4507a0205ae7e31835ed46fae55e2e3829a75333147ef1c1d13337872594", @generic="8b1dc06ac5162e7db98f0738f2b2bdd345727df7eb9e716c14d0e77ab93c4dbaf7daffb3c19b64fa92fb2d961e9a08f69a9c23b9548910e1dc1bd3c7f0fde51912a5cb082cce31abf3a60106fa6eb948d4ad1550b96cc95c96db286a899cf25689b7b8545929c20c69ed5d2df786b84155d7392b343342863e9eed41b5e711c70afd880b05cace2c3daa7b3d7c6b7090aab96078f5dcca2a75d9942aa8451bd93e6915d1ade46c821cb8568a23ab72e8ead567d3538ad95cd9573d766e7b21a3005c5ad35caa1d131c37a04eb14d4dd25e85e6de2b32388c927d51b535cd70", @typed={0x8, 0x118, 0x0, 0x0, @uid=r1}, @generic="d1bb767eaeea08d16260deb85c07164daccc106de6ba2395000bc2b46d52d14796984d81cb62472767c85a7262ab931f15b4ea95c35f0b1fef5aac490ec3b1979162d4078b27ac5d97c7e7e4e0f44c5b80b0ce90506838f5a9cef7fbb91d526e2108e05de358c1d50773374dfaf3ca9d5578a3b1dca7433c65383fddee792a53363d0a"]}, @generic="d5dc78f780fbaf7e4f2cd4e6450772ce8fa32cdff0de64e6301d1b34c00523d828ab7251ce8b8a053b7f9b5b612b2c666f98d8e6aea1a3ba2a0d60a82d480c628fd4a5c2a6caead5b07d2d0ac5c0a9a4c9b1c2eb088153da568130e44e54790b60880d7d00"/111]}, @nested={0x10d9, 0x150, 0x0, 0x1, [@typed={0x1004, 0x10b, 0x0, 0x0, @binary="bd27987b2522f27e4d7695d1db25b366e65e51b7c4fcdef2d4c46a801a7bd78bfeed67d7ef79b04b5fce89d467ab54ebfc3ceb76b41e1dcc0157c32f98c1093d9d1a105e7631c92006a2d73e4f9922bd9db831fab54c2c684c74bc98134f7b253cb45c922ebc12e297e47e71dbbc4709b22fc9a8c9fc058d4286ed622462bdadbab66e54c74e77dd3efb0f5480b26b48bf1c96796cc396076b8698fa0f6408f0c54bc582550bcbaae4cdcae0ae6618494571df34a2b06ea3f65d2aece0ecdbfc122be0c2fa9b1a3a9b545fe40a5e4c159a25be434642707769e1b6017cb5388af6777b56a8fb6992442bdb262ca021736ac4224a385c25a7710d100bad27baf6957d3e8d2effcda9495911ffd0772069bb869133cf72113c6bf876c9c58535c569fa370e560f749186e99e3c06beb5836b62888b1aa31bd7cb846703c9758c78df5d944b7a87e8810e62c73b8cbb35bf75e2891bf5c9f39715d3271aa8ad9b8df6470a8250b716c9d15cfe730bae75c31ed80033a56316058202f5e0f9bce8cb3b28a249c3df9a172cfc2d1f40bfda1bb5e3ea66bf96664fa3b8e93a6ea87ad24b1ff9cdd1d481a45e4c323235cc8329b497a327d6c5fe567f3b69af4a5e33a1af4c2d68dcf565ce2eafc7e213ddfecdd8a691117c04a19a6bf2b84e5f6ee063e1287aeffdb114b9f38010978ddd787a7bbcbb8a244f8749bb80a65638f46cf8d9dfb7bc445fd7ec1c51b0132a82ac859bc3d01acc5c746371827678f4056d28837727cb15c8aaef195f571d38c23381d4241c499257faee8c4ae62e8c097387e46c5eceac4659e36f28aa62cf86564ebedeafd0d0dfff61f49c19a26ae368f2e60d5eae3de848400eaba4023f5c1382ec47fece7e2eaaea8d3bdd19efe33a73b185b0efac55ae75d40bd75d8b4ea8e508269f5667e0ac9c6ff02cc6e049fc7836c642609889b76df27af738d49066188b7c19af1afe3dcd181ae44581b0f2c0de102ad2e4e8a8953bfdad446b9268e5d179f4f764e282a7541b11ec45d08ab98346fa5960f4e1e0967a463801cbb69f8077a1e7b393b880408c7b20fb95cd3dc5403f1096f0f96c16866154bc503eb169b914596db203ce4a473e91ff067ebfb07c85cab5e6970fb7d06780d7411a084e42bb6e0d863f14d0cf60d3d3704d29f9507bc545fcea3f1a677012cfae7cde4c06b6972bd1eecaf17f3358898a7ceccbfd6bddd09d8848bb069ce91a8b4c247977402d204f24b3398474698774227d7c245655def3c030d42c77e4d7a466a6d63a11cb92c72d79fa3c0fa0d318c688429d7119dd4f62baff362bb8811509715abfe2372a8b20cd411995a0e56f1e5d5f95fe6a6630c70e2a178ef0f4f7731098de44cf35faee2a9831dda600545ea30e74c2b7d7fff9afa3813a51ab20ec409c6dadbaf0c74485987fb5b5e17c9d01be794573bc343816cc72beb0ed7fbf82d5696815d6944678a88035abb3eff2edfe9721f04fd280317d122a526efed35766428d02cf578103026f1fc7eeb8a5fb30c931b81f223f3395e166edb14cebc8e6b4da9f14cc46a6c0c0bda9073ca656be03c3faf703bd0b1ca2925eda360f18af9c17373a4401facb317f91ee87b4d09ca14256f5cb3e3e1290a2ac2bbaf6f6a2986de9add9e14c7bba5a04ed4b2c4b123408bd11ebab9ca1a49ede2729678566f26d41f8ddb1575718d9969bea07ef7eb96e1f2072cb2e78e51cd5fcf9f20aa55e647d99111b554907307ed32f6b259649cdf025e36fc336708f69f5a93a66caadca2998839c689fd0471b9ba8982306dece4543a835360090b88a464894287ed8295f71fa025131b1b83f60df3f9d93ff3b4cfd7e2a817655c4a03e1cd5c466f28e86d2d27ad44d8fff7022f8b7579d619ceef7b137177e48a82092a5572573d1b1e44cd7a280bf100262837f89b00925c5708f0e395d2c21157af945ed0f0fd25d30adfad108525a33926559f5c0943567cd1ed254b9cb33b156d3098f0312570f4fdc35df0f0d7363751d78e4ef461d5db2e59719fbb4eccd2ab26a2a7952c9cb348e00b69c1cd5fd2869a4153282d1d03edf81256c5ef402f322e80e8166bfe68f6f452604b3ec4fa3491e776e2efbb342705942f081c1eb08223ad5415fa71460b7525c6aff45116282bb317c033cc7a879fb3e9b9fcb88c930a419f2e3e816f9d06475765095309df964a5f3be7d42909039082c68c0a1ad37d4efd87cd7cf7046eba9c3b354fcc5f59cbfe33828aa6685cc821e5688e1ab900f3853c54b1b8cb53b36d09633fe899d2fa7169fb9446d1985ee6ef37dc1efe142025e19713a9b05d687e1dd61cdc969eb32eba631c2ad032d2c4f1a7daca19039b15b02223836249fd55628eafaa00e7805bfcc44102e721c6875f1746115c10841caa321bd727f2c3dd9bc7195d56658c1e87d15c4c3374c0bd23faf34d85e79bcc5cf99090a83e07cf19edd85f17ad6b8aa22a915dc5aae83389455997b5d401519079be4601c52a5bdabdcc5d9544f85e7756864264c63effe0e9d24388ce941976f717ec0862b5396b4796123b3389498ac5108366b9b93ee5b6c6a2d97eb6f4a5222fadba1ac8f5234993e74dca2fa86214ac8f454b6aee03342bdf16e2f038a91035243e9213522ee9ea37d5328323f3293905f35ea7237614ebd44d2315825efc819b6671bd6201facbd22ce21e0955e55bd381a2f58fd37a1020be53fb099de35b7957f7d027ade19edcf9a48914ebd9e112fe75bb6539fd10b8c46669d79917e295d06149c2786f3d6e4944bb94bf068924d81b88969fad2eb8e1a5468d1bada4671bd09555d2c72419a31533951fa366727dcd7994724503458fb09dacb0232f9f2113abe91abf8cbb6f4422f5c37644ecaf8354d59a9790678447ec8d8b1419cf32602000bd40bc58ddda21cc3693faf5e42ab98b18ab66c830bc2b9fa5892e0787b92a046daab10b44c0e5a9d4606656a34e39d101420a261aeb1e3592d35aa8047b120ae2644a440ada0ab06c658accc3f28bdd5ed7667d4226d1b1528488d60c4ab60c2cd91ecb7a8772516a33158aaef70473fe1c159f4f7befa5c6d2dc50424c4f30b523467f7a8a522e8c1899b3d62019c5902c0c47ddfd39b5699d82bc76a1e2c4d879d5ba8bcee7d3d32d5eb42e2f58390a547e2b82796aad3bc2b049823089a66cbc79b557a4d3f0e027d874a9fea586fdbd914d2d4e3af3c74326c8bc7b22ec2321ef043d100c9a71012616b0e79afaf050d0d8dbf360cd37ef4d7cdf7360e0acb3e4e6cd0066645ee7504d44031d53fba09e323069967eb5d724a323fbe9d368f10a8e75ac46cdca36e6e3a27feca359c73266ef4622861392b6681bcdaa148eddafaf7b1349958c1925bf7e336b02f4b4a7d302aef371b78451932f792be714e4e9a1b0cb605c767307ff9fc5799bc2f38bf83a317c277389d0dfa567ec27cd920353596f1441ba6352119bad3a4264d1026d626ab2fb4eb14cc855e97248af7a63d18a61112cdea2a3860b2dc568d9b45e12dda14136c054c8c535db816a33c626ab1da072c08287a631ec87b06d208cdd380942ae61e44ba1307c8a2643789c8a8af1a65316cdb856254e77e06ce943eaa37aa6f7a5a25396f677faba035a3dcf1a2d87981fc3c10415986809f09dcb7cd68c138d7212035e6c2dd958f01b2fca3157740eb6122c59a270ad906c186c469a3f134906e0e9c607f75e590762e672a1bb024bf5fc688f55fb60a344ac1f3523e757a0d4a9a5e8681f9e341843b11d85ad346b3a05a28a35bde8f444928bbd2a6ddc6b15d5a47a9fa8b9d9e74683fed0b92fdb5087d9d0842ddf48fd69c7b81e4e77a4b725151b669cbdb81cb6bf250d376d2b2f60d98e00bae1b6d11015f7a6085c2273a16778afc0c139f231f87fd8aa5ff2bb79e5ef67cc3a5f8f76496576170d4649a36ee7e88e3bb87580670c47b26b713a8a7e0f7750964fb67f84e468782b6bbcb45064dcc7314cb8e6cefe7672527acac30107b525d033c467d86951938834c3d2840a8656120e66bd1770c48b50147da9fa87f85ad36056adbc7ce77f8277c60948e5061d9399c38df77073aa4badba0816f076ff9259495833cf4ea51bcf73d549e56ec95c514ff8910602345dcbffbc09f32c6b3cf23fc8e1f35dff43a321012a45be21a7bc6d359d0a32c6a49a254ccc982d0f956d23ae88eade26eba5eef33e41fc41c7f3c7db09672331981d30c05ad48999f7b0acd15e9227ac2aeed2b3c26cad79e6c8dbc609b7a87168a898e6b95708754a5cfce5cde0aa0a267776354ab584dfb8522d1179accee52b5f00acf5808395b87e2d4682c46eb27566cffbc7465560d2deff30e3566ed999584a5f67e67ffa9c9a166d34e1dc17b3994b2f8bc63d90b73a678a8e7376f20658c75b88c5f70e168f2ef38a4f8a1739c1f8c95b2af4728116d8e338376e9dc2a9457e6f6e338dfdf0730778aaeb1aa1e1401daf1d7871a9a5a387275decd63d3b9344e95f7dc6d35cff1b75778215c1cfee030a661105c42d0d5f83135ad1fe09c54d6adcb66bc203c4d97c3749460fbb8b1f12c48f7b589cc00a212aa5d062d1a25782944d5cf51c9fe7103d5e8ad26cb6d6b8b2f427ce1ff46deee44f5c1764e4853e082a867e2b6b5773241574dc7e8e3d61490fb24f319370e49ea9d9e586ff5015ced36418a5cbe4c997eb4689d27415c85c1d315dd524dc6b800bdbdd94d79979c7f13717a3ef0528996ebafc0d09a1d817a731248edc0eed1d8c2c1a6f03210ef38277f036b0a0f0048a74484ffc2633614422c68c0f95ffd1f1f598644c76c8c27b9ab237966dd790bf9a098f6d95e33c3574cab6e73205ef1d4d956cb44125643348a56e0d7be078e1750b010e175f7fb59fd54a0a069c39f2e22a4f79d88b02c0e4661acac9cc7a92dd49c4031e3260fa59f58591cc49ffe194e3c9c3a21f99b421c4a1f503c96fdfc1afe6a6ec3ce16d99be451520ed1261ac46d228b0c9e51e211a0de8d6514cd3830f48761ecaec29d242eb610861b5eaca1f01cb4ac58e48a52f72e01c6bb2b5857fd48a2d920210ab57e080d54bfcd98353baa2defa41f614e20ab6837e933c36baa0489a061731e80ff379f8ccc10ac76384f3b2f8d08cf19e216499ff8717b29380a44dd683c33ada1d483a5dbee9b5d348fcf1b6b7070ca0e3d2926a6e84775c585003bd2e235e69b16889b4466a48e243dec58c6326c20ed1141c23d206d0d6d08c40176304ea831cf89bff576af7cdd26c86dd468dcc1f043d944626513cb42308c4f38f75420b4f0df2f13b1865869f32627c75fee85a788d0a67351a837633d762cf881b6dc778291c61b6461cfd432b904baaa830f6ad508aa87f38237c24d53326eaead24e275d6bf9ac1ed18cc495d0eb8147ebe617b4ed3faafbfa75aa20ee1f55099141ff7d014711932867122c0cc1df6f05c7e7c791029a77abf01a916b81ee69c424e668a577bdff539b9f25869230adb0036b4afd1ce235e745f1c254fc0892dc3321a25928a9610d3992d0ca1cb9e7dbe0960211d239057398576eb55dc3f854e1d5c04e22663a620c23e1c9cbbe654b0258b6811323015655ebe5b6ed23a45b40eaeff129a00e114fd9f18b3399daf52133cdf8a079dba347ba089ff8217944581e9a3d76481be990f099c1877f1a3789a1acd593b0c511e4f43525aeb1eab99f31ba92f98472aff03a74fcc6f2d0c0dbd4f40985432b412e0b6a8b0ff13a7d7af0a3ecc49b616262e60d6"}, @generic="8e129e69c8968959fd2c831d5db4d7177d3fedd214fdfb4494c4087d386de4336f3467116d3431f1dfe58ee2f792d4add18b4b37436ce7e18db6b40a00f73c20dccb9e24b310e9c01bdf072cc02f09b6473bca2f7ac54f9114c97e344adb24f134e1e0bee3ed0d1b3b072dc2d653fbc617b4e0eabcc593e4b26590743d8da5f98593ee15eace50254cdf7e10d96653e7c4183522dea64eb59aeee876a25327cb574ef88415291a1f427d81ef6d4a512696e1bb78a3faefc34abbf56ff2e2a283aa0f49bfabf6831f10456efbacd73e8f22"]}, @typed={0x4, 0xe9}, @generic="549708c7a9c5", @generic="3ddd460e350f03ae9238a9247c18dcd4971b894fa1315c815957baaf0efbb49eaaffb1bd2550f020ff7d8025f4e30ce25b5fe824b33e7a4b6039bac1bc893414e566c5354fcb733d0963aae49f396506fcaab57b133eb97a2f3535bf2463b725d9b2f79c655f12ccdc321d2a981bab7e9085041a3579ee221ff29ff6bfcece5efb1cc24852faf1695f30db082524b232d2783f27de88647bc63cfa6a83761080db0b83dc0fcd0b2388437db50289ecd99d089695e6598153066bdaeaae72a3658642f0ead98e95e9c2482ce3481f6d2c54b148b304", @typed={0x8, 0xcc, 0x0, 0x0, @uid=r1}, @typed={0x8, 0xd3, 0x0, 0x0, @pid=r6}]}, 0x1610}, {&(0x7f0000001580)={0x130, 0x19, 0x300, 0x70bd29, 0x25dfdbff, "", [@generic="5681be60b322eff69162f4d326009f2d38c5cd0af932a10f7042cfda11138ea6d676", @generic="fa697a4e08888731ea9541d234a65e8a8280851dbf0b5ae3b3e13db607e981c5c955e0a98f0b391fa258c7f667c496052df59b26da5fa147f5d082960dc4f2ed4977ea66b4b6a773f73cb2926a51295ac02f225a3f156aea1db687e0a4048b5f22f44b5d53f2ae74846e4da1b8d62101c3def4e4a32384e2c2b8f690e44360c5611ed1e41b34591ef94ec857ba23d1a9bc7ca304fe4f59a51f7368f36b66289dc01063c131ca3f14d5c29a3a859375a2207bb6f105a2babdd9bba443c2", @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x120, 0x0, 0x0, @pid=r7}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xa4, 0x0, 0x0, @uid=r8}]}, 0x130}], 0x3, 0x0, 0x0, 0x4004080}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f00000001c0)) 1m45.213016523s ago: executing program 2 (id=769): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) r4 = socket(0x1, 0x2, 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setresuid(r5, r2, r2) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000100000000000400040000000000100002000000000020"], 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1m45.143415916s ago: executing program 2 (id=770): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x1) (async) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000000c0)={r7, 0x0, 0x3}) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r13, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) 1m45.063696993s ago: executing program 2 (id=772): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000001540)={0x51, 0x0, 0x0, 0x1, &(0x7f00000003c0)='\f', 0xc, 0x0, 0xffffff14, 0x1000, 0x60, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0xfffffbff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x10}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x880) 1m33.732849768s ago: executing program 1 (id=904): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0203, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m33.633706726s ago: executing program 1 (id=905): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() (async) r1 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x40000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1m33.472468058s ago: executing program 1 (id=907): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x5000000}, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) 1m33.372986696s ago: executing program 1 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e7de0d5bc6fc8327178f2594e882102837f22e566187e2c"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x404e804}, 0xc2010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e7de0d5bc6fc8327178f2594e882102837f22e566187e2c"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x404e804}, 0xc2010) (async) 1m33.367668626s ago: executing program 1 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000006006600c78800001c0033000801000008021100e2ff0802110000010802110000010000"], 0x4c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xbc0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000100)) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) get_mempolicy(&(0x7f0000000100), 0x0, 0xa, &(0x7f00007d5000/0x2000)=nil, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r5, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x400, 0x2, 0x0, 0x5, "e4c11c", 0xfffff000, [0x2, 0x7, 0x83d3, 0xff, 0xb85, 0x1, 0x2, 0x1]}}) 1m33.281944907s ago: executing program 1 (id=913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008014) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffff34e76edeaaaaaa86dd6087fb8900180000fefc02f8000000000000000000200000000002000000000000040100010100c20476200100fb2d1a597778f59638569dce615f33e6a57ec65046bacf02dd5af65fb84d306b7762343e4603fcbd6210decf8db77cadfc3dca5afdefb8ada2f0861c32043988cf2847b386e8cc5b29cd65869642b45b110bb66fe30b96b9b57d23bed2060830a91331840dbbf7251d9b08cf79847d928f25b4ea365689e9fea9a476fc706e9b38eb51dc14"], 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000a00000a2c0000000e0a0101000000000000005d010000020900020073797a32000000000900010073797a30000000001400000011000100000000000000000000c4000a"], 0x54}}, 0x0) (rerun: 64) 1m30.098602487s ago: executing program 32 (id=772): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000001540)={0x51, 0x0, 0x0, 0x1, &(0x7f00000003c0)='\f', 0xc, 0x0, 0xffffff14, 0x1000, 0x60, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0xfffffbff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x10}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x880) 1m29.287660405s ago: executing program 3 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001380), &(0x7f00000013c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x7, 0x0, &(0x7f0000000140)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r10, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000ffff", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 1m29.219647873s ago: executing program 3 (id=931): r0 = socket(0x2a, 0xa, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xd}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x7ff, 0x20}, 0xc) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000891) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x2, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0x3) (async) write$P9_RLOCK(r7, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000240)="f2435f01", 0x4, 0x40000, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x4, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="08f0ffffffffffffff00"], 0x3c}}, 0x0) 1m29.143100942s ago: executing program 3 (id=932): unshare(0x6c000200) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async, rerun: 32) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x148) (rerun: 32) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x40, 0x7f, 0x1, 0x40000000, 0x7}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r3 = fanotify_init(0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYBLOB="93daf802ace3fed912a74715eced756b6102e4e59526b20941b5ee698113c44dd7fec9cf95fc4f8c340b9579c7291766180dee62a8ea2df4a2ba9afe1171f32f37300854a631d316ce7b87272845b51f484e0784d6d014f54991a99b6dea11a11e748962e4a6d654489c331f5b02e9a25c7e002e304b8d948992a70532fe78c07fcb298af4036799ab15b83ed9cd184984d69d8d307c40021f98cd610f6afc0d6c711479511203aa4111df76e9f80e8587c7a75117f10ea930acaf50c0286048ce131217b3b645f18c7e972dfbc21f3127be273ebdc3d3da952348d56c", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000eb8c000000000000000000000022a5cfd43437ad6a"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000000b073422052f32b52894f695f8b08134a01000000dfb86ba79fb04198163f16cfa2f1fd5d089ac12a13fd2ea461269fc1294e5d275d6d0099cac4d6c34b"], 0x48}, 0x2}, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) fanotify_mark(r3, 0x1, 0x4800003e, r0, 0x0) (async) r6 = dup2(r3, r0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="888d0d897fa13678d9d991db98b3a3c9cbb53341b780870a60f1ef47bd1166a5d1749c7d275729560901dcdf564aaf4d712a3eac68e10b5b3d2e274edf72cd09bd85ba046bfbf5ee027a0817e2243405479e7bcb1b04286e62350355fed3bc1b1d6acd1679d07e8829be516348a36c38c7cfdaa32c336fce40c1cbd6c9914795a6775f5f518a4688e071f6152bcba8791423c7c82f0e728575b3f292a8717f6dfc367b435daf849ff0cef1f67b09b981441b85deef6918801479ca5c4d052afea335b19d9c54e14c8e43740a87bb5655dff24b8746a4d758ca67db3ea794e811571094b0c2021e3f204b048b86980a2a4f62d92ef79bddf5936f196ad26345ae5d3d33ee85fac7679308035a169adf0aff3b97dc092caa7bed790209cc2887bfa6fb058c23c72b0b703fcd13d759", @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000006900010028bd7000fedbdf2500000000000000000853fd01e3c3e9f1720001000200000034000000000000000900010001000000cc252b80cec0bf1c26491fb0615a1a1085820f10ce6898a1ec12249bcff4e36dd35167dfe866593b6391dcdc2b03b73d68d57b93106c31c5262f0f7931e55b3556e94f0538af827e8d3a9bc0f4189b61ed0e4a2df64d919fc16d0cbb9c666b73e0da29625b"], 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0xe, 0x0, &(0x7f0000000940)="00000010000097a1c4bbe89086dd", 0x0, 0x4024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6f}, 0x91) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) r10 = semget$private(0x0, 0x0, 0x2) semtimedop(r10, &(0x7f0000000040)=[{0x2, 0x1ff, 0x1800}, {0x1, 0x8, 0x800}], 0x2, &(0x7f0000000080)) 1m28.831400043s ago: executing program 3 (id=936): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000140)=0x80, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000540)) 1m28.830256915s ago: executing program 3 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000540)={'wpan1\x00'}) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sendmsg$AUDIT_SET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd2a, 0x25dfdbff, {0x9, 0x0, 0x1, r8, 0x8, 0x1, 0xd7, 0x10000, 0x0, 0x80, 0x80000001}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1m28.782767246s ago: executing program 3 (id=940): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) read$rfkill(r0, 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1m18.282768835s ago: executing program 33 (id=913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008014) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffff34e76edeaaaaaa86dd6087fb8900180000fefc02f8000000000000000000200000000002000000000000040100010100c20476200100fb2d1a597778f59638569dce615f33e6a57ec65046bacf02dd5af65fb84d306b7762343e4603fcbd6210decf8db77cadfc3dca5afdefb8ada2f0861c32043988cf2847b386e8cc5b29cd65869642b45b110bb66fe30b96b9b57d23bed2060830a91331840dbbf7251d9b08cf79847d928f25b4ea365689e9fea9a476fc706e9b38eb51dc14"], 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000a00000a2c0000000e0a0101000000000000005d010000020900020073797a32000000000900010073797a30000000001400000011000100000000000000000000c4000a"], 0x54}}, 0x0) (rerun: 64) 1m13.740286115s ago: executing program 34 (id=940): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) read$rfkill(r0, 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 19.660646797s ago: executing program 4 (id=1729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000100)={&(0x7f0000000580)={{@host, 0x8}, {@hyper, 0x4}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f00000003c0)={{@hyper, 0x5}, 0x4, 0xc, 0xd, 0x8000}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00010c00910005000500000000000000000000000e0000000100000f0f00000000000000000000000000000000000000000006005c9557884519146bee90bbf089050d70cc8d189e083e3f684806456f188c8374fecb37282e85fb34ac76b59895c3edd67952b915953f3f305703d32c66c7d756a1d8413bd55b17a3a9524e317461fdb6264dc9b93c26a140013cfb0e12ba3805052f252df4953d726df10da90449c619cc2ca340de7c7092f4"], 0xad) r2 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9c00000000010000003448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="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", 0x106}, {&(0x7f0000000280)="646e5b6f96544332c3496ef717191b0e4a8e44a63a814ca5e4cb4aa213fc6c6c722cb4cfa4d20200000000000000a01369", 0x31}], 0x4, &(0x7f0000001500)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}, @iv={0xe0, 0x117, 0x2, 0xc8, "f754ed85d6c9d2a9d440bfa985e3fdb0b3efdc5b1a8b4997d03a57c74908e91cba36bb671223c15b30a48c02b1a41aca1e0e3df9ecb88b31fbe61d2e15763d1e3165fab2237bd5ad5567763f9d1d5d6a199d1599f33758c12c4f8dbb0c074a83104ae5782ad9892d7b58643d421ab7ed6fc3f6b57439337dd8f938fcf6e6c5b8a044d183eb36c25eee88ba481511cde53b36c7ae56ca6f8743ca4926794233e5fffe3ad071d259bc8493e350c0caf0dbd8f07cd13bd5430e0030386121ed8cfbbffe157040646ec2"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1128, 0x4004000}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 19.651948975s ago: executing program 4 (id=1730): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cpuset\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x22) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a32000000002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a31"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(r0, &(0x7f0000000340)="a8bf1d026c42f948368a77aba26c940036ee6198d424d41d0314ade0b7415161604efe879467335a3fdbe0753879ec9fa6ecae04fa46019b596f45ccc25b8f3ef155fd6d11f2e4ed1d625a07ac90746dcdd6c860a683020f7999d54e0ad831088bbdd9e0115ce98b1d000f37ba874763ee39c8d5ff0dc9cd6bae09d3735fc733ea31819542761a9c7330447dd3950b0e20b38730ac810b727028e3a0f76986f55d6b80b52a3605427afec8", 0xab, 0x20000000, &(0x7f0000000180)={0xa, 0x4e21, 0xed8b, @local, 0x5}, 0x1c) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900)='/dev/bsg/0:0:0:0\x00', 0x141000, 0x0) ioctl$BSG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000940)) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6ec6b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x101, {0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3a1b, {0x40, 0x3, 0xa, 0x10000, 0x1001, 0x7, 0x800, 0x81, 0x120, 0x2000, 0x0, r7, 0x0, 0x440, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x800002, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, r6, {0x4}}, 0x18) 19.579849228s ago: executing program 4 (id=1733): unshare(0x64000600) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x19) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001780)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000001880)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, 0x401, 0x8, 0x61, 0x4, 0x24}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x35d0f000) io_uring_setup(0x3ab4, &(0x7f0000000440)={0x0, 0x826e, 0x400, 0x2, 0x3a0}) unshare(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x9, &(0x7f0000000240)=[{0x400, 0x4, 0x6, 0x5}, {0xe4e6, 0x8, 0x3, 0x8000}, {0x2, 0x7, 0x40}, {0xa, 0x7, 0x2, 0x42c6}, {0xd, 0x9, 0xe1, 0x81}, {0x8, 0x1, 0xf9, 0xf9d5}, {0x9, 0xfa, 0x1, 0x68612872}, {0x20, 0x2, 0x2, 0x8001}, {0xe, 0x4, 0x4, 0xef}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="150500000000ffdbd31352df2503000000080001002bb948fb466c79043dd8ee9cb25d02c6b8e4256b4e58e1e205b4b257af5ce9e1036abfc41675f45485052ea653f5b39e9edc85c87f24211cb9adfe561434664e34e681466c9110664f6af04c3949e3c8401c2e00c9e1cdb60c26e1be20ca1aaae05f7f2741da9c7ae31fde", @ANYRES32=r5], 0x140}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100, 0x6, 0x2, 0x9, 0x7f, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00000007000000c1ff00000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00000000000000000000000004000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) 19.252809115s ago: executing program 4 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') preadv(r1, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="24df88276fa233f58756c7fab6740ab5eb0da759d4ab72baf9d8167b56f364234a9f5d1da23b5787663e5ecf66b0d1be05ba"], 0x40}}, 0x24000840) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/120, &(0x7f0000000040)=0x78) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') (async) preadv(r1, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="24df88276fa233f58756c7fab6740ab5eb0da759d4ab72baf9d8167b56f364234a9f5d1da23b5787663e5ecf66b0d1be05ba"], 0x40}}, 0x24000840) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/120, &(0x7f0000000040)=0x78) (async) 19.181884915s ago: executing program 4 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000140)=[r0, r0]}, 0x2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00040000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00040000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000000)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)=""/53, 0x35) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x160, 0x30, 0xffff, 0x0, 0x0, {}, [{0x14c, 0x1, [@m_nat={0x148, 0xe, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5d2, 0x4, 0x81, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x9, 0x7, 0x5, 0x96e}, @multicast1, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x3, 0x7ff}, @private=0xa010100, @loopback, 0xff, 0x1}}]}, {0xa8, 0x6, "d6a151f66b0c2bdde031cc61769f7d9414b286599367d02caa7ec21b1c125711fd0f9133b9531d17cfb1486496618d6e6e3c842cdc6603ba2f5d168cdc76f0e2b802b4d764470a058eee36fbcf491ea6aa6436adc56fb3e78b216bfea29237fa953aca0d92bd9fdb18ca5293082e00f848631ef5294eada6214265e2e263b38d8bb8b253b652a172e1707dcb90d7fb938f51acd29a737cc34d91d9be5353c8c6f6525470"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x160}}, 0x11) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0xc0, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xac, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x3, 0xfffffff5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0xffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0xc0, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xac, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x3, 0xfffffff5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0xffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 19.120326995s ago: executing program 4 (id=1744): io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f00000002c0)=""/5, 0x5}], &(0x7f00000005c0)=[0xbe, 0xfff, 0x1, 0xfffffffffffff9f1, 0x8, 0x1, 0x853], 0x7}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000452120a9cb3c9974886ca04144626061d6a90e71c1316ea6a43302d87c3bda325033d75892d98f1463a81f023e60e39c3fccddce788fb07e115a98132f67073466bb847c2e622d9a99c83cc03d96498c474bff2fc780b4d0a50e78d68c92cb1dc9482509411bdabb747b66b5a8"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) ptrace$setregs(0xd, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)="bfad9258c501dab2240ee26ede9529e3dc9b72fe9604960240e41e14f7d9589606a1227478ac1345986f28e41cb6cbf9288a097bdea7c1f44bc73e923591") ioctl$sock_proto_private(r3, 0x89ef, &(0x7f0000000640)="4439f75a132bdb3440befba904d3af32b84a7898918d26951d8f491d77cd9d6dfb56054e5a90622f9c98b7242400c4bf8a506fa4fadde4b0a8f8c936196f2257cb417c01f8f969bb7305a68343ed0b5471f06e07f23774b22f150eeb79b9a92742c13e8015ed63078f8f51dd456298ec2c5daba45180ecb1dc9f4dcfc638") 8.571656943s ago: executing program 0 (id=1876): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "6c854db891cfa50f", "df5a31a9eacc01e29536c2127e27cca6", '\a\x00', "f55e8260de50ab3c"}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) (async) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 8.481108989s ago: executing program 0 (id=1878): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000049a40)={0x0, 0x0, 0x0, &(0x7f0000037f00)}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0x109000, 0x0) (async) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000049a40)={0x0, 0x0, 0x0, &(0x7f0000037f00)}) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) inotify_init1(0x80000) (async) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) 8.480885115s ago: executing program 0 (id=1879): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0, 0x38}, 0x8}, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x40, {0x7, 0x800000, 0x0, 0xfffffe01, 0xfffffffa, 0x2f53}}) 8.428620917s ago: executing program 0 (id=1881): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x1, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file3\x00') r2 = gettid() mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d7463702c706f7274303030346532302c76657273696f06003970323030302e752c646f6e745f6d6561737572652c736d61636b6673726f6f743d6c6f7765726469722c00"]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_getoverrun(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xc1cec2645649c048}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setpgid(r2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1, 0x2}, 0x18, 0x3) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.37268322s ago: executing program 0 (id=1883): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x108000) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/147, 0x93}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/72, 0x48}], 0x4, 0x29b, 0xc) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000300)={0x0, 0x4, 0x6, 0x0, 0x3}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x8]}, 0x8, 0x800) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x6, 0x4, 0x3, {0x4, @pix={0x2e, 0x10000, 0x34324948, 0x9, 0x81, 0x6, 0x5, 0x1, 0xf1609c3b0be40668, 0x1, 0x1, 0x5}}, 0xffffe41b}) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000480)={'ip6erspan0\x00', 0x600}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @dev}, &(0x7f0000000900)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x80800, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000980)={0x100, 0x5, "9c275db1fc1ffc6297b7869d4ece091ef24576e1a3fd1043294d6a9f669fc278", 0x5, 0x80000001, 0x7, 0x40c, 0x8}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x6a8c00, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a40), 0x10180, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) quotactl_fd$Q_SETQUOTA(r4, 0x0, r5, &(0x7f0000000b00)={0x0, 0x100000001, 0x1c0000000000000, 0x4, 0x2, 0xee, 0x8, 0xd, 0x5b}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x518}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000d00)=@overlay={0x2, 0x5, 0x4, 0x0, 0x9, {}, {0x1, 0xc, 0x1, 0x3, 0xf, 0x1, "84ea31d2"}, 0x3, 0x3, {}, 0x7f, 0x0, r1}) fcntl$setlease(r6, 0x400, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000d80)={0x88, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$pppoe(0x18, 0x1, 0x0) preadv2(r6, &(0x7f0000003d00)=[{&(0x7f0000001a80)=""/63, 0x3f}, {&(0x7f0000001ac0)=""/121, 0x79}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/111, 0x6f}, {&(0x7f0000002bc0)=""/33, 0x21}, {&(0x7f0000002c00)=""/24, 0x18}, {&(0x7f0000002c40)=""/19, 0x13}, {&(0x7f0000002c80)=""/60, 0x3c}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)}], 0xa, 0x3, 0x8001, 0x9) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003e00), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000003f40)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e40)={0x84, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b57e22d0aaa41a6e89c54a5250cf91b174270a26cfd2576c528569e2d096ea7b498b18a6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000003f80)={0x0, 0x0, "77e7b04c8a544ac903129ed238a3726c"}) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000003fc0)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x200240) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) io_uring_enter(r8, 0x5d4b, 0x7dad, 0x0, &(0x7f0000004140)={[0x9]}, 0x8) 8.28232426s ago: executing program 0 (id=1884): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0xd, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008080}, 0x48000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.245432683s ago: executing program 35 (id=1884): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0xd, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008080}, 0x48000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.142318251s ago: executing program 36 (id=1744): io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f00000002c0)=""/5, 0x5}], &(0x7f00000005c0)=[0xbe, 0xfff, 0x1, 0xfffffffffffff9f1, 0x8, 0x1, 0x853], 0x7}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000452120a9cb3c9974886ca04144626061d6a90e71c1316ea6a43302d87c3bda325033d75892d98f1463a81f023e60e39c3fccddce788fb07e115a98132f67073466bb847c2e622d9a99c83cc03d96498c474bff2fc780b4d0a50e78d68c92cb1dc9482509411bdabb747b66b5a8"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) ptrace$setregs(0xd, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)="bfad9258c501dab2240ee26ede9529e3dc9b72fe9604960240e41e14f7d9589606a1227478ac1345986f28e41cb6cbf9288a097bdea7c1f44bc73e923591") ioctl$sock_proto_private(r3, 0x89ef, &(0x7f0000000640)="4439f75a132bdb3440befba904d3af32b84a7898918d26951d8f491d77cd9d6dfb56054e5a90622f9c98b7242400c4bf8a506fa4fadde4b0a8f8c936196f2257cb417c01f8f969bb7305a68343ed0b5471f06e07f23774b22f150eeb79b9a92742c13e8015ed63078f8f51dd456298ec2c5daba45180ecb1dc9f4dcfc638") 1.401796279s ago: executing program 7 (id=1974): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4000800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) 1.352619446s ago: executing program 7 (id=1975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1e, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x8}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x40, 0x63, &(0x7f0000000240)=""/99, 0x41000, 0x30, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0xe936, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x4, 0x4, 0x10, 0xa}, {0x5, 0x3, 0xc, 0x9}], 0x10, 0xfffffff7}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040880) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x5, &(0x7f0000000640)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000680)='GPL\x00', 0x5, 0x71, &(0x7f00000006c0)=""/113, 0x41000, 0xc3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xff, 0x6, 0x6, 0xfff8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x2, 0x3, 0x1, 0x4, 0x50, 0x8}, @generic={0x0, 0x9, 0x1, 0x9, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xc, 0x9, 0x4, 0x4, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0x6, 0xfa, &(0x7f0000000b40)=""/250, 0x41100, 0x8, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x1, 0x401, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x1], &(0x7f0000000c40)=[{0x3, 0x2, 0xe, 0x2}, {0x1, 0x3, 0x6, 0x2}], 0x10, 0x8}, 0x94) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r10, 0x641f) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d80)=@setlink={0x2c0, 0x13, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x4010, 0x28}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa48d}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_EVENT={0x8, 0x2c, 0x81}, @IFLA_VF_PORTS={0x124, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1814009c46d06e2ec079b27d83ac9f2c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cedc14dfff74c4f61f96a9f05e5aaaf7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "14617bd6e93834c1b7c88d8254d3d84e"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0d0f4eeb505878aeea7fbfcf00e548cd"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dcc059e629acdb68b89da7110b32012a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bff1defb27cb17475c6086b4a2aa9b02"}, @IFLA_PORT_PROFILE={0x9, 0x2, '%/#{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f59e86aa5f72f4a36baa075038a8c650"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '$\xe8\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c992ce6eeba37b5fc8ab0ec538b40f8e"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "95e534d9034ba61428bfd09ceb0ff365"}, @IFLA_PORT_PROFILE={0x10, 0x2, '^.{L$(\'(([}\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "eeafb3fdb3a4b0fbcf9245121807cd54"}]}]}, @IFLA_VFINFO_LIST={0x104, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x200, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xc, 0x5}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x100}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x8}}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1484, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffff8001, 0xc42, 0x4, 0x88a8}}, {0x14, 0x1, {0xf, 0x463, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x0, 0x15, 0xf, 0x88a8}}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.232044121s ago: executing program 7 (id=1978): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200200, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) execveat(r2, 0x0, 0x0, 0x0, 0x1000) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.097261406s ago: executing program 5 (id=1982): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x14, 0xc, "00f9737227af149989fc8dbe43ea6affffffffdc25f5ab60c9e6d680f985881a4c516bdd010f35000000b0000006000800000000000000005c9f00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1.042775963s ago: executing program 7 (id=1983): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x100, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400), 0x24, 0x2) (async) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 931.649709ms ago: executing program 5 (id=1984): r0 = socket$unix(0x1, 0x1, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-fixed-time)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) 931.264123ms ago: executing program 8 (id=1940): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x18803, 0xc104}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d089}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 772.69079ms ago: executing program 8 (id=1986): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlink(&(0x7f00000001c0)='./file0/file1\x00') lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) flock(r0, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 772.253607ms ago: executing program 5 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x6, 0xff, 0x0, 0xfffffeff}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000906010200000000000000000100004505000100070000000900020073797a300000000005000100070000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendto$rose(r6, &(0x7f0000001540)="4cd5c6356b64ec358142667062caa4497dbf10071653c91035da15b68cf83fe3bd6c9412293ddf22ab4b808dfe4643c731c0f6a150811b817876ede167b67a34072c8d2dae18d3a01471f96240683eea21afb0e15ccbb4ce7dbb4858f46160850e421c165dedc35f6ff3172218ac22c2323a5083401c6fe3a707bf57cce10bc1e9a97d2ef0aff08a86be944d12987d0e0f37597f5a08b25e03f8b64287afa2ca7c33be96e0f2d4f6cb5debcdea", 0xad, 0x0, &(0x7f0000001600)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) write$UHID_INPUT(r7, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) poll(&(0x7f0000000140)=[{r1, 0x8000}, {r9, 0x200}, {r5, 0x8200}, {r10, 0x200}], 0x4, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x800}}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0x66}], 0x1, 0xfa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7", 0x1}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) 760.109239ms ago: executing program 8 (id=1988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xa, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "8fc04c037bb8eb34a1c103f28f5cbe22"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008880}, 0x4800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) epoll_create(0x756b) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000)="441fec33957ce2295ab7bdafbe2b9bb7dd439b4baa6aacf9d736d1f73336b1ac3608282ad3a754b646fb218fd8987c9c1642226c78", &(0x7f0000000200)=""/228, 0x4}, 0x20) r7 = fanotify_init(0x0, 0x101000) r8 = open$dir(&(0x7f0000000300)='./file0\x00', 0x1e3300, 0x4) fanotify_mark(r7, 0x0, 0x10, r8, &(0x7f0000000340)='./file0\x00') (async) r9 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_STORE(r9, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) 532.710925ms ago: executing program 8 (id=1991): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfffc, [0x8005, 0xffffffff], 0x3}, 0x10) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x136, 0x0, 0x0, 0x139}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) 442.097089ms ago: executing program 5 (id=1993): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) (async, rerun: 64) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000400)) (rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x93f6, 0x4, {0x0}, {0xffffffffffffffff}, 0x8, 0xd}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000700"/20, @ANYRES32=0x0, @ANYBLOB="000000000a000200aaaaaaaaaa0c0000"], 0x28}}, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 440.574688ms ago: executing program 5 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2030000, &(0x7f0000000100)={[{@metacopy_off}, {@verity_require}, {@index_off}, {@redirect_dir_follow}, {@uuid_off}, {@redirect_dir_nofollow}, {@nfs_export_off}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) 381.071349ms ago: executing program 5 (id=1996): mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000e89000/0x2000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) mlock2(&(0x7f0000f75000/0x3000)=nil, 0x3000, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) gettid() r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x1b, 0xfffff000}}, @uexit={0x0, 0x18, 0x80}], 0x38}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000000)={0x5, &(0x7f0000001540)=[{0x7, 0xd4, &(0x7f0000000100)="fa59c59bc3905cf66e307bc3e6339a324017c18b3d661fb2c863bb4c7569230d7e4fb5c24bd9c303f22a23505e22e6c05d2abf7067f9bf16c6ec567e07e8da1518a6d3aeb79b3270f118ec65c0c5899663d579a371ebe606c0b22978f2d9af5277e42eaa0ca8ca2e2b7778bf5428e2671e766763b6d4893e193d6d2f24365df89a5f53bf40905cee70c2da3c85a9d50add3959648d3929068f327b885e3b72b125157c303c9ea9c7107277cdb903349a0612c38fb6825dca71cbc599f89b2ca9cd2e9dd7500e947ab44ef8253ffb99cec1ad3a77"}, {0xc64, 0x72, &(0x7f0000000200)="902b9bbb9a3298ae98d842555df2c42196f40b1dd521f0f92c4a4c9ba93854cd639007bf6bbfd7b4600313564477aa1bbc9c6363d9a3d49d7e2c492a4d19e5e85dc071060d5b99313504310738471e43818392c4f2e9e7f286dded043a89488f618dd93046584b9e5adef0a752622221e556", 0x0, 0x1}, {0x8, 0xf2, &(0x7f0000001440)="d7bd7e3fa0b0c5efb27af52ff77ef7b9efd555d49f28b93fede9967954583def3de5d9e9353a4af3dd9e001bd172014d06e7a33419726db9caa3b6dfd5dc501b47dedd6f0636c71d136a3fdf2ca852333e9e8932488872aead35c0e3d183eb42a6c4571b50abdd2c5a6a0c17a7920e96337d2a2adbd9a5757e2f79cb6f14116526d91f530b2e5885dc40ddbcd611fe4bf8e0bccc8a6863fbd05de39fcb1b0474cf4fdd8594cbbd905915612c32e09ac20bdd5fba5c38d20dd6cc92337b74cb8f5ffe773ae4ea2da25395f3a7939cfc7b52d928159faf5308a51c08e984d815c678ccfe48a243a76c2ce84707ae7241e50ed0"}, {0x6, 0x54, &(0x7f0000000280)="87b19e04bc26c550db410d1f176a10ba3b79cbb50ad3d26d0230b77ad141fbac19f8a532c20e799c18a807e04d1853b5293b58f01e14600c8471afd26ca5713f1fd409f4defc041ca01c5a51c1c256dcfa075662", 0x1}, {0x200, 0x70, &(0x7f00000003c0)="6bd9cd239d2499a50d2a5ce43287408609d5c6b9becb5838effc07f65766af85aeb052b889dd59a83e17f45954a7b247a00aaaf1bd0ef875bac65b6b5889868d9cfd01e32072554d79cee59b15777d2ff8675e88b3397d4175157659d584f958d2a0ce830609402964ef22ce59dd2ffc", 0x1, 0x1}]}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x1b, 0xfffff000}}, @rdmsr={0x66, 0x18, {0x1b}}], 0x38}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000f9a000/0x2000)=nil, r9, 0x1000000, 0x10, r3, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000380)="cd", 0x1}], 0x1) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r11, &(0x7f0000000440)=""/4090, 0xffa) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r4, 0x2000000, 0x2010, r11, 0x0) 262.339387ms ago: executing program 6 (id=2000): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000930000950000000015000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) 261.939681ms ago: executing program 6 (id=2001): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x9e8, 0x0, 0xa, 0x148, 0x8d8, 0x60, 0x970, 0x2a8, 0x2a8, 0x970, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x850, 0x8b8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3ff, 0x1}, {0x9}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4e, 0x2}, {0x25a5}, {0x0, 0x1}, {0x7}, {0x8001, 0x1}, {0xe, 0x3}], [{0x8, 0x80}, {0x8, 0x3a16}, {0x8, 0x8}, {0x5, 0x8}, {0x100, 0x8}, {0x5, 0x9}, {0x9, 0x421d}, {0x7, 0x5}, {0x6, 0x80000001}, {0x4, 0x7f}, {0x6, 0xb52}], 0x1, 0xb}, {[{0x4, 0x3}, {0x6, 0x3}, {0x80000001, 0x2}, {0xd, 0x1}, {0x21}, {0xfffffff9, 0x2}, {0x37}, {0x6, 0x2}, {0x6e318da7}, {0xff, 0x2}, {0x700000, 0x2}], [{0x5, 0x4}, {0x4, 0x1}, {0x0, 0x81}, {0x7, 0x4}, {0x8, 0x4}, {0x0, 0x9}, {0x8, 0x2}, {0xa, 0x46f}, {0x8, 0x9}, {0x9ae, 0x400}, {0x400, 0x6}], 0x8, 0x2}, {[{0x8}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x8cc, 0x1}, {0x5a, 0x2}, {0x3, 0x2}, {0x4, 0x3}], [{0x5, 0xc00}, {0x4, 0xffff785e}, {0x0, 0x1}, {0x3}, {0x2, 0x3bb2}, {0x8, 0x56}, {0xf68, 0x1}, {0x4, 0x80000001}, {0xffff, 0x2a}, {0x401, 0x2}, {0x1, 0x4a8}], 0x0, 0x4}, {[{0xb}, {0x1ff, 0x2}, {0x80000001, 0x3}, {0x81, 0x2}, {0x52, 0x2}, {0x7, 0x1}, {0x6}, {0x1, 0x2}, {0x40, 0x2}, {0x4, 0x3}, {0x400, 0x2}], [{0x7, 0x2}, {0x5b, 0x1}, {0x0, 0x84b}, {0x195c}, {0x10000000}, {0x400, 0x2}, {0x68a, 0x5}, {0x101, 0x4}, {0x2c}, {0xfff, 0x4}, {0x6, 0x4}], 0x8, 0x3}, {[{0xc}, {0x71d}, {0x428}, {0x2, 0x2}, {0x7, 0x2}, {0x9, 0x2}, {0x80000000}, {0x23b}, {0x2, 0x3}, {0xfffffff7}, {0x6, 0x1}], [{0xe8, 0x4}, {0x7, 0x5}, {0xa, 0xac}, {0x8, 0xff}, {0x2, 0x2}, {0x7e7}, {0x0, 0x800}, {0x6, 0x8}, {0x6, 0xc}, {0x3, 0xc0000000}, {0x3c, 0x64e}], 0xa, 0xa}, {[{0x6, 0x1}, {0x0, 0x2}, {0x800, 0x2}, {0x8, 0x1}, {0x0, 0x1}, {0x4}, {0x789e, 0x1}, {0x5}, {0x226, 0x3}, {0x3, 0x2}, {0x65, 0x2}], [{0x71e, 0xd}, {0x6, 0x3}, {0x7, 0x501}, {0x7f, 0x10}, {0x1, 0xffffff7f}, {0x2, 0x9}, {0x6, 0x7036}, {0xf8a, 0x106}, {0x6, 0x1a}, {0x3, 0xc}, {0x8, 0x200}], 0xb, 0x2}, {[{0x0, 0x1}, {0x4358, 0x1}, {0x5, 0x1}, {0x6}, {0x8000, 0x2}, {0xa, 0x3}, {0x3, 0x2}, {0xbda, 0x1}, {0x5, 0x3}, {0x86e0, 0x3}, {0x7fffffff}], [{0xffffffff, 0x1}, {0x9, 0xe72f}, {0x9, 0xfffffff8}, {0x33, 0x8}, {0x5, 0x8}, {0x80000000, 0x94fc}, {0x600000, 0x8}, {0x1, 0x8}, {0x4, 0xfffffcff}, {0x8, 0xb}, {0x277}], 0x0, 0x3}, {[{0xf}, {0xff, 0x1}, {0x8, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x8, 0x3}, {0x9}, {0xffff, 0x3}, {0x9}, {0x8, 0x1}, {0xff}], [{0x0, 0x8}, {0x300, 0xad}, {0x8, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0x100, 0x94}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4}, {0x1, 0x2}], 0x5}, {[{0x3ff, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x1}, {0x8000}, {0xffffffff, 0x2}, {0x4}, {0x3}, {0xfffffe00, 0x1}], [{0xe99, 0x6}, {0x200d18e2, 0x4}, {0x8, 0x10}, {0x3, 0xd}, {0x5, 0x3}, {0x4, 0x8}, {0x80000000, 0x3}, {0x7f0f, 0x6}, {0x8, 0xf65ffacc}, {0x2, 0x6}, {0xf, 0x5}], 0x6, 0x6}, {[{0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xff, 0x2}, {0x5, 0x3}, {0x80000000, 0x3}, {0x0, 0x2}, {0xfffff800}, {0x4}], [{0x4, 0x6}, {0xe, 0x291a}, {0x401, 0xffff}, {0x3ff, 0x4}, {0xe976, 0x600}, {0x9, 0xc4e7}, {0xfffffff7, 0x1000}, {0x10, 0xfffffff9}, {0x4, 0x4}, {0x2, 0x8000}, {0x0, 0x3}], 0x5, 0x6}, {[{0x9, 0x2}, {0x1b, 0x1}, {0x4}, {0xe64a, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1}, {0x80000001, 0x1}, {0x6, 0x1}, {0x400, 0x3}], [{0x6, 0x10000}, {0x1a002663, 0x69}, {0x8, 0x3}, {0xebb8, 0xe0}, {0x1, 0x8}, {0x1000, 0x3}, {0x5, 0x3}, {0x3, 0x3ff}, {0x7ff, 0x1ff}, {0x8, 0x2}, {0x6, 0x6642}], 0x2, 0xb}], 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x8000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000040)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) (rerun: 32) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x453, 0x400, 0x70bd27, 0x25dfdbff, "f764e72fa6c548c77f457fedbc9278c8675150f6ad5023d6d25743a22f06e47615a7c3ca4c73040a58ed4f", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4806) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r6, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000000)=0x6) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) shutdown(r1, 0x1) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fbdbdf2500000000000000000000000000000001000000000000000000000000000000014e2100044e2400030a00008089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000008069040000000000000100000000000000d30000000000000000000000020000800600000000000000010000000000000000000100000000000100000000000000feffffffffffffff0101000000000000ff07000000000000fb000000bd6b6e00020000010000000007000000000000000a0010"], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000080)) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8) 182.481389ms ago: executing program 6 (id=2002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="57b62c6a03317359d4e9ac495a1c22a58081b8c187dcaf2ebf352e7c3669544a8401df1045fad56c0ec8d61cd2fb9608ee1ff666175d999b3e41b7a8b1fc60627f11ac90908dad5ac020888455971e8f68eb4088408a6328cdd539a01e766504", 0x60}, {&(0x7f0000000300)="01421ac43bf2fa70e47cad256c31a6c078ac1048a2b1d34ef6f888f262f8b83ff416d7b62f852386ebba7e0c646909652b64e790c2b6c24a2c38338d6a165fc9cdbc2e09", 0x44}, {0x0}], 0x3}, 0x800) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 182.012479ms ago: executing program 6 (id=2003): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@x}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0x47, 0x8000}}, 0x10) 175.072027ms ago: executing program 6 (id=2004): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)}, 0x4000044) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0xa0363159}}) 101.087861ms ago: executing program 6 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002000010000000000000000000a0020400000000700000000140011006d6163766c616e3100000000000f00001400030076457068315f766c616e00000000000014000200fe800000000000000000000000000017"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 100.909427ms ago: executing program 7 (id=2006): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) syz_open_procfs(r1, &(0x7f00000000c0)='net/packet\x00') fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x2, 0x1, 0x8201, 0x2, r1}) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 7 (id=2007): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x2) kernel console output (not intermixed with test programs): ] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1136'. [ 144.608606][T10235] delete_channel: no stack [ 144.611695][T10240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.615846][T10240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.620583][T10240] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1138'. [ 144.656202][T10246] tmpfs: Bad value for 'mpol' [ 144.786578][T10259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.826312][T10262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.828971][T10262] IPv6: NLM_F_CREATE should be set when creating new route [ 144.831357][T10262] IPv6: NLM_F_CREATE should be set when creating new route [ 144.833760][T10262] IPv6: NLM_F_CREATE should be set when creating new route [ 144.837755][ T40] audit: type=1400 audit(1768129416.167:669): avc: denied { write } for pid=10261 comm="syz.0.1145" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.112419][ T40] audit: type=1400 audit(1768129416.437:670): avc: denied { setopt } for pid=10276 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 145.116141][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'. [ 145.129962][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1151'. [ 145.191650][T10280] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.196404][T10280] Cannot find add_set index 0 as target [ 145.203597][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 145.279326][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 145.343436][ T29] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 145.343503][ T5950] Bluetooth: hci3: command tx timeout [ 145.363543][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 145.366673][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 145.369450][ T10] usb 5-1: config 0 has no interface number 0 [ 145.371910][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.376732][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 145.380577][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.384890][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.389775][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 145.392720][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.401122][ T10] usb 5-1: config 0 descriptor?? [ 145.413690][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 145.496006][ T29] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.499683][ T29] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.504662][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.508342][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.512774][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.518714][ T29] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.522393][ T29] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.527934][ T29] usb 11-1: Product: syz [ 145.529753][ T29] usb 11-1: Manufacturer: syz [ 145.536214][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 145.538364][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 145.542730][ T29] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 145.546120][ T29] cdc_wdm 11-1:1.0: Unknown control protocol [ 145.609142][T10270] 8021q: VLANs not supported on ip_vti0 [ 145.643606][ T40] audit: type=1400 audit(1768129416.977:671): avc: denied { execute } for pid=10301 comm="syz.5.1160" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 145.706914][T10309] kAFS: unable to lookup cell '(,cL' [ 145.709417][T10309] kAFS: unable to lookup cell '\,' [ 145.751851][T10314] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 145.754078][T10314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.757520][T10314] vhci_hcd vhci_hcd.0: Device attached [ 145.759999][T10315] vhci_hcd: unknown pdu 2 [ 145.762073][ T61] vhci_hcd vhci_hcd.5: stop threads [ 145.764011][ T61] vhci_hcd vhci_hcd.5: release socket [ 145.765744][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 145.793713][ T10] usb 11-1: USB disconnect, device number 3 [ 146.343615][ T10] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 146.493752][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 146.499126][ T10] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 146.503708][ T10] usb 11-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.508993][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.511784][ T10] usb 11-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 146.517627][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.526283][ T10] usb 11-1: config 0 descriptor?? [ 146.667459][T10331] Bluetooth: Invalid esc byte 0x04 [ 146.670635][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 146.682221][T10331] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 146.686020][ T1148] Bluetooth: (null): Invalid header checksum [ 146.758939][T10333] netlink: 'syz.5.1170': attribute type 39 has an invalid length. [ 146.763248][T10333] veth0_macvtap: left promiscuous mode [ 146.871444][T10338] fuse: Unknown parameter 'fe' [ 146.934016][T10345] tipc: Enabling of bearer rejected, failed to enable media [ 146.936935][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 146.955683][ T10] input: HID 28bd:0933 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:28BD:0933.0005/input/input23 [ 147.000451][ T10] uclogic 0003:28BD:0933.0005: input,hidraw1: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.6-1/input0 [ 147.017528][ T10] usb 11-1: USB disconnect, device number 4 [ 147.037091][T10357] fido_id[10357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 147.108630][T10361] CUSE: info not properly terminated [ 147.256689][T10373] Cannot find add_set index 65532 as target [ 147.299360][ T40] audit: type=1400 audit(1768129418.627:672): avc: denied { mounton } for pid=10376 comm="syz.6.1185" path="/17/bus" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 147.300783][T10377] Mount JFS Failure: -22 [ 147.353177][T10384] loop4: detected capacity change from 0 to 7 [ 147.359445][T10384] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 147.361217][T10384] loop4: partition table partially beyond EOD, truncated [ 147.364357][T10384] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 147.395479][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 147.413451][ T5950] Bluetooth: hci3: command tx timeout [ 147.544747][T10389] overlayfs: upper fs does not support file handles, falling back to index=off. [ 147.549030][ T40] audit: type=1326 audit(1768129418.877:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.4.1189" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fade938f7c9 code=0x0 [ 147.657443][ T10] usb 5-1: USB disconnect, device number 22 [ 147.664045][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 148.025739][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 148.038185][T10410] bond2: Invalid ad_actor_system MAC address. [ 148.040279][T10410] bond2: option ad_actor_system: invalid value (255) [ 148.044211][T10410] bond2 (unregistering): Released all slaves [ 148.069527][T10413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.168320][T10418] vlan2: entered allmulticast mode [ 148.170362][T10418] bond0: entered allmulticast mode [ 148.172151][T10418] bond_slave_0: entered allmulticast mode [ 148.181087][T10418] bond_slave_1: entered allmulticast mode [ 148.185312][T10418] mac80211_hwsim hwsim5 : renamed from wlan1 [ 148.262584][T10426] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 148.324602][T10428] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 148.324873][T10388] delete_channel: no stack [ 148.402391][T10437] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 148.463051][ T40] audit: type=1400 audit(1768129419.787:674): avc: denied { audit_control } for pid=10440 comm="syz.4.1206" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.493287][ T40] audit: type=1400 audit(1768129419.817:675): avc: denied { execmod } for pid=10443 comm="syz.6.1207" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 148.505910][ T40] audit: type=1400 audit(1768129419.817:676): avc: denied { ioctl } for pid=10443 comm="syz.6.1207" path="socket:[40278]" dev="sockfs" ino=40278 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.555441][T10448] overlayfs: conflicting options: nfs_export=on,index=off [ 148.559275][T10449] overlayfs: conflicting options: nfs_export=on,index=off [ 148.682865][T10466] pim6reg9: entered allmulticast mode [ 148.758689][T10473] netlink: 'syz.5.1215': attribute type 2 has an invalid length. [ 148.811110][T10474] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 148.923946][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 148.923956][ T40] audit: type=1400 audit(1768129420.257:682): avc: denied { listen } for pid=10478 comm="syz.6.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.941667][ T40] audit: type=1400 audit(1768129420.267:683): avc: denied { bind } for pid=10479 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.941835][ T40] audit: type=1400 audit(1768129420.267:684): avc: denied { name_bind } for pid=10479 comm="syz.0.1218" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 148.941959][ T40] audit: type=1400 audit(1768129420.267:685): avc: denied { node_bind } for pid=10479 comm="syz.0.1218" saddr=10.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 149.293720][T10519] __nla_validate_parse: 11 callbacks suppressed [ 149.293736][T10519] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1228'. [ 149.386523][T10527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1230'. [ 149.437125][ T40] audit: type=1400 audit(1768129420.767:686): avc: denied { name_bind } for pid=10528 comm="syz.6.1231" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 149.651007][T10539] could not allocate digest TFM handle cryptd(blake2b-160) [ 149.689625][T10550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.693459][ T6041] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 149.746631][ T839] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 149.748498][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 149.789156][T10562] fuse: Unknown parameter 'rotmode' [ 149.829009][T10566] tipc: Started in network mode [ 149.830591][T10566] tipc: Node identity 72cc045e7a83, cluster identity 4711 [ 149.832809][T10566] tipc: Enabled bearer , priority 0 [ 149.835895][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 149.837021][ T40] audit: type=1804 audit(1768129421.167:687): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1242" name="bus" dev="ramfs" ino=40382 res=1 errno=0 [ 149.838703][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 149.847359][ T6041] usb 5-1: device descriptor read/64, error -71 [ 149.852818][ T40] audit: type=1804 audit(1768129421.167:688): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1242" name="bus" dev="ramfs" ino=40382 res=1 errno=0 [ 149.855362][T10566] syzkaller0: entered promiscuous mode [ 149.862681][T10566] syzkaller0: entered allmulticast mode [ 149.870913][T10566] ip6gre1: entered allmulticast mode [ 149.878277][T10566] tipc: Resetting bearer [ 149.897303][ T839] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 149.901225][ T839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.904913][ T839] usb 11-1: Product: syz [ 149.909417][ T839] usb 11-1: Manufacturer: syz [ 149.911624][ T839] usb 11-1: SerialNumber: syz [ 149.915220][T10565] tipc: Resetting bearer [ 149.919121][ T839] usb 11-1: config 0 descriptor?? [ 149.935227][T10565] tipc: Disabling bearer [ 149.957866][ T40] audit: type=1400 audit(1768129421.287:689): avc: denied { listen } for pid=10567 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.964472][ T40] audit: type=1400 audit(1768129421.287:690): avc: denied { execute } for pid=10567 comm="syz.4.1242" path="/cpu.stat" dev="ramfs" ino=40389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 150.018426][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1244'. [ 150.084049][ T6041] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 150.095245][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1246'. [ 150.100347][T10579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=10579 comm=syz.5.1246 [ 150.104690][T10579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=10579 comm=syz.5.1246 [ 150.109742][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1246'. [ 150.136987][ T839] usb 11-1: USB disconnect, device number 5 [ 150.144877][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1247'. [ 150.150429][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1247'. [ 150.164163][T10584] loop2: detected capacity change from 0 to 7 [ 150.167920][ C1] blk_print_req_error: 25 callbacks suppressed [ 150.167929][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.173107][ C1] buffer_io_error: 27 callbacks suppressed [ 150.173115][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.177870][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.180912][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.183828][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.186962][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.189719][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.193004][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.195826][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.199019][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.201604][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.204649][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.209144][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.212237][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.215272][T10584] ldm_validate_partition_table(): Disk read failed. [ 150.217882][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.221879][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.225595][ T6041] usb 5-1: device descriptor read/64, error -71 [ 150.225677][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.231535][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.241796][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.246139][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.249231][T10584] Dev loop2: unable to read RDB block 0 [ 150.251971][T10584] loop2: unable to read partition table [ 150.254736][T10584] loop2: partition table beyond EOD, truncated [ 150.257406][T10584] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X ) failed (rc=-5) [ 150.266437][ T5943] ldm_validate_partition_table(): Disk read failed. [ 150.269719][ T5943] Dev loop2: unable to read RDB block 0 [ 150.282223][ T5943] loop2: unable to read partition table [ 150.284628][ T5943] loop2: partition table beyond EOD, truncated [ 150.332412][T10594] Cannot find add_set index 0 as target [ 150.334874][ T6041] usb usb5-port1: attempt power cycle [ 150.673738][ T6041] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 150.705669][ T6041] usb 5-1: device descriptor read/8, error -71 [ 150.953413][ T6041] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 150.973805][ T6041] usb 5-1: device descriptor read/8, error -71 [ 151.084344][ T6041] usb usb5-port1: unable to enumerate USB device [ 151.362145][T10624] chnl_net:caif_netlink_parms(): no params data found [ 151.559518][T10638] loop2: detected capacity change from 0 to 7 [ 151.566734][ T5953] Dev loop2: unable to read RDB block 7 [ 151.568517][ T5953] loop2: unable to read partition table [ 151.570720][ T5953] loop2: partition table beyond EOD, truncated [ 151.584309][T10638] Dev loop2: unable to read RDB block 7 [ 151.586177][T10638] loop2: unable to read partition table [ 151.588049][T10638] loop2: partition table beyond EOD, truncated [ 151.594273][T10638] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 151.900008][ T5624] hid_parser_main: 22 callbacks suppressed [ 151.900021][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.905639][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.908519][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.911433][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.914551][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.917438][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.920325][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.923194][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.928288][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.931170][ T5624] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 151.936538][ T5624] hid-generic 0003:0004:0000.0006: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 152.012676][ T40] audit: type=1400 audit(1768129423.337:691): avc: denied { read append } for pid=10665 comm="syz.6.1271" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.383728][ T6041] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 152.465483][T10674] x_tables: duplicate underflow at hook 1 [ 152.468212][T10674] comedi comedi0: c6xdigio: I/O port conflict (0x8,3) [ 152.472476][T10674] comedi comedi0: comedi_config --init_data is deprecated [ 152.545208][ T6041] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.548064][ T6041] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.551322][ T6041] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.554342][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.554765][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.556700][ T6041] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.562390][ T6041] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.567612][ T6041] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.570451][ T6041] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.572969][ T6041] usb 11-1: Product: syz [ 152.580180][ T6041] usb 11-1: Manufacturer: syz [ 152.587973][ T6041] cdc_wdm 11-1:1.0: skipping garbage [ 152.589673][ T6041] cdc_wdm 11-1:1.0: skipping garbage [ 152.592721][ T6041] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 152.595192][ T6041] cdc_wdm 11-1:1.0: Unknown control protocol [ 152.666986][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.672684][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.794628][ T29] usb 11-1: USB disconnect, device number 6 [ 152.809553][ T656] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.812652][ T656] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.816945][ T656] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.822058][ T656] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.897540][T10690] hub 8-0:1.0: USB hub found [ 152.899238][T10690] hub 8-0:1.0: 1 port detected [ 153.186190][T10711] __vm_enough_memory: pid: 10711, comm: syz.5.1286, bytes: 4503599627366400 not enough memory for the allocation [ 153.220144][T10714] sch_tbf: burst 1885 is lower than device lo mtu (65525) ! [ 154.050998][T10713] delete_channel: no stack [ 154.272300][T10728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.275042][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 154.277888][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 154.306621][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.309044][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.445442][ T1081] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.453567][ T1081] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.458232][ T1081] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.462094][ T1081] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.660887][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 154.660898][ T40] audit: type=1400 audit(1768129425.987:699): avc: denied { watch } for pid=10730 comm="syz.0.1291" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.702631][ T40] audit: type=1400 audit(1768129426.027:700): avc: denied { write } for pid=10732 comm="syz.0.1292" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 154.798672][ T40] audit: type=1400 audit(1768129426.127:701): avc: denied { create } for pid=10734 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 155.112372][ T40] audit: type=1400 audit(1768129426.437:702): avc: denied { set_context_mgr } for pid=10760 comm="syz.6.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.112572][T10764] __nla_validate_parse: 2 callbacks suppressed [ 155.112586][T10764] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1301'. [ 155.129585][T10763] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1299'. [ 155.164044][T10769] tmpfs: Invalid uid '0x00000000ffffffff' [ 155.591681][T10785] binder: 10784:10785 ioctl c008ae67 200000000100 returned -22 [ 155.595374][ T40] audit: type=1400 audit(1768129426.927:703): avc: denied { call } for pid=10784 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.614482][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1309'. [ 155.682129][ T40] audit: type=1400 audit(1768129427.007:704): avc: denied { append } for pid=10800 comm="syz.0.1313" name="pfkey" dev="proc" ino=4026532989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.840600][ T40] audit: type=1400 audit(1768129427.167:705): avc: denied { bind } for pid=10815 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.912959][T10829] ./cgroup: Can't lookup blockdev [ 155.920102][ T40] audit: type=1400 audit(1768129427.237:706): avc: denied { shutdown } for pid=10828 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.937941][ T40] audit: type=1400 audit(1768129427.237:707): avc: denied { mounton } for pid=10828 comm="syz.0.1322" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 155.985668][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1326'. [ 156.056671][T10848] 9p: Bad value for 'version' [ 156.182533][T10854] 9p: p9: multiple sources not supported [ 156.186583][ T40] audit: type=1400 audit(1768129427.517:708): avc: denied { bind } for pid=10853 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.230027][T10854] netlink: 'syz.0.1331': attribute type 11 has an invalid length. [ 156.296979][T10866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.302091][T10866] /dev/sg0: Can't lookup blockdev [ 156.302161][T10867] /dev/sg0: Can't lookup blockdev [ 156.336557][T10871] ata1.00: invalid cdb length 6 [ 156.344300][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.347016][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.351396][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.366042][T10871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.373979][T10871] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.393769][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.397304][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.400049][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.402607][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.405392][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.408060][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.410698][T10871] xfrm0 speed is unknown, defaulting to 1000 [ 156.619883][T10887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1340'. [ 156.683433][ T918] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 156.835845][ T918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.840483][ T918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.840535][T10900] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1346'. [ 156.845841][ T918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.852805][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.035712][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1350'. [ 157.064404][ T918] usb 5-1: usb_control_msg returned -32 [ 157.066800][ T918] usbtmc 5-1:16.0: can't read capabilities [ 157.217078][T10929] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 157.220821][T10929] overlayfs: missing 'lowerdir' [ 157.225565][T10929] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 157.228814][T10929] overlayfs: missing 'lowerdir' [ 157.419312][T10945] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1337'. [ 157.425506][T10945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.429931][T10945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.439356][ T6041] usb 5-1: USB disconnect, device number 27 [ 157.456773][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1358'. [ 157.460435][T10952] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 157.463881][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1358'. [ 157.562140][T10958] vlan3: entered promiscuous mode [ 157.564226][T10958] bridge0: entered promiscuous mode [ 157.765298][ T34] hid_parser_main: 8 callbacks suppressed [ 157.765311][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.769473][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.771842][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.774350][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.776682][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.779053][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.781344][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.783757][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.786136][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.788450][ T34] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.792609][ T34] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 157.821697][T10963] fido_id[10963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.143579][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 158.276773][T10975] usb usb8: usbfs: process 10975 (syz.5.1368) did not claim interface 0 before use [ 158.323430][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 158.328616][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 158.334782][ T24] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 158.338122][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.341413][ T24] usb 5-1: Product: syz [ 158.343878][ T24] usb 5-1: Manufacturer: syz [ 158.345848][ T24] usb 5-1: SerialNumber: syz [ 158.350109][ T24] usb 5-1: config 0 descriptor?? [ 158.358557][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 158.360994][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 158.364473][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.487291][T10988] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 158.540361][T10990] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.556575][T10965] trusted_key: syz.0.1363 sent an empty control message without MSG_MORE. [ 158.561207][T10965] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.566550][ T24] usb 5-1: USB disconnect, device number 28 [ 158.933473][ T5950] Bluetooth: hci3: command tx timeout [ 159.098069][T11013] autofs: Unknown parameter '' [ 159.100772][T11013] tipc: Enabled bearer , priority 0 [ 159.103025][T11014] tipc: Enabling of bearer rejected, already enabled [ 159.127053][T11013] syzkaller0: entered promiscuous mode [ 159.128803][T11013] syzkaller0: entered allmulticast mode [ 159.130940][T11013] tipc: Resetting bearer [ 159.134250][T11012] tipc: Resetting bearer [ 160.146579][T11012] tipc: Disabling bearer [ 160.203198][T11030] team0: Port device team_slave_0 removed [ 160.212348][ T24] tipc: Node number set to 139396190 [ 160.284944][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 160.284955][ T40] audit: type=1400 audit(1768129431.617:711): avc: denied { mount } for pid=11038 comm="syz.5.1388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 160.295013][T11040] overlay: Unknown parameter 'subj_user' [ 160.323607][T11043] autofs: Bad value for 'fd' [ 160.331801][ T40] audit: type=1400 audit(1768129431.657:712): avc: denied { unmount } for pid=9688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 160.359442][T11051] __nla_validate_parse: 1 callbacks suppressed [ 160.359456][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1391'. [ 160.412787][ T40] audit: type=1400 audit(1768129431.737:713): avc: denied { listen } for pid=11058 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 160.422429][ T40] audit: type=1400 audit(1768129431.747:714): avc: denied { lock } for pid=11061 comm="syz.4.1393" path="socket:[40798]" dev="sockfs" ino=40798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 160.431926][ T40] audit: type=1400 audit(1768129431.747:715): avc: denied { accept } for pid=11058 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 160.446959][ T40] audit: type=1400 audit(1768129431.777:716): avc: denied { getopt } for pid=11061 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.476299][ T40] audit: type=1400 audit(1768129431.807:717): avc: denied { ioctl } for pid=11058 comm="syz.5.1392" path="socket:[42935]" dev="sockfs" ino=42935 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 160.577050][T11077] ntfs3(nullb0): Primary boot signature is not NTFS. [ 160.580374][T11077] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 160.751702][T11098] syzkaller0: entered promiscuous mode [ 160.754149][T11098] syzkaller0: entered allmulticast mode [ 160.761521][T11098] dlm: no locking on control device [ 160.837758][T11100] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 160.840337][T11100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.842939][T11100] vhci_hcd vhci_hcd.0: Device attached [ 160.854567][T11105] vhci_hcd: connection closed [ 160.857119][T10048] vhci_hcd vhci_hcd.4: stop threads [ 160.861479][ T40] audit: type=1400 audit(1768129432.187:718): avc: denied { write } for pid=11108 comm="syz.0.1406" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.871033][T10048] vhci_hcd vhci_hcd.4: release socket [ 160.872811][T10048] vhci_hcd vhci_hcd.4: disconnect device [ 161.060770][T11127] x_tables: duplicate underflow at hook 1 [ 161.304585][ T40] audit: type=1326 audit(1768129432.637:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.6.1395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300158f7c9 code=0x7fc00000 [ 161.450943][T11160] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1423'. [ 161.456894][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 161.459812][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1423'. [ 161.468750][T11160] geneve2: entered promiscuous mode [ 161.470547][T11160] geneve2: entered allmulticast mode [ 161.475329][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.480394][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.484116][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.487042][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.516851][T11166] geneve2: entered promiscuous mode [ 161.518619][T11166] geneve2: entered allmulticast mode [ 161.521778][ T46] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.533456][ T46] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.539358][ T46] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.542910][ T46] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.610106][ T40] audit: type=1400 audit(1768129432.937:720): avc: denied { watch watch_reads } for pid=11174 comm="syz.6.1430" path="pipe:[33712]" dev="pipefs" ino=33712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 161.638558][T11175] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1430'. [ 161.680862][T11183] dlm: no locking on control device [ 161.746759][T11185] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 161.751085][T11185] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 161.999285][T11202] xt_hashlimit: max too large, truncated to 1048576 [ 162.082293][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 162.473634][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 162.666511][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.669470][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.673267][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.676573][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.788062][T11298] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1465'. [ 162.791051][T11298] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1465'. [ 162.794305][T11298] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1465'. [ 162.798147][T11298] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1465' resets device [ 162.839961][T11302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.860297][T11304] 9pnet_virtio: no channels available for device syz [ 162.909353][T11307] netlink: 'syz.0.1469': attribute type 21 has an invalid length. [ 162.909906][T11308] netlink: 'syz.0.1469': attribute type 21 has an invalid length. [ 163.295003][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 163.473510][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 163.476394][ T24] usb 5-1: config index 0 descriptor too short (expected 1554, got 18) [ 163.479149][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.482353][ T24] usb 5-1: config 0 has no interfaces? [ 163.486708][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.491624][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.494383][ T24] usb 5-1: Product: syz [ 163.496392][ T24] usb 5-1: Manufacturer: syz [ 163.497863][ T24] usb 5-1: SerialNumber: syz [ 163.502542][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 163.504903][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 163.708267][T11312] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 163.713093][T11312] mac80211_hwsim hwsim5 : entered allmulticast mode [ 163.717142][T11312] bond0: (slave ): Enslaving as an active interface with an up link [ 163.720996][T11312] netlink: 'syz.0.1471': attribute type 64 has an invalid length. [ 163.723605][T11312] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 163.728093][ T5624] r8152-cfgselector 5-1: USB disconnect, device number 29 [ 163.763456][ T6041] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 163.881062][T11353] ptrace attach of "/syz-executor exec"[9373] was attempted by ""[11353] [ 163.923446][ T6041] usb 10-1: Using ep0 maxpacket: 8 [ 163.927897][ T6041] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.930490][ T6041] usb 10-1: config 0 has no interface number 0 [ 163.932488][ T6041] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.936347][ T6041] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 163.940233][ T6041] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 59, changing to 9 [ 163.944076][ T6041] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.948611][ T6041] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.951740][ T6041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.959046][ T6041] usb 10-1: config 0 descriptor?? [ 163.969618][ T6041] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.314915][T11384] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.344849][T11391] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 164.347961][T11391] SELinux: failed to load policy [ 164.353710][T11391] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 164.357268][T11391] SELinux: failed to load policy [ 164.583600][ T142] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 164.665893][T11407] delete_channel: no stack [ 164.753505][ T142] usb 9-1: Invalid ep0 maxpacket: 64 [ 164.841320][T11416] fuseblk: Unknown parameter 'func' [ 164.893550][ T142] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 165.043427][ T142] usb 9-1: Invalid ep0 maxpacket: 64 [ 165.045473][ T142] usb usb9-port1: attempt power cycle [ 165.307094][T11437] ]2: renamed from bridge_slave_1 [ 165.383462][ T142] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 165.406832][T11448] xfrm0 speed is unknown, defaulting to 1000 [ 165.423464][ T142] usb 9-1: Invalid ep0 maxpacket: 64 [ 165.474353][T11448] xfrm0 speed is unknown, defaulting to 1000 [ 165.506145][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 165.506157][ T40] audit: type=1400 audit(1768129436.837:730): avc: denied { ioctl } for pid=11447 comm="syz.0.1510" path="socket:[46462]" dev="sockfs" ino=46462 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.553495][ T142] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 165.560486][T11454] support for the xor transformation has been removed. [ 165.574230][ T142] usb 9-1: Invalid ep0 maxpacket: 64 [ 165.578602][ T142] usb usb9-port1: unable to enumerate USB device [ 165.658316][T11458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.750687][ T40] audit: type=1400 audit(1768129437.077:731): avc: denied { map } for pid=11463 comm="syz.6.1514" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.832317][T11468] pimreg: entered allmulticast mode [ 166.065875][T11477] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 166.071349][T11477] erspan0: entered allmulticast mode [ 166.073738][T11477] netlink: 'syz.0.1520': attribute type 3 has an invalid length. [ 166.076318][T11477] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 166.079716][T11477] __nla_validate_parse: 18 callbacks suppressed [ 166.079725][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 166.091658][T11473] ata1.00: invalid multi_count 128 ignored [ 166.109679][T11477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11477 comm=syz.0.1520 [ 166.165027][T11473] ata1.00: invalid multi_count 128 ignored [ 166.214706][ T10] usb 10-1: USB disconnect, device number 2 [ 166.223110][ T10] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 166.274658][T11473] ata1.00: invalid multi_count 128 ignored [ 166.314767][ T466] ata1.00: invalid multi_count 128 ignored [ 166.346603][T11481] sctp: [Deprecated]: syz.0.1521 (pid 11481) Use of int in max_burst socket option deprecated. [ 166.346603][T11481] Use struct sctp_assoc_value instead [ 166.354934][T11473] ata1.00: invalid multi_count 128 ignored [ 166.394883][T11473] ata1.00: invalid multi_count 128 ignored [ 166.466575][T11473] ata1.00: invalid multi_count 128 ignored [ 166.534772][ T30] ata1.00: invalid multi_count 128 ignored [ 166.594777][ T25] ata1.00: invalid multi_count 128 ignored [ 166.634341][ T25] ata1.00: invalid multi_count 128 ignored [ 166.713701][ T30] ata1.00: invalid multi_count 128 ignored [ 166.784661][ T25] ata1.00: invalid multi_count 128 ignored [ 166.834586][ T25] ata1.00: invalid multi_count 128 ignored [ 166.925477][ T25] ata1.00: invalid multi_count 128 ignored [ 166.987706][ T25] ata1.00: invalid multi_count 128 ignored [ 167.048349][ T25] ata1.00: invalid multi_count 128 ignored [ 167.105143][ T25] ata1.00: invalid multi_count 128 ignored [ 167.172595][T11473] ata1.00: invalid multi_count 128 ignored [ 167.251676][T11473] ata1.00: invalid multi_count 128 ignored [ 167.343720][T11473] ata1.00: invalid multi_count 128 ignored [ 167.397749][ T25] ata1.00: invalid multi_count 128 ignored [ 167.399988][ T40] audit: type=1400 audit(1768129438.727:732): avc: denied { map } for pid=11487 comm="syz.4.1524" path="socket:[44756]" dev="sockfs" ino=44756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.466955][ T25] ata1.00: invalid multi_count 128 ignored [ 167.469669][ T25] ata1.00: invalid multi_count 128 ignored [ 167.524595][ T25] ata1.00: invalid multi_count 128 ignored [ 167.586000][ T25] ata1.00: invalid multi_count 128 ignored [ 167.611775][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 167.615074][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 167.654561][ T25] ata1.00: invalid multi_count 128 ignored [ 167.714572][ T25] ata1.00: invalid multi_count 128 ignored [ 167.716035][T11506] syzkaller0: entered promiscuous mode [ 167.719411][T11506] syzkaller0: entered allmulticast mode [ 167.764681][ T25] ata1.00: invalid multi_count 128 ignored [ 167.806615][ T30] ata1.00: invalid multi_count 128 ignored [ 167.856049][ T25] ata1.00: invalid multi_count 128 ignored [ 167.895844][ T25] ata1.00: invalid multi_count 128 ignored [ 168.426483][T11514] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1530'. [ 168.429494][T11514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 168.678531][T11520] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 168.678531][T11520] program syz.6.1532 not setting count and/or reply_len properly [ 168.776926][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1533'. [ 168.932641][T11538] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.986285][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 169.031348][T11548] serio: Serial port ptm0 [ 169.040400][ T40] audit: type=1400 audit(1768129440.367:733): avc: denied { map } for pid=11546 comm="syz.6.1541" path="socket:[48980]" dev="sockfs" ino=48980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.118077][T11558] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1544'. [ 169.200426][T11573] slcan: can't register candev [ 169.202257][T11573] debugfs: 'ttynull' already exists in 'caif_serial' [ 169.236891][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1546'. [ 169.281748][ T40] audit: type=1400 audit(1768129440.607:734): avc: denied { mount } for pid=11586 comm="syz.6.1549" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.284442][T11589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.328415][ T5950] Bluetooth: hci2: unknown advertising packet type: 0x7f [ 169.328457][ T5950] Bluetooth: hci2: Dropping invalid advertising data [ 169.336624][ T5950] Bluetooth: hci2: unknown advertising packet type: 0xff [ 169.336650][ T5950] Bluetooth: hci2: Malformed LE Event: 0x02 [ 169.352124][ T40] audit: type=1400 audit(1768129440.677:735): avc: denied { unmount } for pid=9990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.432604][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 169.439310][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 169.786005][T11633] netlink: 'syz.0.1558': attribute type 153 has an invalid length. [ 169.796731][T11633] ata1.00: invalid multi_count 1 ignored [ 169.937178][T11652] loop2: detected capacity change from 0 to 1 [ 169.939742][T11652] ldm_validate_privheads(): Disk read failed. [ 169.941857][T11652] Dev loop2: unable to read RDB block 1 [ 169.944042][T11652] loop2: unable to read partition table [ 169.946024][T11652] loop2: partition table beyond EOD, truncated [ 169.948099][T11652] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 170.010905][T11659] netlink: 'syz.5.1568': attribute type 29 has an invalid length. [ 170.025228][T11667] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 170.061683][T11667] cgroup: noprefix used incorrectly [ 170.129120][T11685] bond2 (unregistering): Released all slaves [ 170.171461][T11687] xfrm0 speed is unknown, defaulting to 1000 [ 170.180961][T11683] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 170.180961][T11683] program syz.6.1571 not setting count and/or reply_len properly [ 170.300105][ T40] audit: type=1400 audit(1768129441.627:736): avc: denied { setattr } for pid=11700 comm="syz.0.1576" name="file1" dev="overlay" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.325364][ T40] audit: type=1400 audit(1768129441.657:737): avc: denied { mounton } for pid=11700 comm="syz.0.1576" path="/385/file0/file1" dev="overlay" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.509030][ T40] audit: type=1400 audit(1768129441.837:738): avc: denied { write } for pid=11710 comm="syz.0.1580" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.551360][T11716] netlink: 'syz.6.1581': attribute type 15 has an invalid length. [ 170.635501][T11722] netlink: 'syz.6.1585': attribute type 10 has an invalid length. [ 170.641509][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.647353][T11722] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 170.704295][ T40] audit: type=1400 audit(1768129442.037:739): avc: denied { execute } for pid=11724 comm="syz.6.1586" path="/proc/slabinfo" dev="proc" ino=4026532116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 170.705963][T11725] afs: Unknown parameter 'autoce' [ 170.878470][T11732] overlayfs: upper fs does not support file handles, falling back to index=off. [ 170.885441][ T40] audit: type=1326 audit(1768129442.217:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.6.1588" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f300158f7c9 code=0x0 [ 171.231193][T11709] overlayfs: statfs failed on './file0' [ 171.362720][T11745] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 171.376712][T11745] __nla_validate_parse: 5 callbacks suppressed [ 171.376723][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 171.382531][T11745] bond3 (unregistering): Released all slaves [ 171.453718][T11741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.459877][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 171.463090][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1591'. [ 171.467684][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.472127][T11741] bond3: (slave bond0): making interface the new active one [ 171.475573][T11741] bond3: (slave bond0): Enslaving as an active interface with an up link [ 171.479956][T11750] bridge0: port 3(syz_tun) entered blocking state [ 171.482537][T11750] bridge0: port 3(syz_tun) entered disabled state [ 171.484980][T11750] syz_tun: entered allmulticast mode [ 171.487566][T11750] syz_tun: entered promiscuous mode [ 171.490366][T11750] bridge0: port 3(syz_tun) entered blocking state [ 171.492740][T11750] bridge0: port 3(syz_tun) entered forwarding state [ 171.554946][T11755] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 171.554946][T11755] program syz.5.1597 not setting count and/or reply_len properly [ 171.638553][T11752] IPv6: Can't replace route, no match found [ 171.755581][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 171.811466][T11774] nftables ruleset with unbound chain [ 172.083489][ T142] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 172.234122][ T142] usb 11-1: Using ep0 maxpacket: 8 [ 172.236755][ T142] usb 11-1: too many configurations: 27, using maximum allowed: 8 [ 172.241369][ T142] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 172.245401][ T142] usb 11-1: can't read configurations, error -61 [ 172.258062][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 172.264141][T11792] bond0: entered promiscuous mode [ 172.265834][T11792] bond_slave_0: entered promiscuous mode [ 172.267803][T11792] bond_slave_1: entered promiscuous mode [ 172.270600][T11792] gretap0: entered promiscuous mode [ 172.273533][T11792] debugfs: 'hsr1' already exists in 'hsr' [ 172.275689][T11792] Cannot create hsr debugfs directory [ 172.277998][T11792] hsr1: entered promiscuous mode [ 172.374389][ T142] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 172.472526][T11800] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1609'. [ 172.484377][T11802] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 172.487475][T11802] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1610'. [ 172.490323][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 172.523467][ T142] usb 11-1: Using ep0 maxpacket: 8 [ 172.528006][T11802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1722710786 (220506980608 ns) > initial count (17639943808 ns). Using initial count to start timer. [ 172.530846][ T40] audit: type=1400 audit(1768129443.857:741): avc: denied { append } for pid=11803 comm="syz.5.1611" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.536655][ T142] usb 11-1: too many configurations: 27, using maximum allowed: 8 [ 172.550478][ T142] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 172.553830][ T142] usb 11-1: can't read configurations, error -61 [ 172.556638][ T142] usb usb11-port1: attempt power cycle [ 172.649019][T11811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=11811 comm=syz.5.1611 [ 172.654571][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 172.684046][T11804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.688334][T11804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.699777][T11804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.705512][T11804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.707547][T11804] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.718119][T11804] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.726909][ T40] audit: type=1400 audit(1768129444.057:742): avc: denied { firmware_load } for pid=11819 comm="syz.4.1615" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 172.756220][T11820] overlayfs: unescaped trailing colons in lowerdir mount option. [ 172.759505][T11821] overlayfs: unescaped trailing colons in lowerdir mount option. [ 172.763035][T11820] syz.4.1615 (11820) used greatest stack depth: 19232 bytes left [ 172.784684][T11824] overlayfs: failed to resolve './file0': -2 [ 172.805318][T11829] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1617'. [ 172.847741][T11835] binder_alloc: 11834: binder_alloc_buf, no vma [ 172.904463][ T142] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 172.924685][ T142] usb 11-1: Using ep0 maxpacket: 8 [ 172.927148][ T142] usb 11-1: too many configurations: 27, using maximum allowed: 8 [ 172.931540][ T142] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 172.938053][ T142] usb 11-1: can't read configurations, error -61 [ 173.020852][ T40] audit: type=1400 audit(1768129444.347:743): avc: denied { map } for pid=11850 comm="syz.0.1624" path="/proc/1165/net/pfkey" dev="proc" ino=4026532989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 173.073947][ T142] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 173.093897][ T142] usb 11-1: Using ep0 maxpacket: 8 [ 173.096073][ T142] usb 11-1: too many configurations: 27, using maximum allowed: 8 [ 173.099737][ T142] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 173.102391][ T142] usb 11-1: can't read configurations, error -61 [ 173.104894][ T142] usb usb11-port1: unable to enumerate USB device [ 173.318550][T11858] netlink: 'syz.0.1627': attribute type 30 has an invalid length. [ 173.329331][T11858] bond2: option arp_missed_max: invalid value (0) [ 173.331428][T11858] bond2: option arp_missed_max: allowed values 1 - 255 [ 173.337940][T11858] bond2 (unregistering): Released all slaves [ 173.809233][T11890] xfrm0 speed is unknown, defaulting to 1000 [ 173.855740][T11894] tmpfs: Bad value for 'mpol' [ 173.918023][ T40] audit: type=1400 audit(1768129445.247:744): avc: denied { ioctl } for pid=11900 comm="syz.5.1636" path="socket:[51544]" dev="sockfs" ino=51544 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.003603][ T40] audit: type=1804 audit(1768129445.337:745): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1640" name="/newroot/193/file0" dev="tmpfs" ino=1058 res=1 errno=0 [ 174.011261][T11912] ref_ctr increment failed for inode: 0x422 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803351bd40 [ 174.017251][T11911] uprobe: syz.5.1640:11911 failed to unregister, leaking uprobe [ 174.623496][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.753517][T11964] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 174.756385][ T40] audit: type=1400 audit(1768129446.087:746): avc: denied { connect } for pid=11962 comm="syz.5.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.773524][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.826099][T11968] xt_recent: Unsupported userspace flags (000000b2) [ 174.840929][T11970] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 174.880251][T11974] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 174.991194][T11986] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 174.993498][T11986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.996050][T11986] vhci_hcd vhci_hcd.0: Device attached [ 175.243528][ T839] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 175.262528][T11991] ata1.00: invalid multi_count 128 ignored [ 175.304997][T11991] ata1.00: invalid multi_count 128 ignored [ 175.364667][ T25] ata1.00: invalid multi_count 128 ignored [ 175.416222][ T25] ata1.00: invalid multi_count 128 ignored [ 175.456824][T11995] dummy0: entered allmulticast mode [ 175.484585][ T25] ata1.00: invalid multi_count 128 ignored [ 175.524766][ T35] ata1.00: invalid multi_count 128 ignored [ 175.584939][T11991] ata1.00: invalid multi_count 128 ignored [ 175.644799][T11991] ata1.00: invalid multi_count 128 ignored [ 175.705973][T11991] ata1.00: invalid multi_count 128 ignored [ 175.768461][ T25] ata1.00: invalid multi_count 128 ignored [ 175.811674][T11987] vhci_hcd: connection reset by peer [ 175.817603][ T46] vhci_hcd vhci_hcd.6: stop threads [ 175.819335][ T46] vhci_hcd vhci_hcd.6: release socket [ 175.833614][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 175.835569][T12017] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 175.837604][ T25] ata1.00: invalid multi_count 128 ignored [ 175.895495][ T25] ata1.00: invalid multi_count 128 ignored [ 175.980050][ T25] ata1.00: invalid multi_count 128 ignored [ 176.034390][ T25] ata1.00: invalid multi_count 128 ignored [ 176.113635][T11991] ata1.00: invalid multi_count 128 ignored [ 176.188292][ T25] ata1.00: invalid multi_count 128 ignored [ 176.254958][ T25] ata1.00: invalid multi_count 128 ignored [ 176.295515][ T25] ata1.00: invalid multi_count 128 ignored [ 176.337624][ T25] ata1.00: invalid multi_count 128 ignored [ 176.400173][ T25] ata1.00: invalid multi_count 128 ignored [ 176.455116][ T25] ata1.00: invalid multi_count 128 ignored [ 176.496051][ T25] ata1.00: invalid multi_count 128 ignored [ 176.544709][ T25] ata1.00: invalid multi_count 128 ignored [ 176.544714][ T40] audit: type=1400 audit(1768129447.877:747): avc: denied { setattr } for pid=12068 comm="syz.6.1677" name="NETLINK" dev="sockfs" ino=50709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.545661][T12070] netlink: 'syz.6.1677': attribute type 23 has an invalid length. [ 176.592642][ T40] audit: type=1400 audit(1768129447.917:748): avc: denied { prog_load } for pid=12073 comm="syz.6.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.604758][ T25] ata1.00: invalid multi_count 128 ignored [ 176.608977][ T40] audit: type=1400 audit(1768129447.917:749): avc: denied { bpf } for pid=12073 comm="syz.6.1679" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.611073][T12074] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.618466][T12074] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.628523][ T40] audit: type=1400 audit(1768129447.917:750): avc: denied { perfmon } for pid=12073 comm="syz.6.1679" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.635988][ T40] audit: type=1400 audit(1768129447.927:751): avc: denied { prog_run } for pid=12073 comm="syz.6.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.642862][ T40] audit: type=1400 audit(1768129447.947:752): avc: denied { create } for pid=12071 comm="syz.5.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.645852][ T25] ata1.00: invalid multi_count 128 ignored [ 176.649318][ T40] audit: type=1400 audit(1768129447.947:753): avc: denied { ioctl } for pid=12071 comm="syz.5.1678" path="socket:[51883]" dev="sockfs" ino=51883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.659749][ T40] audit: type=1400 audit(1768129447.947:754): avc: denied { write } for pid=12071 comm="syz.5.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.666099][ T40] audit: type=1400 audit(1768129447.957:755): avc: denied { read } for pid=12071 comm="syz.5.1678" dev="nsfs" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.673553][ T40] audit: type=1400 audit(1768129447.957:756): avc: denied { open } for pid=12071 comm="syz.5.1678" path="net:[4026533789]" dev="nsfs" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.703552][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.725030][ T25] ata1.00: invalid multi_count 128 ignored [ 176.764911][ T25] ata1.00: invalid multi_count 128 ignored [ 176.771909][ T5950] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 176.814446][ T25] ata1.00: invalid multi_count 128 ignored [ 176.853493][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.854671][ T25] ata1.00: invalid multi_count 128 ignored [ 176.891040][T12086] vivid-000: ================= START STATUS ================= [ 176.895012][T12086] vivid-000: Test Pattern: 75% Colorbar [ 176.897541][T12086] vivid-000: Fill Percentage of Frame: 100 [ 176.899433][T12086] vivid-000: Horizontal Movement: Move Right [ 176.901314][T12086] vivid-000: Vertical Movement: No Movement [ 176.903151][T12086] vivid-000: OSD Text Mode: All [ 176.904536][ T35] ata1.00: invalid multi_count 128 ignored [ 176.905975][T12086] vivid-000: Show Border: true [ 176.908812][T12086] vivid-000: Show Square: false [ 176.910863][T12086] vivid-000: Sensor Flipped Horizontally: false [ 176.913979][T12086] vivid-000: Sensor Flipped Vertically: false [ 176.916632][T12086] vivid-000: Insert SAV Code in Image: false [ 176.919180][T12086] vivid-000: Insert EAV Code in Image: true [ 176.921198][T12086] vivid-000: Insert Video Guard Band: false [ 176.923094][T12086] vivid-000: Reduced Framerate: false [ 176.924844][T12086] vivid-000: HDMI 000-0 Is Connected To: None [ 176.926770][T12086] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 176.929306][T12086] vivid-000: Enable Capture Cropping: true grabbed [ 176.931939][T12086] vivid-000: Enable Capture Composing: true grabbed [ 176.934934][T12086] vivid-000: Enable Capture Scaler: true grabbed [ 176.937621][T12086] vivid-000: Timestamp Source: End of Frame [ 176.940292][T12086] vivid-000: Colorspace: sRGB [ 176.942936][T12086] vivid-000: Transfer Function: sRGB [ 176.945241][T12086] vivid-000: Y'CbCr Encoding: Default [ 176.946990][ T25] ata1.00: invalid multi_count 128 ignored [ 176.947178][T12086] vivid-000: HSV Encoding: Hue 0-179 [ 176.953570][T12086] vivid-000: Quantization: Default [ 176.955778][T12086] vivid-000: Apply Alpha To Red Only: false [ 176.958298][T12086] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 176.961025][T12086] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 176.963698][T12086] vivid-000: DV Timings: 640x480p59 inactive [ 176.965600][T12086] vivid-000: DV Timings Aspect Ratio: 16x9 [ 176.967451][T12086] vivid-000: Maximum EDID Blocks: 2 [ 176.969096][T12086] vivid-000: Limited RGB Range (16-235): false [ 176.971100][T12086] vivid-000: Rx RGB Quantization Range: Automatic [ 176.974054][T12086] vivid-000: Power Present: 0x00000000 [ 176.976307][T12086] tpg source WxH: 320x180 (R'G'B) [ 176.978426][T12086] tpg field: 1 [ 176.979972][T12086] tpg crop: (0,0)/320x180 [ 176.981821][T12086] tpg compose: (0,0)/320x180 [ 176.983783][T12086] tpg colorspace: 12 [ 176.985132][T12086] tpg transfer function: 1/1 [ 176.986671][T12086] tpg quantization: 0/1 [ 176.988340][T12086] tpg RGB range: 0/2 [ 176.989681][T12096] fuse: Unknown parameter '' [ 176.989734][T12086] vivid-000: ================== END STATUS ================== [ 177.004528][ T25] ata1.00: invalid multi_count 128 ignored [ 177.046044][ T25] ata1.00: invalid multi_count 128 ignored [ 177.064532][T12097] 9pnet_fd: p9_fd_create_tcp (12097): problem binding to privport [ 177.084874][ T25] ata1.00: invalid multi_count 128 ignored [ 177.655981][T12098] process 'memfd:-BN4EyѧS:)' started with executable stack [ 177.968889][T12108] __nla_validate_parse: 11 callbacks suppressed [ 177.968901][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1691'. [ 177.993486][ T918] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 177.998831][T12108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1691'. [ 178.003129][T12108] 9p: Bad value for 'afid' [ 178.005188][T12108] overlayfs: missing 'workdir' [ 178.143409][ T918] usb 11-1: Using ep0 maxpacket: 8 [ 178.146875][ T918] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 178.149541][ T918] usb 11-1: config 0 has no interface number 0 [ 178.151541][ T918] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.155520][ T918] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 178.159219][ T918] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.162646][ T918] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.168548][ T918] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 178.171437][ T918] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.174083][ T918] usb 11-1: Product: syz [ 178.175439][ T918] usb 11-1: Manufacturer: syz [ 178.177162][ T918] usb 11-1: SerialNumber: syz [ 178.181111][ T918] usb 11-1: config 0 descriptor?? [ 178.385585][ T918] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 178.592924][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1689'. [ 178.696905][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1689'. [ 178.783573][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.799749][ T918] usb 11-1: USB disconnect, device number 11 [ 178.838202][T12113] netlink: 'syz.6.1692': attribute type 1 has an invalid length. [ 178.841474][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1692'. [ 178.910108][T12119] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 178.912758][T12119] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1695'. [ 178.940127][T12122] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 178.944289][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.991640][T12126] overlay: ./bus is not a directory [ 178.994065][T12126] overlay: ./bus is not a directory [ 178.996170][T12126] overlay: ./bus is not a directory [ 178.998259][T12126] overlay: ./bus is not a directory [ 179.000392][T12126] overlay: ./bus is not a directory [ 179.002499][T12126] overlay: ./bus is not a directory [ 179.005116][T12126] overlay: ./bus is not a directory [ 179.007499][T12126] overlay: ./bus is not a directory [ 179.009987][T12126] overlay: ./bus is not a directory [ 179.012820][T12126] overlay: ./bus is not a directory [ 179.022082][T12126] overlay: ./bus is not a directory [ 179.028153][T12126] overlay: ./bus is not a directory [ 179.030384][T12126] overlay: ./bus is not a directory [ 179.032510][T12126] overlay: ./bus is not a directory [ 179.034862][T12126] overlay: ./bus is not a directory [ 179.036972][T12126] overlay: ./bus is not a directory [ 179.039410][T12126] overlay: ./bus is not a directory [ 179.041443][T12126] overlay: ./bus is not a directory [ 179.043527][T12126] overlay: ./bus is not a directory [ 179.045703][T12126] overlay: ./bus is not a directory [ 179.047742][T12126] overlay: ./bus is not a directory [ 179.049771][T12126] overlay: ./bus is not a directory [ 179.051909][T12126] overlay: ./bus is not a directory [ 179.054360][T12126] overlay: ./bus is not a directory [ 179.058380][T12126] overlay: ./bus is not a directory [ 179.064100][T12126] overlay: ./bus is not a directory [ 179.071451][T12126] overlay: ./bus is not a directory [ 179.075723][T12126] overlay: ./bus is not a directory [ 179.083938][ T5997] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 179.088287][T12126] overlay: ./bus is not a directory [ 179.091480][T12126] overlay: ./bus is not a directory [ 179.096226][T12126] overlay: ./bus is not a directory [ 179.099293][T12126] overlay: ./bus is not a directory [ 179.101324][T12126] overlay: ./bus is not a directory [ 179.106210][T12126] overlay: ./bus is not a directory [ 179.108381][T12126] overlay: ./bus is not a directory [ 179.110503][T12126] overlay: ./bus is not a directory [ 179.112658][T12126] overlay: ./bus is not a directory [ 179.116382][T12126] overlay: ./bus is not a directory [ 179.118541][T12126] overlay: ./bus is not a directory [ 179.122303][T12126] overlay: ./bus is not a directory [ 179.131760][T12126] overlay: ./bus is not a directory [ 179.136740][T12126] overlay: ./bus is not a directory [ 179.141284][T12126] overlay: ./bus is not a directory [ 179.153640][T12126] overlay: ./bus is not a directory [ 179.155976][T12126] overlay: ./bus is not a directory [ 179.158047][T12126] overlay: ./bus is not a directory [ 179.160276][T12126] overlay: ./bus is not a directory [ 179.163134][T12136] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 179.168460][T12126] overlay: ./bus is not a directory [ 179.174885][T12126] overlay: ./bus is not a directory [ 179.182644][T12126] overlay: ./bus is not a directory [ 179.195818][T12126] overlay: ./bus is not a directory [ 179.200733][T12126] overlay: ./bus is not a directory [ 179.205820][T12126] overlay: ./bus is not a directory [ 179.208608][T12126] overlay: ./bus is not a directory [ 179.211456][T12126] overlay: ./bus is not a directory [ 179.215936][T12126] overlay: ./bus is not a directory [ 179.218860][T12126] overlay: ./bus is not a directory [ 179.220946][T12126] overlay: ./bus is not a directory [ 179.224793][T12126] overlay: ./bus is not a directory [ 179.226992][T12126] overlay: ./bus is not a directory [ 179.229006][T12126] overlay: ./bus is not a directory [ 179.231139][T12126] overlay: ./bus is not a directory [ 179.236807][T12126] overlay: ./bus is not a directory [ 179.243208][T12126] overlay: ./bus is not a directory [ 179.292116][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1703'. [ 180.373614][ T839] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 193.124673][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 193.124684][ T40] audit: type=1400 audit(1768129464.457:871): avc: denied { setopt } for pid=12176 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.127420][T12182] binder: 12178:12182 ioctl c02064b2 200000000000 returned -22 [ 193.133306][ T40] audit: type=1400 audit(1768129464.457:872): avc: denied { bind } for pid=12176 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.142681][ T40] audit: type=1400 audit(1768129464.457:873): avc: denied { append } for pid=12178 comm="syz.6.1709" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 193.146857][T12181] FAULT_FLAG_ALLOW_RETRY missing 801 [ 193.150653][ T40] audit: type=1400 audit(1768129464.457:874): avc: denied { set_context_mgr } for pid=12178 comm="syz.6.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 193.152598][T12181] CPU: 2 UID: 0 PID: 12181 Comm: syz.0.1706 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.152625][T12181] Tainted: [L]=SOFTLOCKUP [ 193.152631][T12181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.152646][T12181] Call Trace: [ 193.152653][T12181] [ 193.152659][T12181] dump_stack_lvl+0x16c/0x1f0 [ 193.152714][T12181] handle_userfault+0x1433/0x24b0 [ 193.152753][T12181] ? do_raw_spin_unlock+0x172/0x230 [ 193.152779][T12181] ? _raw_spin_unlock+0x28/0x50 [ 193.152800][T12181] ? __free_frozen_pages+0x817/0x1170 [ 193.152827][T12181] ? __pfx_handle_userfault+0x10/0x10 [ 193.152865][T12181] ? rcu_read_unlock+0x2d/0xb0 [ 193.152886][T12181] do_anonymous_page+0x174e/0x2190 [ 193.152921][T12181] __handle_mm_fault+0x1ecf/0x2bb0 [ 193.152955][T12181] ? __pfx___handle_mm_fault+0x10/0x10 [ 193.152983][T12181] ? __pte_offset_map_lock+0x174/0x310 [ 193.153005][T12181] ? find_held_lock+0x2b/0x80 [ 193.153038][T12181] ? follow_page_pte+0x5cf/0x1390 [ 193.153066][T12181] handle_mm_fault+0x3fe/0xad0 [ 193.153098][T12181] __get_user_pages+0x54e/0x3590 [ 193.153129][T12181] ? __pfx___get_user_pages+0x10/0x10 [ 193.153159][T12181] populate_vma_page_range+0x267/0x3f0 [ 193.153186][T12181] ? __pfx_populate_vma_page_range+0x10/0x10 [ 193.153214][T12181] ? vma_set_page_prot+0xb1/0x120 [ 193.153237][T12181] mprotect_fixup+0x8c3/0xb80 [ 193.153267][T12181] ? __pfx_mprotect_fixup+0x10/0x10 [ 193.153303][T12181] do_mprotect_pkey+0x9bc/0xd40 [ 193.153350][T12181] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 193.153397][T12181] ? xfd_validate_state+0x61/0x180 [ 193.153414][T12181] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 193.153444][T12181] __x64_sys_mprotect+0x78/0xc0 [ 193.153468][T12181] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.153488][T12181] do_syscall_64+0xcd/0xf80 [ 193.153513][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.153531][T12181] RIP: 0033:0x7f02e838f7c9 [ 193.153545][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.153562][T12181] RSP: 002b:00007f02e92a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 193.153579][T12181] RAX: ffffffffffffffda RBX: 00007f02e85e5fa0 RCX: 00007f02e838f7c9 [ 193.153590][T12181] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 193.153599][T12181] RBP: 00007f02e8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.153623][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.153634][T12181] R13: 00007f02e85e6038 R14: 00007f02e85e5fa0 R15: 00007fff4af61148 [ 193.153665][T12181] [ 193.236558][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1710'. [ 193.237183][ T40] audit: type=1400 audit(1768129464.477:875): avc: denied { execmem } for pid=12180 comm="syz.0.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 193.243191][T12198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12198 comm=syz.6.1710 [ 193.265918][ T40] audit: type=1400 audit(1768129464.547:876): avc: denied { map_read map_write } for pid=12193 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.277065][T12198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=12198 comm=syz.6.1710 [ 193.283987][ T40] audit: type=1400 audit(1768129464.617:877): avc: denied { sys_module } for pid=12176 comm="syz.4.1708" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.318040][ T40] audit: type=1400 audit(1768129464.647:878): avc: denied { read } for pid=12202 comm="syz.0.1712" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.327548][ T40] audit: type=1400 audit(1768129464.657:879): avc: denied { open } for pid=12202 comm="syz.0.1712" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.535884][T12217] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 193.535884][T12217] program syz.0.1718 not setting count and/or reply_len properly [ 193.565999][T12220] tmpfs: Invalid gid '0x00000000ffffffff' [ 193.566010][T12219] tmpfs: Invalid gid '0x00000000ffffffff' [ 193.755591][T12245] block nbd1: shutting down sockets [ 193.807349][T12256] xfrm0 speed is unknown, defaulting to 1000 [ 193.927209][T12263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.929129][T12263] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 193.961191][T12263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.968386][T12263] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 194.083553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.089354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.092266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.123320][T12299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1740'. [ 194.134727][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1740'. [ 194.156004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.195388][T12309] overlay: filesystem on ./bus not supported [ 194.588821][ T839] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 194.595269][T12337] binder: BINDER_SET_CONTEXT_MGR already set [ 194.597892][T12337] binder: 12335:12337 ioctl 4018620d 2000000000c0 returned -16 [ 194.602325][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.605652][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.610733][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.614443][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.618017][T12337] binder: 12335:12337 ioctl 9208 8 returned -22 [ 194.735009][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.738946][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.742273][ T839] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 194.745551][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.751920][ T839] usb 5-1: config 0 descriptor?? [ 194.843564][ T54] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 194.956818][ T839] usbhid 5-1:0.0: can't add hid device: -71 [ 194.961465][ T839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.968877][ T839] usb 5-1: USB disconnect, device number 30 [ 194.973445][ T54] usb 11-1: device descriptor read/64, error -71 [ 195.223465][ T54] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 195.363405][ T54] usb 11-1: device descriptor read/64, error -71 [ 195.473786][ T54] usb usb11-port1: attempt power cycle [ 195.604470][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1752'. [ 195.833418][ T54] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 195.853884][ T54] usb 11-1: device descriptor read/8, error -71 [ 196.123494][ T54] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 196.143844][ T54] usb 11-1: device descriptor read/8, error -71 [ 196.254255][ T54] usb usb11-port1: unable to enumerate USB device [ 196.347876][T12350] binder: 12349:12350 ioctl 5000940b 200000000680 returned -22 [ 196.351337][T12350] binder: 12349:12350 ioctl c0306201 200000000640 returned -22 [ 196.518789][T12357] syzkaller0: entered promiscuous mode [ 196.520713][T12357] syzkaller0: entered allmulticast mode [ 197.587130][T12363] netlink: 'syz.5.1759': attribute type 12 has an invalid length. [ 197.762632][T12378] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1764'. [ 197.765562][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1764'. [ 197.768860][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 197.835010][T12385] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 197.838145][T12386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 197.840530][T12385] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 197.840978][T12386] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.334267][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pid=12411 comm=syz.0.1775 [ 198.353432][ T6041] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 198.376358][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 198.376373][ T40] audit: type=1400 audit(1768129469.707:959): avc: denied { nlmsg_write } for pid=12416 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.401531][ T40] audit: type=1400 audit(1768129469.727:960): avc: denied { write } for pid=12418 comm="syz.0.1777" name="file0" dev="tmpfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.409154][T12421] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 198.411985][ T40] audit: type=1400 audit(1768129469.727:961): avc: denied { open } for pid=12418 comm="syz.0.1777" path="/439/file0" dev="tmpfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.420881][ T40] audit: type=1400 audit(1768129469.737:962): avc: denied { relabelto } for pid=12419 comm="syz.6.1778" name="142" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 198.430862][ T40] audit: type=1400 audit(1768129469.737:963): avc: denied { associate } for pid=12419 comm="syz.6.1778" name="142" dev="tmpfs" ino=781 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 198.443090][ T40] audit: type=1400 audit(1768129469.737:964): avc: denied { ioctl } for pid=12419 comm="syz.6.1778" path="socket:[52762]" dev="sockfs" ino=52762 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.453060][ T40] audit: type=1400 audit(1768129469.747:965): avc: denied { remove_name } for pid=9990 comm="syz-executor" name="binderfs" dev="tmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 198.463909][ T40] audit: type=1400 audit(1768129469.747:966): avc: denied { rmdir } for pid=9990 comm="syz-executor" name="142" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 198.471480][T12427] sctp: [Deprecated]: syz.0.1781 (pid 12427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.471480][T12427] Use struct sctp_sack_info instead [ 198.477489][ T40] audit: type=1400 audit(1768129469.797:967): avc: denied { write } for pid=12426 comm="syz.0.1781" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 198.486148][T12429] netlink: 'syz.6.1782': attribute type 1 has an invalid length. [ 198.515682][ T6041] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.519146][ T6041] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 198.519830][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1783'. [ 198.529444][ T6041] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 198.532331][ T6041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.535256][T12429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.537022][ T6041] usb 10-1: config 0 descriptor?? [ 198.539571][T12405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 198.542825][T12429] bond1: (slave bond2): making interface the new active one [ 198.547656][T12429] bond1: (slave bond2): Enslaving as an active interface with an up link [ 198.556770][ T40] audit: type=1400 audit(1768129469.887:968): avc: denied { connect } for pid=12432 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.564098][T12429] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 198.569512][T12429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1782'. [ 198.573971][T12429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.589104][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 198.598015][T12435] netlink: 'syz.0.1784': attribute type 39 has an invalid length. [ 198.601942][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 198.743962][ T6041] usbhid 10-1:0.0: can't add hid device: -71 [ 198.745934][ T6041] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 198.751646][ T6041] usb 10-1: USB disconnect, device number 3 [ 198.774240][T12450] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 198.867629][T12456] futex_wake_op: syz.6.1790 tries to shift op by 32; fix this program [ 199.110406][T12468] ip6t_rpfilter: unknown options [ 199.169068][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'. [ 199.500499][T12488] IPVS: ip_vs_edit_dest(): server weight less than zero [ 199.643109][T12495] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 199.660472][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1804'. [ 199.669285][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1804'. [ 199.739862][T12505] netlink: 'syz.6.1806': attribute type 1 has an invalid length. [ 199.756327][T12505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.967711][T12516] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1808'. [ 199.973537][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 199.976854][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 200.016033][T12518] program syz.6.1809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.220684][T12524] bond4: option downdelay: invalid value (18446744073709551615) [ 200.224792][T12524] bond4: option downdelay: allowed values 0 - 2147483647 [ 200.235484][T12524] bond4 (unregistering): Released all slaves [ 200.402351][T12532] binder: Unknown parameter 'usrquota_block_hardlimit' [ 200.476707][T10047] Bluetooth: hci1: Frame reassembly failed (-84) [ 200.681262][T12556] overlayfs: overlapping lowerdir path [ 200.710860][T12558] 9pnet_virtio: no channels available for device 127.0.0.1 [ 201.375743][T12583] cgroup: Need name or subsystem set [ 201.538904][T12591] netlink: 'syz.6.1832': attribute type 142 has an invalid length. [ 202.543562][ T5950] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 202.543572][ T5944] Bluetooth: hci1: command 0x1003 tx timeout [ 202.657387][T12630] ata1.00: invalid multi_count 128 ignored [ 202.665623][T12636] netlink: 'syz.5.1844': attribute type 83 has an invalid length. [ 202.717883][ T61] Bluetooth: hci1: Frame reassembly failed (-84) [ 202.718801][T12630] ata1.00: invalid multi_count 128 ignored [ 202.763842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 202.779007][T12630] ata1.00: invalid multi_count 128 ignored [ 202.854573][ T25] ata1.00: invalid multi_count 128 ignored [ 202.894596][ T25] ata1.00: invalid multi_count 128 ignored [ 202.937568][ T25] ata1.00: invalid multi_count 128 ignored [ 202.974623][ T25] ata1.00: invalid multi_count 128 ignored [ 203.014881][ T25] ata1.00: invalid multi_count 128 ignored [ 203.076363][ T35] ata1.00: invalid multi_count 128 ignored [ 203.109393][T12673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.135009][ T25] ata1.00: invalid multi_count 128 ignored [ 203.194379][ T25] ata1.00: invalid multi_count 128 ignored [ 203.264302][ T25] ata1.00: invalid multi_count 128 ignored [ 203.314384][ T25] ata1.00: invalid multi_count 128 ignored [ 203.364346][ T25] ata1.00: invalid multi_count 128 ignored [ 203.411592][ T25] ata1.00: invalid multi_count 128 ignored [ 203.454737][ T25] ata1.00: invalid multi_count 128 ignored [ 203.494722][ T25] ata1.00: invalid multi_count 128 ignored [ 203.544447][ T25] ata1.00: invalid multi_count 128 ignored [ 203.604868][ T25] ata1.00: invalid multi_count 128 ignored [ 203.656470][ T25] ata1.00: invalid multi_count 128 ignored [ 203.718177][ T25] ata1.00: invalid multi_count 128 ignored [ 203.788031][T12691] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 203.828190][T12694] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 203.830981][T12694] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 203.834032][T12694] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 203.836581][T12694] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 203.854720][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 203.854733][ T40] audit: type=1400 audit(1768129475.187:1022): avc: denied { lock } for pid=12685 comm="syz.0.1860" path="socket:[54053]" dev="sockfs" ino=54053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.899652][ T40] audit: type=1400 audit(1768129475.227:1023): avc: denied { connect } for pid=12685 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.902880][T12700] netlink: 'syz.5.1864': attribute type 1 has an invalid length. [ 203.915301][T12700] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 204.051258][ T40] audit: type=1400 audit(1768129475.377:1024): avc: denied { append } for pid=12708 comm="syz.5.1866" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.103960][ T40] audit: type=1400 audit(1768129475.437:1025): avc: denied { map } for pid=12705 comm="syz.0.1865" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.180780][T12713] trusted_key: encrypted_key: keylen parameter is missing [ 204.220473][T12715] __nla_validate_parse: 5 callbacks suppressed [ 204.220485][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1868'. [ 204.259546][T12718] xfrm0 speed is unknown, defaulting to 1000 [ 204.375844][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1869'. [ 204.512298][ T40] audit: type=1400 audit(1768129475.837:1026): avc: denied { read write } for pid=12726 comm="syz.0.1872" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 204.521412][ T40] audit: type=1400 audit(1768129475.847:1027): avc: denied { open } for pid=12726 comm="syz.0.1872" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 204.551157][ T40] audit: type=1400 audit(1768129475.877:1028): avc: denied { setopt } for pid=12728 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.557393][ T40] audit: type=1400 audit(1768129475.877:1029): avc: denied { getopt } for pid=12728 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.621112][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.624667][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.773543][ T5950] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 204.804761][T12739] ISOFS: Unable to identify CD-ROM format. [ 204.877731][T12747] overlay: filesystem on ./bus not supported as upperdir [ 204.890425][ T40] audit: type=1400 audit(1768129476.217:1030): avc: denied { bind } for pid=12750 comm="syz.5.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.893172][T12751] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1877'. [ 204.900308][ T40] audit: type=1400 audit(1768129476.217:1031): avc: denied { name_bind } for pid=12750 comm="syz.5.1877" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 204.955790][T12757] overlayfs: failed to resolve './file2': -2 [ 204.958506][T12757] 9pnet_fd: p9_fd_create_tcp (12757): problem connecting socket to 127.0.0.1 [ 204.962575][T12757] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 205.130544][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.189465][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.196158][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 205.216122][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.219416][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.222342][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.226314][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.229054][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.237142][T12773] openvswitch: netlink: Duplicate key (type 1). [ 205.241977][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.246943][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.249338][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.252858][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.255863][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.280775][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.299370][T12770] xfrm0 speed is unknown, defaulting to 1000 [ 205.381458][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.390926][T12770] chnl_net:caif_netlink_parms(): no params data found [ 205.489558][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.492068][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.494835][T12770] bridge_slave_0: entered allmulticast mode [ 205.497632][T12770] bridge_slave_0: entered promiscuous mode [ 205.512518][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.514993][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.517456][T12770] bridge_slave_1: entered allmulticast mode [ 205.520262][T12770] bridge_slave_1: entered promiscuous mode [ 205.540386][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.555282][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.583960][ T61] ]2: left allmulticast mode [ 205.585715][ T61] ]2: left promiscuous mode [ 205.588517][ T61] bridge0: port 2(]2) entered disabled state [ 205.595495][ T61] bridge_slave_0: left allmulticast mode [ 205.597363][ T61] bridge_slave_0: left promiscuous mode [ 205.599328][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.613504][ T839] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 205.773522][ T839] usb 11-1: Using ep0 maxpacket: 8 [ 205.776597][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 205.778803][ T839] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 205.781760][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.786834][ T839] usb 11-1: config 0 descriptor?? [ 205.828737][ T61] dvmrp17 (unregistering): left allmulticast mode [ 206.193675][ T839] hid_parser_main: 22 callbacks suppressed [ 206.193688][ T839] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 206.197760][ T839] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 206.200037][ T839] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 206.202295][ T839] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 206.204857][ T839] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 206.207463][ T839] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 206.241461][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.245226][ T61] bond_slave_0: left allmulticast mode [ 206.247746][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.250720][ T61] bond_slave_1: left allmulticast mode [ 206.253248][ T61] bond0 (unregistering): (slave ): Releasing backup interface [ 206.256263][ T61] mac80211_hwsim hwsim5 : left allmulticast mode [ 206.258818][ T61] bond0 (unregistering): Released all slaves [ 206.263147][ T61] bond1 (unregistering): Released all slaves [ 206.271965][T12770] team0: Port device team_slave_0 added [ 206.280740][T12770] team0: Port device team_slave_1 added [ 206.316832][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.318991][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.327842][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.336225][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.339126][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.355146][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.384633][ T61] IPVS: stopping backup sync thread 12495 ... [ 206.396375][ T5997] usb 11-1: USB disconnect, device number 16 [ 206.413151][T12770] hsr_slave_0: entered promiscuous mode [ 206.416465][T12770] hsr_slave_1: entered promiscuous mode [ 206.419030][T12770] debugfs: 'hsr0' already exists in 'hsr' [ 206.421261][T12770] Cannot create hsr debugfs directory [ 206.550050][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.553187][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.565207][ T61] pim6reg9 (unregistering): left allmulticast mode [ 206.790592][ T61] team0 (unregistering): Port device team_slave_1 removed [ 206.813504][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 206.814138][ T61] team0 (unregistering): Port device team_slave_0 removed [ 207.013931][ T24] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 207.017846][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.021254][ T24] usb 10-1: Product: syz [ 207.023101][ T24] usb 10-1: Manufacturer: syz [ 207.034900][ T24] usb 10-1: SerialNumber: syz [ 207.039151][ T24] usb 10-1: config 0 descriptor?? [ 207.171885][T12770] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.179015][T12770] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.192644][T12770] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.197939][T12770] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.255437][ T5997] usb 10-1: USB disconnect, device number 4 [ 207.255716][T12770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.273582][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.280168][ T656] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.283243][ T656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.299707][ T656] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.302005][ T656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.333687][ T5944] Bluetooth: hci0: command tx timeout [ 207.460805][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.507156][ T61] IPVS: stop unused estimator thread 0... [ 207.613217][T12770] veth0_vlan: entered promiscuous mode [ 207.620327][T12770] veth1_vlan: entered promiscuous mode [ 207.637051][T12770] veth0_macvtap: entered promiscuous mode [ 207.640923][T12770] veth1_macvtap: entered promiscuous mode [ 207.650838][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.656943][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.662696][ T1081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.668941][ T1081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.679012][ T1081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.681736][T12863] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1899'. [ 207.681809][ T1081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.749919][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.752394][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.776553][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.779835][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.964862][T12885] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1904'. [ 208.019386][T12890] support for the xor transformation has been removed. [ 208.020147][T12881] kvm: kvm [12880]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 208.031593][T12881] kvm: kvm [12880]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 208.055363][T12881] kvm: kvm [12880]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 208.077662][T12881] kvm: kvm [12880]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 208.081001][T12881] kvm: kvm [12880]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 208.374905][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 208.378940][T12917] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 208.389652][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1915'. [ 208.389654][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1915'. [ 208.485329][T12925] netlink: 'syz.7.1917': attribute type 1 has an invalid length. [ 208.574333][T12931] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1920'. [ 208.712470][T12938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.883888][T12956] program syz.7.1927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.976008][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 208.976023][ T40] audit: type=1400 audit(1768129480.297:1053): avc: denied { mounton } for pid=12961 comm="syz.7.1928" path="/8/file0" dev="9p" ino=73662537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.985870][T12962] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 208.987180][ T40] audit: type=1400 audit(1768129480.297:1054): avc: denied { getattr } for pid=12961 comm="syz.7.1928" name="/" dev="9p" ino=73662537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 209.005398][ T40] audit: type=1400 audit(1768129480.317:1055): avc: denied { map } for pid=12963 comm="syz.5.1929" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.016468][ T40] audit: type=1400 audit(1768129480.317:1056): avc: denied { call } for pid=12963 comm="syz.5.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 209.032093][ T40] audit: type=1400 audit(1768129480.347:1057): avc: denied { map } for pid=12965 comm="syz.6.1930" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.040114][ T40] audit: type=1400 audit(1768129480.347:1058): avc: denied { execute } for pid=12965 comm="syz.6.1930" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.082727][ T40] audit: type=1400 audit(1768129480.407:1059): avc: denied { name_bind } for pid=12974 comm="syz.6.1933" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 209.108133][T12973] loop2: detected capacity change from 0 to 7 [ 209.110839][T12973] Dev loop2: unable to read RDB block 7 [ 209.112927][T12973] loop2: unable to read partition table [ 209.115622][T12973] loop2: partition table beyond EOD, truncated [ 209.118266][T12973] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 209.226210][T12988] erspan0: entered promiscuous mode [ 209.271015][T12995] 9p: Bad value for 'rfdno' [ 209.271151][ T40] audit: type=1400 audit(1768129480.597:1060): avc: denied { create } for pid=12994 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.300841][ T40] audit: type=1400 audit(1768129480.597:1061): avc: denied { ioctl } for pid=12994 comm="syz.7.1939" path="socket:[57786]" dev="sockfs" ino=57786 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.321261][ T40] audit: type=1400 audit(1768129480.607:1062): avc: denied { connect } for pid=12994 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.334055][T12995] pim6reg1: entered promiscuous mode [ 209.335781][T12995] pim6reg1: entered allmulticast mode [ 209.366887][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.371845][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.382223][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.389189][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.392719][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.405510][T13011] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 209.413573][ T5950] Bluetooth: hci0: command tx timeout [ 209.504898][ T9373] bridge0: port 3(syz_tun) entered disabled state [ 209.524881][ T9373] syz_tun (unregistering): left allmulticast mode [ 209.529355][ T9373] syz_tun (unregistering): left promiscuous mode [ 209.531498][ T9373] bridge0: port 3(syz_tun) entered disabled state [ 209.590253][T13027] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 209.604250][T13027] CUSE: unknown device info "&b%ZW)3\my " [ 209.606479][T13027] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 209.606541][T13017] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 209.610750][T13027] CUSE: DEVNAME unspecified [ 209.680399][T13004] chnl_net:caif_netlink_parms(): no params data found [ 209.716996][ T1081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.782074][T13004] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.787672][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.790209][T13004] bridge_slave_0: entered allmulticast mode [ 209.792965][T13004] bridge_slave_0: entered promiscuous mode [ 209.796658][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.799010][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.801395][T13004] bridge_slave_1: entered allmulticast mode [ 209.806247][T13004] bridge_slave_1: entered promiscuous mode [ 209.821247][ T1081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.846000][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.855545][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.874319][T13004] team0: Port device team_slave_0 added [ 209.877457][T13004] team0: Port device team_slave_1 added [ 209.891618][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.893986][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.902147][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.906541][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.908740][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.918876][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.939185][ T1081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.960486][T13004] hsr_slave_0: entered promiscuous mode [ 209.963036][T13004] hsr_slave_1: entered promiscuous mode [ 209.973744][T13004] debugfs: 'hsr0' already exists in 'hsr' [ 209.975542][T13004] Cannot create hsr debugfs directory [ 210.036151][ T1081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.268737][ T1081] bridge_slave_1: left allmulticast mode [ 210.270967][ T1081] bridge_slave_1: left promiscuous mode [ 210.273673][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.280947][ T1081] bridge_slave_0: left allmulticast mode [ 210.282750][ T1081] bridge_slave_0: left promiscuous mode [ 210.286099][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.325019][T13055] openvswitch: netlink: IP tunnel dst address not specified [ 210.503406][ T1081] gretap0 (unregistering): left promiscuous mode [ 210.701779][ T1081] bond0 (unregistering): left promiscuous mode [ 210.704379][ T1081] bond_slave_0: left promiscuous mode [ 210.706325][ T1081] bond_slave_1: left promiscuous mode [ 210.711450][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.716234][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.720459][ T1081] bond0 (unregistering): Released all slaves [ 210.793279][ T1081] bond1 (unregistering): Released all slaves [ 210.888684][ T1081] bond2 (unregistering): Released all slaves [ 210.898580][ T1081] bond3 (unregistering): Released all slaves [ 210.905886][ T1081] bond4 (unregistering): Released all slaves [ 210.933805][T13004] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.948854][T13004] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 210.953042][T13076] __nla_validate_parse: 1 callbacks suppressed [ 210.953051][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1959'. [ 210.953130][T13004] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.998136][T13004] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 211.106234][T13101] SET target dimension over the limit! [ 211.108362][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1963'. [ 211.117910][T13103] tmpfs: Bad value for 'mpol' [ 211.120149][T13101] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1963'. [ 211.123219][T13082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=13082 comm=syz.5.1961 [ 211.134378][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.148625][T13004] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.158681][ T656] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.161481][ T656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.164262][T13106] netlink: 'syz.7.1965': attribute type 1 has an invalid length. [ 211.169820][ T656] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.172646][ T656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.180344][T13106] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 211.183943][T13109] serio: Serial port ptm0 [ 211.229404][T13116] mkiss: ax0: crc mode is auto. [ 211.238342][T13004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.241594][T13004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.273319][ T1081] hsr_slave_0: left promiscuous mode [ 211.276255][ T1081] hsr_slave_1: left promiscuous mode [ 211.278757][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.281660][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.286285][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.289223][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.301511][T13120] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 211.310603][ T1081] veth1_macvtap: left promiscuous mode [ 211.312647][ T1081] veth0_macvtap: left promiscuous mode [ 211.314863][ T1081] veth1_vlan: left promiscuous mode [ 211.316706][ T1081] veth0_vlan: left promiscuous mode [ 211.413518][ T5950] Bluetooth: hci1: command tx timeout [ 211.493501][ T5950] Bluetooth: hci0: command tx timeout [ 211.610857][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 211.909944][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.033067][T13158] netlink: 'syz.7.1975': attribute type 1 has an invalid length. [ 212.049731][T13158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.088324][T13158] bond1: (slave veth3): Enslaving as an active interface with a down link [ 212.094705][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17682 sclass=netlink_route_socket pid=13158 comm=syz.7.1975 [ 212.154814][T13168] netlink: 'syz.6.1977': attribute type 1 has an invalid length. [ 212.161578][T13004] veth0_vlan: entered promiscuous mode [ 212.172637][T13004] veth1_vlan: entered promiscuous mode [ 212.187551][T13004] veth0_macvtap: entered promiscuous mode [ 212.191506][T13004] veth1_macvtap: entered promiscuous mode [ 212.204704][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.209807][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.233214][ T46] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.236966][ T46] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.245757][ T46] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.249243][ T46] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.289548][T13183] loop7: detected capacity change from 0 to 7 [ 212.296497][T13183] blk_print_req_error: 25 callbacks suppressed [ 212.296508][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.301921][T13183] buffer_io_error: 25 callbacks suppressed [ 212.301929][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.310860][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.313987][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.316564][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.319623][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.320878][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1980'. [ 212.322160][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.329070][ T656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.329770][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.331914][ T656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.337037][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.340135][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.340181][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.340195][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.340216][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.340229][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.340239][T13183] ldm_validate_partition_table(): Disk read failed. [ 212.340258][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.340271][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.340292][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.340305][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.340326][T13183] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.357585][T13177] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1980'. [ 212.360058][T13183] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.366916][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.368152][T13183] Dev loop7: unable to read RDB block 0 [ 212.370970][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.374256][T13183] loop7: unable to read partition table [ 212.385482][T13183] loop7: partition table beyond EOD, truncated [ 212.393450][T13183] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 212.549161][T13204] Bluetooth: MGMT ver 1.23 [ 212.791250][T13235] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 212.798913][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 212.802580][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1990'. [ 212.806630][T13235] netlink: 'syz.6.1990': attribute type 6 has an invalid length. [ 212.989487][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1995'. [ 213.093914][ T55] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 213.105989][T13260] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 213.263790][ T55] usb 13-1: Using ep0 maxpacket: 8 [ 213.269866][ T55] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 213.274038][ T55] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.277803][ T55] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.281540][ T55] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 213.285602][ T55] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 213.293542][ T55] usb 13-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 213.298810][ T55] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.309779][ T55] usb 13-1: config 0 descriptor?? [ 213.342598][ T5950] Bluetooth: hci4: urb ffff88803e8a2300 submission failed (90) [ 213.413722][ T6022] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 213.417870][ T6022] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 213.420643][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 213.424267][ T6022] Tainted: [L]=SOFTLOCKUP [ 213.426170][ T6022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.430398][ T6022] Workqueue: events l2cap_info_timeout [ 213.432555][ T6022] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 213.434991][ T6022] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.442938][ T6022] RSP: 0018:ffffc90004667978 EFLAGS: 00010282 [ 213.445596][ T6022] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 213.448912][ T6022] RDX: 0000000000000000 RSI: ffffffff893d9811 RDI: dffffc000000004c [ 213.452193][ T6022] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 213.455495][ T6022] R10: 00000000ffffff83 R11: ffff8880296ed4b0 R12: ffffffff893d9811 [ 213.458814][ T6022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.462108][ T6022] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 213.465459][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.467865][ T6022] CR2: 000000110c3604ba CR3: 00000000295a7000 CR4: 0000000000352ef0 [ 213.470780][ T6022] Call Trace: [ 213.472029][ T6022] [ 213.473139][ T6022] __kasan_check_byte+0x13/0x50 [ 213.474968][ T6022] lock_acquire+0xfc/0x330 [ 213.476625][ T6022] lock_sock_nested+0x41/0xf0 [ 213.478386][ T6022] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 213.480343][ T6022] l2cap_sock_ready_cb+0x43/0x1a0 [ 213.482202][ T6022] l2cap_conn_start+0x144/0xb60 [ 213.484032][ T6022] ? __pfx_l2cap_conn_start+0x10/0x10 [ 213.486003][ T6022] ? __pfx___mutex_lock+0x10/0x10 [ 213.487877][ T6022] ? debug_object_deactivate+0x1ec/0x3a0 [ 213.489939][ T6022] l2cap_info_timeout+0x81/0xa0 [ 213.491778][ T6022] process_one_work+0x9ba/0x1b20 [ 213.493438][ T5950] Bluetooth: hci1: command tx timeout [ 213.493646][ T6022] ? __pfx_process_one_work+0x10/0x10 [ 213.497901][ T6022] ? assign_work+0x1a0/0x250 [ 213.499646][ T6022] worker_thread+0x6c8/0xf10 [ 213.501364][ T6022] ? __pfx_worker_thread+0x10/0x10 [ 213.503291][ T6022] kthread+0x3c5/0x780 [ 213.504821][ T6022] ? __pfx_kthread+0x10/0x10 [ 213.506537][ T6022] ? rcu_is_watching+0x12/0xc0 [ 213.508300][ T6022] ? __pfx_kthread+0x10/0x10 [ 213.509949][ T6022] ret_from_fork+0x983/0xb10 [ 213.511678][ T6022] ? __pfx_ret_from_fork+0x10/0x10 [ 213.513602][ T6022] ? __switch_to+0x7af/0x10d0 [ 213.515364][ T6022] ? __pfx_kthread+0x10/0x10 [ 213.517086][ T6022] ret_from_fork_asm+0x1a/0x30 [ 213.518895][ T6022] [ 213.520058][ T6022] Modules linked in: [ 213.522338][ T6022] ---[ end trace 0000000000000000 ]--- [ 213.524682][ T5624] usb 13-1: USB disconnect, device number 2 [ 213.528359][ T6022] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 213.530810][ T6022] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 213.539065][ T6022] RSP: 0018:ffffc90004667978 EFLAGS: 00010282 [ 213.548506][ T6022] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 213.551487][ T6022] RDX: 0000000000000000 RSI: ffffffff893d9811 RDI: dffffc000000004c [ 213.556080][ T6022] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 213.559558][ T6022] R10: 00000000ffffff83 R11: ffff8880296ed4b0 R12: ffffffff893d9811 [ 213.562953][ T6022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.566496][ T6022] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 213.576714][ T5950] Bluetooth: hci0: command tx timeout [ 213.582872][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.586202][ T6022] CR2: 00007f0b3d9ee470 CR3: 0000000035e84000 CR4: 0000000000352ef0 [ 213.588910][ T6022] Kernel panic - not syncing: Fatal exception [ 213.595460][ T6022] Kernel Offset: disabled [ 213.596781][ T6022] Rebooting in 86400 seconds..