last executing test programs: 52.196917084s ago: executing program 0 (id=79): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x5, 0x8}, 0xc) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001140)={{r1, &(0x7f0000000040)='A!-($^.(\x00', 0x10000, &(0x7f0000000080)={@align=0x5, {0xfff8, 0x7, 0x6}}, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x1b86}, {[0x716, 0x6, 0xff, 0x2]}, 0x7, 0x1000, &(0x7f0000000140)=""/4096}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000011c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001200)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000001240)={r3, 0x40, 0x1}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000824}, 0x8008) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'hsr0\x00', 0x0}) setsockopt(r2, 0x6440, 0x1, &(0x7f0000001440)="ba95bf69", 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000002140)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002100)={&(0x7f00000014c0)={0xc38, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc49, 0xb}}}}, [@NL80211_ATTR_TID_CONFIG={0x5f0, 0x11d, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x4, 0x4, 0x8, 0x963, 0x1, 0x3, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x5}, {}, {0x2, 0x2}, {0x1, 0x9}, {}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x2}, {0x1, 0x2}, {0x5}, {0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x7}, {0x1}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x2}, {0x4}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x6, 0x4000, 0x2, 0x5, 0xa, 0x6]}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x87bf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x856, 0x3, 0x401, 0x9, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x1}, {0x7, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2c, 0xfffe, 0x81, 0x3ff, 0x2, 0xc, 0x1, 0xfffc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1ff, 0x10, 0x5065, 0x9, 0x800, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4, 0x10, 0x8, 0x8, 0x695c, 0x0, 0x800]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}]}, {0x3bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0xa}, {0x3, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x3}, {0x7, 0x8}, {0x3, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x6, 0x6}, {0x6}, {0x0, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x8}, {0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x9, 0x16, 0x9, 0x5, 0x7e, 0xc, 0x1b, 0x16, 0x4, 0x36, 0x2, 0x16, 0x6, 0x48, 0x12, 0xd27bc0e3f3a250c9, 0x1b, 0x36, 0x36, 0x1b, 0x24, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec6a, 0x101, 0x9, 0xa9, 0x5, 0x3, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x16, 0x48, 0x18, 0x48]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x2, 0x16, 0x6c, 0x36, 0x3, 0x39, 0x12, 0x48, 0x60, 0x5, 0x48]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x8}, {0x3, 0xa}, {0x2}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x4}, {0x5, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0xa}, {}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x1}, {0x2, 0x2}, {0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0xa}, {0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x16, 0x6c, 0x48, 0x6c, 0xc, 0x18, 0x18, 0x12, 0x30, 0x24, 0x36, 0x2, 0x12, 0x9, 0x48, 0x2, 0x67, 0x24, 0xb, 0x24, 0x6, 0x1, 0x36, 0x2, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x6, 0x48, 0x2, 0x60, 0xc, 0x7a, 0x1, 0xb, 0x24, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x2}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0xd}, {0x6, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {}, {0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x1}, {0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x7, 0x14}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x6, 0x8}, {0x2, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x9}, {0x3, 0xa}, {0x2, 0x2}, {0x3, 0xc}, {0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0xa}, {0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x9}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40d, 0x4, 0x0, 0x81, 0x4, 0x2, 0x7, 0xe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x98, 0xfff, 0xc, 0x2, 0x8000, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x29e, 0x7, 0x3, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x30, 0x3f, 0x1, 0x60, 0x30, 0x5, 0x1, 0xb, 0x2, 0x4, 0xc, 0x59, 0x36, 0x1, 0x6c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xda83, 0x7, 0xb96, 0x6, 0x9, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x81, 0x1, 0x4, 0x2, 0x8001, 0x6c6]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x36, 0x48, 0x24, 0xc, 0x18, 0x4, 0x60, 0x4, 0x18, 0x4, 0x12, 0x36, 0xb, 0x5, 0x0, 0x18, 0xb, 0x2, 0x18, 0x4, 0x16, 0x9, 0x0, 0x12, 0x12, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x9, 0xae, 0x6, 0x1, 0x8, 0x80, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x8, 0x7, 0x0, 0x6, 0x7, 0x8d]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x16, 0x1, 0x1, 0x30, 0x16, 0x48, 0x1, 0x30, 0x4a, 0x24, 0x36, 0x4, 0x36, 0x16, 0x34, 0x48, 0x4, 0xb, 0x4, 0x6, 0x6, 0x6c, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0xb, 0x9, 0xc, 0x3, 0x9, 0x6, 0x30, 0x3, 0x5, 0x60, 0x6c, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x4, 0x0, 0x7ff, 0x100, 0x1, 0xa0d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7190, 0xb, 0xfff7, 0x55de, 0x8, 0x99, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x9}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x6}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0xa}, {0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0x8, 0x7, 0x0, 0x5, 0x0, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}]}]}, @NL80211_ATTR_TID_CONFIG={0x444, 0x11d, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xe75b, 0x6, 0x1, 0x1, 0x40, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8, 0x6, 0x4, 0x6, 0x4, 0x1, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x9, 0x1, 0x6, 0x3, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x9}, {0x2, 0x1}, {0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x2}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x5, 0x1}, {}, {0x3}, {0x3, 0x6}, {0x3, 0x4}, {}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x4, 0x9, 0x2, 0x6c, 0x2, 0x60, 0x30, 0xc, 0x18, 0x3, 0x16, 0x12, 0x16, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8000, 0x0, 0x3, 0x7fff, 0x1ff, 0xa3f, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0b0, 0x8, 0x6, 0x4, 0x4, 0xd1, 0x400, 0x5]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2789, 0x5, 0xfff, 0xa28, 0x5, 0x2, 0x4, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0xff, 0x1, 0x3744, 0xfff, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x6}, {0x6}, {0x4, 0x9}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x4, 0x4}, {0x6}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x4, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6}, {0x5, 0x7}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x8, 0xb, 0x3, 0x7fff, 0xbd68, 0x5]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x5, 0x4}, {0x5}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x6, 0x1}, {0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x40, 0x9, 0xd, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x36, 0x12, 0x10, 0x1b, 0x12, 0x0, 0x15, 0x48, 0x1, 0x5, 0x3c, 0x48, 0x90, 0x0, 0x12, 0x16, 0x44, 0x16, 0x18, 0x16, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x6, 0x1000, 0x6, 0xd4a1, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x2, 0x2, 0x36, 0x6, 0x16, 0x12, 0x6c, 0x1, 0x24, 0x12, 0x6, 0x5c, 0x1b, 0x2, 0x1b, 0x36, 0xc, 0x6c, 0x6, 0x6c, 0x68, 0x9, 0x6, 0xb, 0x5, 0x6, 0x2]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x1, 0x1, 0x18, 0x76, 0x30, 0xc, 0x60, 0x6, 0x6c, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe6b3, 0xa476, 0xffff, 0xff, 0xec0, 0x2b, 0x7b8e]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x6}, {0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x9}, {}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x9}, {}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x9, 0x0, 0x5eb6, 0x6, 0x4, 0x7, 0x294]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x4, 0x5}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x7, 0xa}, {0x6, 0x1}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7a, 0x0, 0x9, 0x10, 0x5, 0x5, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x686c, 0x6, 0x6, 0x3, 0x7, 0x10, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xef, 0xf422, 0x5e93, 0xe050, 0x3, 0x800, 0x9, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}]}, 0xc38}, 0x1, 0x0, 0x0, 0x48041}, 0x40) ppoll(&(0x7f0000002180)=[{r0, 0x820f}, {r1, 0x4}, {r1, 0x40}, {r1, 0x2000}], 0x4, &(0x7f00000021c0)={0x0, 0x3938700}, &(0x7f0000002200)={[0x80000]}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000002240)={0x6, 'wg0\x00', {0x7f}, 0x2ea}) sendmsg$nl_route(r2, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0xc120c00}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=@ipv4_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}]}, 0x1c}}, 0x1) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x8c5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x60, 0x1403, 0x4, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c5}, 0x5) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000002740)={r4, 0x6}, &(0x7f0000002780)=0x8) setrlimit(0xb, &(0x7f00000027c0)={0xa66, 0x4}) close_range(r1, r1, 0x0) ioctl$EVIOCGBITSND(r8, 0x80404532, &(0x7f0000002800)=""/42) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000002840)={0x1000, 0x3000, 0x5, 0x0, 0x6}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000002880), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x2c, r7, 0xc08, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x800) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002b40)=@assoc_value={r9, 0x10001}, 0x8) move_pages(0x0, 0x6, &(0x7f0000002b80)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000002bc0)=[0xad3, 0x2e2, 0xfff, 0xd, 0x6], &(0x7f0000002c00)=[0x0, 0x0, 0x0], 0x4) 52.137999904s ago: executing program 0 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf980090ffffff0056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 52.070615745s ago: executing program 0 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbff, {0xa}}, 0x14}}, 0x20000024) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x4, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4a}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x27}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x47, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 51.628614651s ago: executing program 0 (id=91): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x6) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0xffffffffffffffff) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="2796195c55ef46d2c2f46144fa119ab84fcc2bb08f227d0e5e89ac9ee809606b16ca432e090a8f50764ebd0e8c1ebd9347a405d1d7080e635ab742d3a271b706f9b5fa8b799cb8c6", 0x0, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x531b}, 0x8) 51.37083752s ago: executing program 0 (id=96): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000000000)) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000900)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newtaction={0x1060, 0x30, 0x400, 0x5, 0x0, {}, [{0x104c, 0x1, [@m_vlan={0x1048, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3c1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x1060}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000100)=0x1) 50.521253075s ago: executing program 0 (id=104): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\t\x00'/12]) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf256400000008000300", @ANYRES32=r5], 0x28}}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x100000000) r6 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r6}) 50.416479013s ago: executing program 3 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)=0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) close(0x3) 50.360863079s ago: executing program 3 (id=109): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0x8, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001d00000225bd7000fcdbdf2500000000000000080007000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x24048800) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@noextend}]}}) (async) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) (async) fchdir(r8) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="006d815dc5674339823d0004009ad538f1a860a2143990b4b76eb02684", @ANYRES16=r9, @ANYBLOB="00022cbd7000ffdbdf25010000000000000001410000001800170000000d000000677564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004090) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={0x0}) (async) r10 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r10, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x23) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x4, 0xf5e69860ee75f1e9}, 0x10) (rerun: 32) 50.289930543s ago: executing program 3 (id=110): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x22402) syz_80211_inject_frame(0x0, &(0x7f00000002c0)=@ctrl_frame=@bar={{}, {0x8}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0xa, {0x0, 0x8}, "4b678ebc6d67cd08"}, {0x0, 0x6, {0x7, 0x81}, "69e9064befe6e3c7"}, {0x0, 0x8, {0x4, 0xf}, "203d1452efecdd43"}, {0x0, 0x1, {0x6, 0x6}, "f1efd2ab5d7e3bd6"}, {0x0, 0x7, {0x8, 0x1}, "a6f0a4f8c2446c8b"}, {0x0, 0xf, {0x6, 0x1}, "ffe67741a4cbced9"}]}}, 0x5a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="baaaaaaaaaaa000000e1260000050000000000000000000000000000004e200013903f9ed89b48d438c680000000000000000000"], 0x0) setreuid(0xee01, 0xee01) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvfrom(r3, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000180)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x30}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24840}, 0x2400c800) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0xb, '\x00', @data=0x4}]}) 48.940304516s ago: executing program 3 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1cd883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000380)='acl') 48.871107711s ago: executing program 3 (id=121): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @multicast1}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) getsockname(r3, &(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @netrom, @bcast, @rose, @default, @null, @netrom]}, &(0x7f00000001c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @mcast1, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x600}, "ffb00afe4e70"}}}}}}}, 0x0) 48.631477868s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8093e6ca521c8cc7bcfb81328de29b3bdb8091c507e1055291324bbfb79c7775250037f5377032f1dfde999873badd92f552533d99618a9e83f276fa4aa3141d91a5aaee1b10c2213923784f4d2e344d3ede494cbbde484d5adbd1d29030a78299d9250944cd7c5233d205b0ae6fa1af5d578bdee2bac034d57fd4274e5ba77a2e2c4e8e0c75d6d2eb4a97379055e43499cb2d7b6"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x20, &(0x7f0000001240)=[{0x19, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) 48.520263695s ago: executing program 32 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8093e6ca521c8cc7bcfb81328de29b3bdb8091c507e1055291324bbfb79c7775250037f5377032f1dfde999873badd92f552533d99618a9e83f276fa4aa3141d91a5aaee1b10c2213923784f4d2e344d3ede494cbbde484d5adbd1d29030a78299d9250944cd7c5233d205b0ae6fa1af5d578bdee2bac034d57fd4274e5ba77a2e2c4e8e0c75d6d2eb4a97379055e43499cb2d7b6"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x20, &(0x7f0000001240)=[{0x19, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) 35.515722313s ago: executing program 33 (id=104): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\t\x00'/12]) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf256400000008000300", @ANYRES32=r5], 0x28}}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x100000000) r6 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r6}) 14.669497177s ago: executing program 5 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf98000000001c0056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 14.579956214s ago: executing program 5 (id=627): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000898000000060a0b040000000000000000020000006c000480680001800a000100696e6e6572000000580002800800024000000084080001400000000008000340000000010800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a080001400000000e0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xc0}}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4], 0x1}) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01864c1, &(0x7f0000000180)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01864c2, &(0x7f0000000200)={0x0, 0x0, r9}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r10, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000480)="ed6f5c45ba71feb568202046ba6bc367", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x28) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 14.50975368s ago: executing program 5 (id=628): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xfffffffa, 0x1, 0x5, 0x1000000, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r2, 0x0, 0x0, 0x40844, &(0x7f0000000740)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$ppp(r5, &(0x7f0000000280)="c89add818c7855e765a1aae94c87d2a173d6500786404d9d77b4b07cbbdbfb2bd0005a74ff178b2279609610d16579c16c8bca2d090ddfad1ed3b659f43122d3d22da5534c190dd917462ba75556712cc0b56c96c174fbbcf385eb4a07bf2f3f96fdce9df4d83b71e355a4ddb30531c294dfb100feaed87e757be5804268a07d865558d6b109b7600bf3e7119ec88b14034be436477593e4ad423e799db910a81159d54979aa8db7558f418cc5d9c54e37df71ce39248a074b53fd40a668e5cb8aef3de2695b15b7d64bca1e99b736ee18", 0xd1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="80fb7d0a0a0002"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 14.431068526s ago: executing program 5 (id=629): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c4af96c8663ad81b86b898d9435af40b29d0936e15fb284457b0bc44d54579a75db65633809f4e37ef15070c36fdb9660809c71e250fab354c5772fee217712b65392", 0x0, 0x407, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000317000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) fsetxattr(r1, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)='syz\x00', 0x4, 0x2) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) chmod(&(0x7f0000000240)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, r4, 0x0, 0x6, 0xd1, 0x3, "312c401e0fb5c6d0bb7ad0d1d84160d83a932c26ee9f1d6d7b0538067bad431c978176d52a0de62b6584811a162c74d6dc470c50dfea4d1d74d818d7cfa6ed"}, 0x60) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000f30000000000fddbdf25fc02000000000000000000000000000000000000000000000000000300030000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008001800630f000048000100736861332d3338342d67656e6572696300"/248], 0x140}}, 0x20000000) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) 14.331045447s ago: executing program 5 (id=630): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000040010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) clock_gettime(0xb, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000800)}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x406, r3) (async) r4 = fcntl$dupfd(r3, 0x406, r3) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000001480)=""/4078, 0x57}], 0x1) (async) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000001480)=""/4078, 0x57}], 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000180)={[0x1]}, 0x8) (async) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000180)={[0x1]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000100), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000100), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 13.929727198s ago: executing program 5 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x114, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xd6, 0x8, "fddfbe0d96949b6511a078b7ba57c551652d8ce87f10f920a28824a86827b68313865555208d036a2c88e4ff5863d70a5063a25768fddbfdcc96e2505f2838a8a4f58db765dae3b3d59692f0ed38baef41fe48d8460675f7d31614dc34cf61cbfe98b99820dea2d65f5a1088ba6844cd20ef3f84123750f15b8cca1a2ae657fde81c775ddfdaad955c90c49c25a3ab69aeffcf6b4a88887005489ff5c6ce888c323ec326a1aab29a2bc1f37316252407004cb3d19573ee9c36d88884224fdf55cecb2387c3cbc540da5f66c6b958185813ef"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "60ed2d9ed668009fceb6ae4b8e079120023355e63e4f63d3cc9ce98036ea6bc677ba5d12d83ac4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x5b, 0x6, "c8361f10c9b85b46f2cb283acb97ac4c785c4aa095cb2edbf3190ac44161e194d12dfdd848c5904225bc704c7026ba234cc0c0c8d99be204446978cb96c72819182097a1b4494096d03ad433079c33fad73f2ee0b1aefb"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "c01665477a5d8e57349191ff649d2410f06b0fd57f4dabac13a35f7709007fa3ab89bfddd7d27eb54886"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x35, 0x6, "5eb7759dd50d57f59470ed781cbf4b37332125bf461a126773fa06f556a627b7b05931f323817fce9e7ff37f889449ebff"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x374}, 0x1, 0x0, 0x0, 0x4040}, 0x44080) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x2020000, &(0x7f0000000280)={[{@xino_on}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 13.826526286s ago: executing program 34 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x114, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xd6, 0x8, "fddfbe0d96949b6511a078b7ba57c551652d8ce87f10f920a28824a86827b68313865555208d036a2c88e4ff5863d70a5063a25768fddbfdcc96e2505f2838a8a4f58db765dae3b3d59692f0ed38baef41fe48d8460675f7d31614dc34cf61cbfe98b99820dea2d65f5a1088ba6844cd20ef3f84123750f15b8cca1a2ae657fde81c775ddfdaad955c90c49c25a3ab69aeffcf6b4a88887005489ff5c6ce888c323ec326a1aab29a2bc1f37316252407004cb3d19573ee9c36d88884224fdf55cecb2387c3cbc540da5f66c6b958185813ef"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "60ed2d9ed668009fceb6ae4b8e079120023355e63e4f63d3cc9ce98036ea6bc677ba5d12d83ac4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x5b, 0x6, "c8361f10c9b85b46f2cb283acb97ac4c785c4aa095cb2edbf3190ac44161e194d12dfdd848c5904225bc704c7026ba234cc0c0c8d99be204446978cb96c72819182097a1b4494096d03ad433079c33fad73f2ee0b1aefb"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "c01665477a5d8e57349191ff649d2410f06b0fd57f4dabac13a35f7709007fa3ab89bfddd7d27eb54886"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x35, 0x6, "5eb7759dd50d57f59470ed781cbf4b37332125bf461a126773fa06f556a627b7b05931f323817fce9e7ff37f889449ebff"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x374}, 0x1, 0x0, 0x0, 0x4040}, 0x44080) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x2020000, &(0x7f0000000280)={[{@xino_on}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 12.998784433s ago: executing program 1 (id=647): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000000)=[{0x0, 0x2411, 0x44, &(0x7f0000000400)="2474d231f17b5eb9e85b8b7e9bcd156ff4139ff30daa63e085a54fc814526e6a37fae0aadbfa5004876bb387d307df3a8f74b327386b339c54a7b8e4cdab9872c1bab8d8"}], 0x1}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="b15345ae2646", @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (rerun: 64) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) (async, rerun: 64) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000004c0)=@fd={0x10001, 0x3, 0x4, 0x800000, 0xffff, {r2, r3/1000+60000}, {0x3, 0x1, 0xe1, 0xe4, 0x9, 0x7, "132528f1"}, 0x8, 0x4, {}, 0x8, 0x0, r4}) 12.904329095s ago: executing program 4 (id=648): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='[!\x00', &(0x7f00000003c0)='&@\x93@!\x00']}, &(0x7f0000000540)={[&(0x7f0000000440)='[\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='[!\x00']}) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20044000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000000)='[!\x00', 0x20bc0, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x6]}, {0xc, 0x555a, 0x2, 0x3}}, 0xfff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x729e}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x3, r4}) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='[!\x00', &(0x7f00000003c0)='&@\x93@!\x00']}, &(0x7f0000000540)={[&(0x7f0000000440)='[\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='[!\x00']}) (async) listen(r1, 0x0) (async) shutdown(r0, 0x0) (async) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) accept(r1, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20044000, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000000)='[!\x00', 0x20bc0, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x6]}, {0xc, 0x555a, 0x2, 0x3}}, 0xfff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x729e}) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x3, r4}) (async) 12.903754793s ago: executing program 4 (id=649): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x3}, 0x1c) mount(0x0, 0x0, 0x0, 0x8080, 0x0) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004004) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x3}, 0x1c) (async) mount(0x0, 0x0, 0x0, 0x8080, 0x0) (async) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004004) (async) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) (async) 12.831136795s ago: executing program 1 (id=650): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}}], 0x1, 0x810) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 12.751050248s ago: executing program 1 (id=651): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbc3, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0xd, 0xe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 10.295577337s ago: executing program 1 (id=653): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="0e56101da43d7813aef86f4570e818aaa7270e8983c587386fbef1f194927d1b09daee05b6d64bb98b8ba89f8903706fddc49489d5955d9fd62d361486716d81eca20a8e652cc42aa10d07cbdee3a16a"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(0x3) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000240)) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) read$FUSE(r4, &(0x7f0000004680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000005c0)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2d, 0x1, 0x800000, 0x4, 0x8, 0x7, 0x0, 0x0, 0x0, 0x40, 0xa4ce}}, 0x50) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) setns(r6, 0x24020000) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, r9, 0x0, 0x154) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000003080)=ANY=[@ANYBLOB="64150000110010002920db00fcdbdf251700000800686a008dfd234113f045d264cff548f520953f8695268000710000000000d3eb5f009dfc29336e72b64e5359198c7bf245a129e901e4f9a84e9e7509916b6ce4649c96eb954db51fffab490a0d57198c381b80d7e95c75b5a60632879411b4ebbe890173158f7c39", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x1564}}, 0x0) 10.295207553s ago: executing program 2 (id=654): r0 = syz_open_dev$radio(&(0x7f00000014c0), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r1, 0x800455cc, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000002600)=[{0x7, 0x6cf2289c0ea14aca, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/126, 0x7e}], &(0x7f0000000680)=[0x3bef, 0x5, 0x7, 0x2]}, {0x1, 0x1, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/164, 0xa4}], &(0x7f00000007c0)=[0x6, 0x5, 0x6, 0x7]}, {0x9, 0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/221, 0xdd}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/248, 0xf8}, {&(0x7f0000000c40)=""/58, 0x3a}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/107, 0x6b}], &(0x7f0000000dc0)=[0x3000000000000, 0x1, 0xfffffffffffffff7, 0x1, 0x8000000000000000, 0x3]}, {0x2, 0x1, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/130, 0x82}, {&(0x7f0000000ec0)=""/77, 0x4d}], &(0x7f0000000f80)=[0x999, 0x9, 0x7, 0x2, 0x3]}, {0x2, 0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/184, 0xb8}, {&(0x7f0000001080)=""/50, 0x32}], &(0x7f0000001100)=[0x3]}, {0x1, 0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001140)=""/157, 0x9d}], &(0x7f0000001240)=[0x3, 0x8001, 0x5, 0x8000, 0x5]}, {0x4, 0x1, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)=""/240, 0xf0}, {&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f0000002500)=""/182, 0xb6}, {&(0x7f0000001440)=""/5, 0x5}], &(0x7f00000025c0)=[0x1, 0x59879db8, 0x15, 0x6f76bdff]}], 0x7) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 10.295066118s ago: executing program 4 (id=655): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 101.717829ms ago: executing program 2 (id=656): unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r0 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x16) write$binfmt_misc(r0, &(0x7f0000000040)="dd5c24662b", 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c6d73697a655dcd695a6d30783030303030303030303736663262"]) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 101.062491ms ago: executing program 2 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000040)="260000000300060000071a800100613f", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000080)={0x3, 0x2, 0x3, 0xe1e, 0xef, 0x0, 0x3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x80, 0x6, {{0xc, 0x4, 0x1, 0x1f, 0x30, 0x66, 0x0, 0x77, 0x29, 0x0, @empty, @broadcast, {[@generic={0x44, 0x12, "2725a6a5f0964e91b67d39e58c743ed8"}, @ssrr={0x89, 0x7, 0x6e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_sctp(0xa, 0x0, 0x84) 100.861505ms ago: executing program 4 (id=658): r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000340)=0x8, 0x4) lseek(r0, 0x0, 0x1) 100.307529ms ago: executing program 4 (id=659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20008081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4e6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3a0}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x78c}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x95}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008010) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x40, 0x3f}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x10c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7589}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x295968aa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f00000007c0)=0xfd, 0x4) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x48000) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x20048081) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240041d1}, 0x2000c004) (async) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000c80), 0xa000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000d00)={0x6, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000d40)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x5, 0x6c1fe3779c5394ab, 0x1, 0x0, 0x9, 0x8001}, &(0x7f0000000d80)=0x20) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x194, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @local}}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x8, 0x7ff]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}]}]}, 0x194}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000010c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20044850) 97.212359ms ago: executing program 6 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {0x0, 0x5}, {0x2, 0x9}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="0f01c8460f2204b9800000c00f3235000800000f30f2ae8f497c806700420f0fe88e65660fdf5c15f666baf80cb84ca9e085ef66bafc0c66b8008066ef2ef3460fc77070470f3807bbfc000000", 0x4d}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x400, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x6, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 95.507364ms ago: executing program 6 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@verity_off}, {@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@xino_on}, {@uuid_null}, {@redirect_dir_follow}]}) 95.273668ms ago: executing program 1 (id=661): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x401, r2}) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100, 0x0) (async) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) accept4(r1, 0x0, 0x0, 0x800) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x401, r2}) (async) 95.15968ms ago: executing program 2 (id=662): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x8000, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r0, r1) 91.709028ms ago: executing program 4 (id=663): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone3(&(0x7f0000000380)={0x100400, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1], 0x1}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045", @ANYRESHEX=r2], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e20, 0x2400000, @private0, 0x6}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r5, 0x7, 0x1, [0xb]}, &(0x7f0000000280)=0xa) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r6]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_SET_OPTIONS(r8, 0x5320, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @meta={0x96c8a1cc614a74d, 0x1f5def4d, 0x409c, 0x9fb0, 0x59eee288}}) 10.512496ms ago: executing program 6 (id=664): syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xb3c, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) 4.592911ms ago: executing program 1 (id=665): r0 = msgget$private(0x0, 0x414) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000640)=""/1) (async, rerun: 64) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (rerun: 64) connect$ax25(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 1.442037ms ago: executing program 2 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000c80)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/115, 0x73}], 0x1, 0x5, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="f05b6aeea6b67db9b557cb983f348fac42f21a57ac9a10c2b0feb7964f22d0d9f765d366455ec616e19e4af7ab7dbc273cc7810a20b76c1f6cfb013bdf4a15f555525b978b74d141148fdbc9ae445c711a655d67168181975ef458114377c9104d5037f2cf093097ef41b0aa9a10bbfa3e005a7c16828ae26d69d19e8e901db774a438e249e0f2283894049c8d5cf76846bc6a83eb1b76e2a5aa252c956491ff", 0xa0}], 0x2, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}], 0x80, 0x4000000}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 595.78µs ago: executing program 2 (id=667): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r1, 0x1bf6d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ceaa813c3b814eb56e415cd26ea2c9c22f2cef5e3a27f2048dfc90c09773f4223c29cec19e98cfc0ea6011dad206853428c1de8794e1692baffe27a81d96f11f5ffc902ae4ec166b5945e13082a08f733b938d02bcf43fd2204f8cab6861704ca4c948b44b2b0e2b4e980105c9994120e08293e20fbace6964ed606274ea8ae03f19a3", 0x83}, {&(0x7f0000000280)="0f0b5decde962723e11c6af2de9ee9f987f33d6ce6f6b76040302cf836e913f2430c7d5ffb07dc4d92cded7c27e5cc63b94e648a0518212af6440c116ef00b9692527b25b232aae702f490109a05276f4d4b538b747d98390abc7d5d64d64a0af4056092f925b807d461fe4e1c762127799f9716429b36c9dbfbdcc5cb2e7dc4d57efdabda09244d87df9441075dec6d3d437be69dda9669bc32e49c9121969c02f4bed4b338af6371278a4fa49bd250831486b070fd428c8d12d37b46ea786ceb77af5cda3e01b862cd5469660467b68b0194cf40234c7febcad1bdb0673c1dada9fa5b60385d8257049f33109c3cdf", 0xf0}, {&(0x7f0000000100)="f575563426cae635f8c7e8d66200091867a9fdf006eed5c3e1fe19edcae2af436d5f183880350565c88b137eddec1b8653cb3b1ebb11ea2a1e53be01b4a709dca6221d0b05b6c09b31276a8133c0e94747f0965d8aaf2d179fe99dfd0fa13f8ab7f01314f2d0cf288e384d9e5e132129a27d838a6feb1020", 0x78}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4004) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000006c0)={0x40006, 0x4, 0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000540)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x7}}, {@cache_mmap}], [{@fsmagic={'fsmagic', 0x3d, 0x7ff}}]}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 0s ago: executing program 6 (id=668): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x405, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @pix_mp={0x11, 0x200, 0x34363248, 0x0, 0x8, [{0xdf, 0x3}, {0x4f4a6b9c, 0x7}, {0x9, 0x80000001}, {0x10001, 0xfffffffe}, {0x7fff, 0xc}, {0x5, 0x7}, {0x2, 0x18e}, {0x0, 0x2}], 0x4, 0x5, 0x3, 0x2, 0x4}}) kernel console output (not intermixed with test programs): de [ 56.721074][ T5931] veth1_macvtap: entered promiscuous mode [ 56.724511][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.734980][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.753562][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.757003][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.786025][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.790687][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.802947][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.806299][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.809762][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.813462][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.824470][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.840413][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.849734][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.898926][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.902836][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.906573][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.952261][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.963959][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.968972][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.995669][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.000498][ T6026] xt_hashlimit: size too large, truncated to 1048576 [ 57.001759][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.039959][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.045660][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.094423][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.101791][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.305069][ T6042] FAULT_INJECTION: forcing a failure. [ 57.305069][ T6042] name failslab, interval 1, probability 0, space 0, times 1 [ 57.312536][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 57.312560][ T6042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.312571][ T6042] Call Trace: [ 57.312579][ T6042] [ 57.312586][ T6042] dump_stack_lvl+0x100/0x190 [ 57.312621][ T6042] should_fail_ex.cold+0x5/0xa [ 57.312644][ T6042] ? tomoyo_realpath_from_path+0xb6/0x690 [ 57.312675][ T6042] should_failslab+0xc2/0x120 [ 57.312704][ T6042] __kmalloc_noprof+0xe0/0x850 [ 57.312734][ T6042] tomoyo_realpath_from_path+0xb6/0x690 [ 57.312762][ T6042] tomoyo_path_number_perm+0x23c/0x580 [ 57.312789][ T6042] ? tomoyo_path_number_perm+0x22e/0x580 [ 57.312820][ T6042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.312871][ T6042] ? find_held_lock+0x2b/0x80 [ 57.312894][ T6042] ? __fget_files+0x215/0x3d0 [ 57.312912][ T6042] ? hook_file_ioctl_common+0x146/0x410 [ 57.312939][ T6042] ? __fget_files+0x21f/0x3d0 [ 57.312961][ T6042] security_file_ioctl+0xd3/0x230 [ 57.312983][ T6042] __x64_sys_ioctl+0xb7/0x210 [ 57.313010][ T6042] do_syscall_64+0x106/0xf80 [ 57.313030][ T6042] ? clear_bhb_loop+0x40/0x90 [ 57.313052][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.313072][ T6042] RIP: 0033:0x7f3ce019c629 [ 57.313086][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.313102][ T6042] RSP: 002b:00007f3cde3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.313122][ T6042] RAX: ffffffffffffffda RBX: 00007f3ce0415fa0 RCX: 00007f3ce019c629 [ 57.313132][ T6042] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000003 [ 57.313142][ T6042] RBP: 00007f3cde3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 57.313152][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.313163][ T6042] R13: 00007f3ce0416038 R14: 00007f3ce0415fa0 R15: 00007ffeeec14fa8 [ 57.313188][ T6042] [ 57.313195][ T6042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.400894][ T6042] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 57.465499][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 57.469145][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 57.472883][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 57.562398][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.566451][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.880078][ T5926] Bluetooth: hci1: command tx timeout [ 57.881806][ T5936] Bluetooth: hci2: command tx timeout [ 57.958982][ T5936] Bluetooth: hci3: command tx timeout [ 57.970977][ T6031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.973547][ T6031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.978162][ T6031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.982445][ T6031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.984457][ T6031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.986951][ T6031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.991035][ T6031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.993659][ T6031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.997453][ T6031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.002115][ T6031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.004687][ T6031] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.008907][ T6031] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.087752][ T6066] warning: `syz.3.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.095121][ T6066] tmpfs: Bad value for 'mpol' [ 58.096656][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 58.138942][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.152561][ T6074] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 58.154684][ T6072] FAULT_INJECTION: forcing a failure. [ 58.154684][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 58.155947][ T6074] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19'. [ 58.162208][ T6072] CPU: 2 UID: 0 PID: 6072 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 58.162231][ T6072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.162242][ T6072] Call Trace: [ 58.162249][ T6072] [ 58.162255][ T6072] dump_stack_lvl+0x100/0x190 [ 58.162292][ T6072] should_fail_ex.cold+0x5/0xa [ 58.162318][ T6072] ? tomoyo_encode2+0xfb/0x3c0 [ 58.162355][ T6072] should_failslab+0xc2/0x120 [ 58.162386][ T6072] __kmalloc_noprof+0xe0/0x850 [ 58.162410][ T6072] ? d_absolute_path+0x136/0x1b0 [ 58.162440][ T6072] tomoyo_encode2+0xfb/0x3c0 [ 58.162464][ T6072] tomoyo_encode+0x29/0x50 [ 58.162485][ T6072] tomoyo_realpath_from_path+0x18c/0x690 [ 58.162513][ T6072] tomoyo_path_number_perm+0x23c/0x580 [ 58.162541][ T6072] ? tomoyo_path_number_perm+0x22e/0x580 [ 58.162571][ T6072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.162629][ T6072] ? find_held_lock+0x2b/0x80 [ 58.162653][ T6072] ? __fget_files+0x215/0x3d0 [ 58.162670][ T6072] ? hook_file_ioctl_common+0x146/0x410 [ 58.162699][ T6072] ? __fget_files+0x21f/0x3d0 [ 58.162721][ T6072] security_file_ioctl+0xd3/0x230 [ 58.162744][ T6072] __x64_sys_ioctl+0xb7/0x210 [ 58.162772][ T6072] do_syscall_64+0x106/0xf80 [ 58.162792][ T6072] ? clear_bhb_loop+0x40/0x90 [ 58.162815][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.162834][ T6072] RIP: 0033:0x7f0a8bf9c629 [ 58.162850][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.162866][ T6072] RSP: 002b:00007f0a8cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.162884][ T6072] RAX: ffffffffffffffda RBX: 00007f0a8c215fa0 RCX: 00007f0a8bf9c629 [ 58.162896][ T6072] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000003 [ 58.162907][ T6072] RBP: 00007f0a8cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 58.162918][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.162928][ T6072] R13: 00007f0a8c216038 R14: 00007f0a8c215fa0 R15: 00007ffc25e5b798 [ 58.162952][ T6072] [ 58.163273][ T6072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.255849][ T6080] dlm: no locking on control device [ 58.259186][ T6072] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 58.279609][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.341064][ T6085] kAFS: unable to lookup cell 'syz1' [ 58.421874][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 58.432388][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 58.543858][ T6108] : renamed from vlan0 (while UP) [ 58.589628][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 58.593414][ T6116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.617777][ T6118] openvswitch: netlink: EtherType 50a is less than min 600 [ 58.629330][ T6118] CUSE: unknown device info "" [ 58.630993][ T6118] CUSE: zero length info key specified [ 58.642535][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.645602][ T6118] netlink: 814 bytes leftover after parsing attributes in process `syz.0.32'. [ 58.669393][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 58.693310][ T6127] FAULT_INJECTION: forcing a failure. [ 58.693310][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.697498][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 58.697512][ T6127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.697519][ T6127] Call Trace: [ 58.697523][ T6127] [ 58.697527][ T6127] dump_stack_lvl+0x100/0x190 [ 58.697550][ T6127] should_fail_ex.cold+0x5/0xa [ 58.697565][ T6127] _copy_from_user+0x2e/0xd0 [ 58.697582][ T6127] video_usercopy+0xe71/0x1740 [ 58.697596][ T6127] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.697607][ T6127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.697622][ T6127] ? __pfx_video_usercopy+0x10/0x10 [ 58.697640][ T6127] v4l2_ioctl+0x1bd/0x250 [ 58.697652][ T6127] ? __pfx_v4l2_ioctl+0x10/0x10 [ 58.697664][ T6127] __x64_sys_ioctl+0x18e/0x210 [ 58.697681][ T6127] do_syscall_64+0x106/0xf80 [ 58.697693][ T6127] ? clear_bhb_loop+0x40/0x90 [ 58.697706][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.697717][ T6127] RIP: 0033:0x7f235599c629 [ 58.697726][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.697736][ T6127] RSP: 002b:00007f23568c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.697747][ T6127] RAX: ffffffffffffffda RBX: 00007f2355c15fa0 RCX: 00007f235599c629 [ 58.697753][ T6127] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000003 [ 58.697760][ T6127] RBP: 00007f23568c0090 R08: 0000000000000000 R09: 0000000000000000 [ 58.697766][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.697772][ T6127] R13: 00007f2355c16038 R14: 00007f2355c15fa0 R15: 00007ffd3f158608 [ 58.697785][ T6127] [ 58.781356][ T6122] team0: Port device team_slave_1 removed [ 58.859309][ T6136] netlink: 'syz.1.38': attribute type 33 has an invalid length. [ 58.863769][ T6137] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 58.864787][ T6136] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.900519][ T6140] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 58.950612][ T830] libceph: connect (1)[c::]:6789 error -101 [ 58.953224][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 58.956629][ T830] libceph: connect (1)[c::]:6789 error -101 [ 58.958773][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 59.141946][ T6158] Zero length message leads to an empty skb [ 59.157344][ T6148] ceph: No mds server is up or the cluster is laggy [ 59.235549][ T6170] xt_hashlimit: overflow, rate too high: 0 [ 59.238381][ T6170] No source specified [ 59.239852][ T5936] Bluetooth: hci0: command 0x040f tx timeout [ 59.378874][ T6180] FAULT_INJECTION: forcing a failure. [ 59.378874][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 59.384016][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) [ 59.384038][ T6180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.384048][ T6180] Call Trace: [ 59.384054][ T6180] [ 59.384060][ T6180] dump_stack_lvl+0x100/0x190 [ 59.384094][ T6180] should_fail_ex.cold+0x5/0xa [ 59.384117][ T6180] should_failslab+0xc2/0x120 [ 59.384142][ T6180] __kmalloc_cache_noprof+0x7a/0x6f0 [ 59.384162][ T6180] ? media_pipeline_add_pad+0xf3/0xa00 [ 59.384189][ T6180] ? trace_contention_end+0x140/0x180 [ 59.384221][ T6180] media_pipeline_add_pad+0xf3/0xa00 [ 59.384252][ T6180] __media_pipeline_start+0x2e6/0x22b0 [ 59.384277][ T6180] ? __pfx___mutex_lock+0x10/0x10 [ 59.384297][ T6180] ? lock_acquire+0x1cf/0x380 [ 59.384327][ T6180] ? __pfx___media_pipeline_start+0x10/0x10 [ 59.384356][ T6180] ? __mutex_lock+0x26a/0x1b90 [ 59.384379][ T6180] media_pipeline_start+0x49/0x70 [ 59.384405][ T6180] video_device_pipeline_start+0x79/0xa0 [ 59.384426][ T6180] vimc_capture_start_streaming+0x7d/0x130 [ 59.384446][ T6180] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 59.384467][ T6180] vb2_start_streaming+0x162/0x570 [ 59.384486][ T6180] ? __bitmap_weight+0xd7/0x110 [ 59.384515][ T6180] vb2_core_streamon+0x26a/0x3c0 [ 59.384539][ T6180] vb2_ioctl_streamon+0xd9/0x150 [ 59.384558][ T6180] ? v4l_streamon+0x1a/0xa0 [ 59.384576][ T6180] __video_do_ioctl+0xaf8/0xdc0 [ 59.384597][ T6180] ? __might_fault+0xc5/0x140 [ 59.384618][ T6180] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.384642][ T6180] video_usercopy+0x47a/0x1740 [ 59.384661][ T6180] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.384679][ T6180] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.384701][ T6180] ? __pfx_video_usercopy+0x10/0x10 [ 59.384730][ T6180] v4l2_ioctl+0x1bd/0x250 [ 59.384745][ T6180] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.384764][ T6180] __x64_sys_ioctl+0x18e/0x210 [ 59.384789][ T6180] do_syscall_64+0x106/0xf80 [ 59.384806][ T6180] ? clear_bhb_loop+0x40/0x90 [ 59.384827][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.384844][ T6180] RIP: 0033:0x7f235599c629 [ 59.384859][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.384880][ T6180] RSP: 002b:00007f23568c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.384897][ T6180] RAX: ffffffffffffffda RBX: 00007f2355c15fa0 RCX: 00007f235599c629 [ 59.384908][ T6180] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000003 [ 59.384918][ T6180] RBP: 00007f23568c0090 R08: 0000000000000000 R09: 0000000000000000 [ 59.384927][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.384937][ T6180] R13: 00007f2355c16038 R14: 00007f2355c15fa0 R15: 00007ffd3f158608 [ 59.384960][ T6180] [ 59.628917][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.787908][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.798851][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.803502][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 59.818917][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.823558][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.827212][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.833302][ T9] usb 5-1: config 0 descriptor?? [ 59.853034][ T6195] ======================================================= [ 59.853034][ T6195] WARNING: The mand mount option has been deprecated and [ 59.853034][ T6195] and is ignored by this kernel. Remove the mand [ 59.853034][ T6195] option from the mount to silence this warning. [ 59.853034][ T6195] ======================================================= [ 60.039674][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 60.049726][ T5936] Bluetooth: hci3: command 0x0419 tx timeout [ 60.049793][ T5926] Bluetooth: hci2: command 0x0419 tx timeout [ 60.092044][ T6197] syzkaller0: entered promiscuous mode [ 60.094004][ T6197] syzkaller0: entered allmulticast mode [ 60.159936][ T6122] Process accounting resumed [ 60.392487][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 60.395416][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.407527][ T9] usb 5-1: USB disconnect, device number 2 [ 60.839294][ T6024] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.990321][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 60.996652][ T6024] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.003103][ T6024] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.007403][ T6024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 61.010590][ T6024] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 61.014809][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.027198][ T6024] usb 6-1: config 0 descriptor?? [ 61.054549][ T6224] fuse: Unknown parameter 'rootm00000000000000000040000' [ 61.058552][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 61.058565][ T40] audit: type=1400 audit(1771718055.456:218): avc: denied { create } for pid=6223 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.072039][ T40] audit: type=1400 audit(1771718055.476:219): avc: denied { ioctl } for pid=6223 comm="syz.0.59" path="socket:[10598]" dev="sockfs" ino=10598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.083257][ T40] audit: type=1400 audit(1771718055.476:220): avc: denied { write } for pid=6223 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.091978][ T40] audit: type=1400 audit(1771718055.476:221): avc: denied { nlmsg_write } for pid=6223 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.124129][ T6227] FAULT_INJECTION: forcing a failure. [ 61.124129][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 61.126635][ T40] audit: type=1400 audit(1771718055.526:222): avc: denied { setopt } for pid=6223 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.127712][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT(full) [ 61.127726][ T6227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.127733][ T6227] Call Trace: [ 61.127736][ T6227] [ 61.127741][ T6227] dump_stack_lvl+0x100/0x190 [ 61.127918][ T6227] should_fail_ex.cold+0x5/0xa [ 61.127978][ T6227] should_failslab+0xc2/0x120 [ 61.128038][ T6227] __kmalloc_cache_noprof+0x7a/0x6f0 [ 61.128061][ T6227] ? media_pipeline_add_pad+0xf3/0xa00 [ 61.128138][ T6227] ? krealloc_node_align_noprof+0x23c/0x3e0 [ 61.128156][ T6227] media_pipeline_add_pad+0xf3/0xa00 [ 61.128174][ T6227] __media_pipeline_start+0xa4d/0x22b0 [ 61.128196][ T6227] ? __pfx___media_pipeline_start+0x10/0x10 [ 61.128215][ T6227] ? __mutex_lock+0x26a/0x1b90 [ 61.128312][ T6227] media_pipeline_start+0x49/0x70 [ 61.128329][ T6227] video_device_pipeline_start+0x79/0xa0 [ 61.128342][ T6227] vimc_capture_start_streaming+0x7d/0x130 [ 61.128375][ T6227] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 61.128388][ T6227] vb2_start_streaming+0x162/0x570 [ 61.128403][ T6227] ? __bitmap_weight+0xd7/0x110 [ 61.128463][ T6227] vb2_core_streamon+0x26a/0x3c0 [ 61.128478][ T6227] vb2_ioctl_streamon+0xd9/0x150 [ 61.128491][ T6227] ? v4l_streamon+0x1a/0xa0 [ 61.128504][ T6227] __video_do_ioctl+0xaf8/0xdc0 [ 61.128516][ T6227] ? __might_fault+0xc5/0x140 [ 61.128530][ T6227] ? __pfx___video_do_ioctl+0x10/0x10 [ 61.128546][ T6227] video_usercopy+0x47a/0x1740 [ 61.128557][ T6227] ? __pfx___video_do_ioctl+0x10/0x10 [ 61.128568][ T6227] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.128604][ T6227] ? __pfx_video_usercopy+0x10/0x10 [ 61.128623][ T6227] v4l2_ioctl+0x1bd/0x250 [ 61.128634][ T6227] ? __pfx_v4l2_ioctl+0x10/0x10 [ 61.128646][ T6227] __x64_sys_ioctl+0x18e/0x210 [ 61.128664][ T6227] do_syscall_64+0x106/0xf80 [ 61.128675][ T6227] ? clear_bhb_loop+0x40/0x90 [ 61.128689][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.128701][ T6227] RIP: 0033:0x7fbaf139c629 [ 61.128710][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.128720][ T6227] RSP: 002b:00007fbaf2281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.128739][ T6227] RAX: ffffffffffffffda RBX: 00007fbaf1615fa0 RCX: 00007fbaf139c629 [ 61.128745][ T6227] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000003 [ 61.128751][ T6227] RBP: 00007fbaf2281090 R08: 0000000000000000 R09: 0000000000000000 [ 61.128758][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.128764][ T6227] R13: 00007fbaf1616038 R14: 00007fbaf1615fa0 R15: 00007ffe1cd68878 [ 61.128777][ T6227] [ 61.226220][ T6232] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 61.236266][ T6224] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 61.274368][ T6224] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 61.320651][ T5926] Bluetooth: hci0: command 0x040f tx timeout [ 61.329865][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.359744][ T40] audit: type=1400 audit(1771718055.766:223): avc: denied { read } for pid=6234 comm="syz.0.62" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.371805][ T40] audit: type=1400 audit(1771718055.766:224): avc: denied { open } for pid=6234 comm="syz.0.62" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.381932][ T40] audit: type=1400 audit(1771718055.766:225): avc: denied { ioctl } for pid=6234 comm="syz.0.62" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.392542][ T40] audit: type=1400 audit(1771718055.766:226): avc: denied { set_context_mgr } for pid=6234 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.423321][ T40] audit: type=1400 audit(1771718055.826:227): avc: denied { getopt } for pid=6234 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.451734][ T53] cfg80211: failed to load regulatory.db [ 61.476843][ T6024] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.480485][ T6024] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.483534][ T6024] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.486360][ T6024] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.491227][ T6024] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.496565][ T6024] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 61.513459][ T1458] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.658949][ T1458] usb 7-1: device descriptor read/64, error -71 [ 61.697343][ T9] usb 6-1: USB disconnect, device number 2 [ 61.905713][ T1458] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.001683][ T6235] syz.0.62 (6235): drop_caches: 2 [ 62.048287][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.053127][ T1458] usb 7-1: device descriptor read/64, error -71 [ 62.056123][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.061546][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.065615][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.070412][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.075383][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.080270][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.116861][ T6244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.119748][ T5936] Bluetooth: hci1: command 0x0419 tx timeout [ 62.121403][ T6244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.123991][ T5932] Bluetooth: hci2: command 0x0419 tx timeout [ 62.127852][ T6244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.128930][ T5926] Bluetooth: hci3: command 0x0419 tx timeout [ 62.129891][ T6240] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 62.169705][ T1458] usb usb7-port1: attempt power cycle [ 62.187790][ T6246] process 'syz.3.65' launched './file0' with NULL argv: empty string added [ 62.200646][ T6248] netlink: 'syz.0.64': attribute type 7 has an invalid length. [ 62.435922][ T6278] xt_hashlimit: size too large, truncated to 1048576 [ 62.509997][ T6282] option changes via remount are deprecated (pid=6277 comm=syz.0.75) [ 62.514000][ T6282] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 62.524623][ T1458] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.533620][ T6282] Bluetooth: MGMT ver 1.23 [ 62.549895][ T1458] usb 7-1: device descriptor read/8, error -71 [ 62.798642][ T6301] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 62.804134][ T1458] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.819603][ T1458] usb 7-1: device descriptor read/8, error -71 [ 62.871611][ T6308] __nla_validate_parse: 3 callbacks suppressed [ 62.871622][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 62.936782][ T1458] usb usb7-port1: unable to enumerate USB device [ 62.984206][ T6313] vivid-000: ================= START STATUS ================= [ 62.987913][ T6313] vivid-000: Enable Output Cropping: true [ 62.991652][ T6313] vivid-000: Enable Output Composing: true [ 62.994407][ T6313] vivid-000: Enable Output Scaler: true [ 62.996926][ T6313] vivid-000: Tx RGB Quantization Range: Automatic [ 63.000231][ T6313] vivid-000: Transmit Mode: HDMI [ 63.002507][ T6313] vivid-000: Hotplug Present: 0x00000000 [ 63.005033][ T6313] vivid-000: RxSense Present: 0x00000000 [ 63.007540][ T6313] vivid-000: EDID Present: 0x00000000 [ 63.010563][ T6313] vivid-000: ================== END STATUS ================== [ 63.242582][ T6332] capability: warning: `syz.3.93' uses 32-bit capabilities (legacy support in use) [ 63.399012][ T5932] Bluetooth: hci0: command 0x040f tx timeout [ 63.581066][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.98'. [ 63.632669][ T6357] netlink: 788 bytes leftover after parsing attributes in process `syz.1.99'. [ 63.636726][ T6357] bond0: entered allmulticast mode [ 63.639106][ T6357] bond_slave_0: entered allmulticast mode [ 63.641425][ T6357] bond_slave_1: entered allmulticast mode [ 63.828059][ T6364] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.833169][ T6364] Cannot find add_set index 0 as target [ 64.198999][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 64.199058][ T5936] Bluetooth: hci2: command 0x0419 tx timeout [ 64.199091][ T5926] Bluetooth: hci1: command 0x0419 tx timeout [ 64.397677][ T6376] random: crng reseeded on system resumption [ 64.446766][ T6383] netlink: 'syz.3.109': attribute type 4 has an invalid length. [ 64.575585][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 64.614493][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 64.618415][ T6391] nbd: device at index 64 is going down [ 64.674378][ T5935] udevd[5935]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 64.754684][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 64.764063][ T6396] netlink: 64 bytes leftover after parsing attributes in process `syz.1.111'. [ 64.952451][ T6401] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 64.957805][ T6401] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 65.344698][ T6388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.478978][ T5936] Bluetooth: hci0: command 0x040f tx timeout [ 65.885873][ T6423] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.888620][ T6423] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 65.891426][ T6423] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.893914][ T6423] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 65.916297][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.920260][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.925762][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.931742][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.198360][ T1237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.202925][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'. [ 66.217440][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 66.217454][ T40] audit: type=1400 audit(1771718060.616:314): avc: denied { name_connect } for pid=6426 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.278995][ T5936] Bluetooth: hci2: command 0x0419 tx timeout [ 66.281435][ T5936] Bluetooth: hci3: command 0x0419 tx timeout [ 66.308904][ T40] audit: type=1400 audit(1771718060.706:315): avc: denied { execute } for pid=6428 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.320021][ T40] audit: type=1400 audit(1771718060.706:316): avc: denied { execute_no_trans } for pid=6428 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.330773][ T1237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.394843][ T40] audit: type=1400 audit(1771718060.796:317): avc: denied { mount } for pid=6432 comm="syz.1.126" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.409150][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.413584][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.417056][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.425943][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.429498][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.437643][ T1237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.454900][ T40] audit: type=1400 audit(1771718060.856:318): avc: denied { getopt } for pid=6438 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.461372][ T40] audit: type=1400 audit(1771718060.856:319): avc: denied { read } for pid=6438 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.589315][ T6448] netlink: 120 bytes leftover after parsing attributes in process `syz.2.127'. [ 66.595156][ T6448] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 66.604219][ T1237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.607195][ T6448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.127'. [ 66.699333][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 66.784632][ T6463] loop9: detected capacity change from 0 to 7 [ 66.794537][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.798614][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.802068][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.805356][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.809143][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.813256][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.817076][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.820726][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.825206][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.828498][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.831735][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.834778][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.837560][ T6463] ldm_validate_partition_table(): Disk read failed. [ 66.837751][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.844247][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.848257][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.851444][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.855543][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.858377][ T1237] bridge_slave_1: left allmulticast mode [ 66.859674][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.860005][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.861880][ T1237] bridge_slave_1: left promiscuous mode [ 66.864996][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.869013][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.870994][ T6463] Dev loop9: unable to read RDB block 0 [ 66.883221][ T1237] bridge_slave_0: left allmulticast mode [ 66.885560][ T1237] bridge_slave_0: left promiscuous mode [ 66.888062][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.890027][ T6463] loop9: unable to read partition table [ 66.893348][ T6463] loop9: partition table beyond EOD, truncated [ 66.895841][ T6463] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 66.944278][ T40] audit: type=1400 audit(1771718061.346:320): avc: denied { read write } for pid=6470 comm="syz.2.133" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.952484][ T40] audit: type=1400 audit(1771718061.346:321): avc: denied { open } for pid=6470 comm="syz.2.133" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.960331][ T40] audit: type=1400 audit(1771718061.346:322): avc: denied { setopt } for pid=6470 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.994553][ T40] audit: type=1400 audit(1771718061.396:323): avc: denied { map } for pid=6470 comm="syz.2.133" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.151562][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.159953][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.166059][ T1237] bond0 (unregistering): Released all slaves [ 67.176536][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.179286][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.181665][ T6435] bridge_slave_0: entered allmulticast mode [ 67.184421][ T6435] bridge_slave_0: entered promiscuous mode [ 67.190367][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.192780][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.195048][ T6435] bridge_slave_1: entered allmulticast mode [ 67.198020][ T6435] bridge_slave_1: entered promiscuous mode [ 67.215879][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.220624][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.253286][ T6435] team0: Port device team_slave_0 added [ 67.256994][ T6435] team0: Port device team_slave_1 added [ 67.257175][ T6476] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 67.262147][ T6476] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 67.275762][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.278085][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.286917][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.291859][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.294503][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.303080][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.319990][ T5932] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 67.320937][ T6478] fuse: Unknown parameter 'fd5adSqDC쬶QtehlT| m)eHVgJC`Ձ츘W2#Pb}bP7%jBN6ޛ' [ 67.322253][ T5932] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 67.333422][ T6479] fuse: Unknown parameter 'fd5adSqDC쬶QtehlT| m)eHVgJC`Ձ츘W2#Pb}bP7%jBN6ޛ' [ 67.348361][ T6478] Bluetooth: hci0: unsupported parameter 255 [ 67.351752][ T6478] Bluetooth: hci0: unsupported parameter 255 [ 67.430932][ T6435] hsr_slave_0: entered promiscuous mode [ 67.434632][ T6435] hsr_slave_1: entered promiscuous mode [ 67.437629][ T6435] debugfs: 'hsr0' already exists in 'hsr' [ 67.440400][ T6435] Cannot create hsr debugfs directory [ 67.561021][ T5932] Bluetooth: hci0: command 0x040f tx timeout [ 67.616093][ T1237] hsr_slave_0: left promiscuous mode [ 67.622039][ T1237] hsr_slave_1: left promiscuous mode [ 67.624243][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.626859][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.631500][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.633911][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.641157][ T1237] veth1_macvtap: left promiscuous mode [ 67.643143][ T1237] veth0_macvtap: left promiscuous mode [ 67.645559][ T1237] veth1_vlan: left promiscuous mode [ 67.647997][ T1237] veth0_vlan: left promiscuous mode [ 67.776849][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 67.788175][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 67.819718][ T29] net_ratelimit: 310 callbacks suppressed [ 67.819735][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.946274][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.973036][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.983368][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.004026][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.093588][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.105760][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.138275][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.141468][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.153182][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.156047][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.215772][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.216368][ T6518] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.375932][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.449005][ T5932] Bluetooth: hci1: command tx timeout [ 68.504195][ T6536] netlink: set zone limit has 4 unknown bytes [ 68.645297][ T6435] veth0_vlan: entered promiscuous mode [ 68.665093][ T6435] veth1_vlan: entered promiscuous mode [ 68.684296][ T6435] veth0_macvtap: entered promiscuous mode [ 68.691612][ T6435] veth1_macvtap: entered promiscuous mode [ 68.711289][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.718010][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.725694][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.729171][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.741586][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744770][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.759256][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.770171][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.813951][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.816513][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.840738][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.850354][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.858993][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.118952][ T53] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 69.249319][ T53] usb 6-1: device descriptor read/64, error -71 [ 69.278974][ T830] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 69.410118][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.413729][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.417963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.425405][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.450209][ T830] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 69.455179][ T830] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 69.460017][ T830] usb 7-1: config 0 interface 0 has no altsetting 0 [ 69.464914][ T830] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.469004][ T830] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 69.472349][ T830] usb 7-1: Product: syz [ 69.473642][ T830] usb 7-1: Manufacturer: syz [ 69.475113][ T830] usb 7-1: SerialNumber: syz [ 69.489051][ T830] usb 7-1: config 0 descriptor?? [ 69.498618][ T830] usb 7-1: selecting invalid altsetting 0 [ 69.509148][ T53] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 69.619203][ T6600] tipc: Failed to remove unknown binding: 66,0,0/0:1163064591/1163064592 [ 69.622429][ T6600] __nla_validate_parse: 2 callbacks suppressed [ 69.622438][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 69.639001][ T53] usb 6-1: device descriptor read/64, error -71 [ 69.666356][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 69.666413][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 69.676174][ T6603] netlink: 256 bytes leftover after parsing attributes in process `syz.4.156'. [ 69.707777][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.713321][ T6605] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 69.716895][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.719829][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.722727][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.723901][ T6605] netlink: 'syz.4.157': attribute type 89 has an invalid length. [ 69.725340][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.728391][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 69.731219][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.731386][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.739442][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.741759][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.746805][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.749264][ T53] usb usb6-port1: attempt power cycle [ 69.752215][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.754674][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.757780][ T6585] usb 7-1: cannot submit urb 0, error -90: internal error [ 69.775670][ T830] usb 7-1: USB disconnect, device number 6 [ 69.970263][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 69.986889][ T6619] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 70.089016][ T53] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 70.092549][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 70.110934][ T53] usb 6-1: device descriptor read/8, error -71 [ 70.352078][ T53] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 70.371249][ T53] usb 6-1: device descriptor read/8, error -71 [ 70.479778][ T53] usb usb6-port1: unable to enumerate USB device [ 70.518946][ T5932] Bluetooth: hci1: command tx timeout [ 70.567230][ T6651] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 70.805132][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 70.808306][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 71.096563][ T6669] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 71.119096][ T5985] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 71.311119][ T5985] usb 7-1: config index 0 descriptor too short (expected 41689, got 147) [ 71.314378][ T5985] usb 7-1: config 232 has too many interfaces: 136, using maximum allowed: 32 [ 71.318197][ T5985] usb 7-1: config 232 has an invalid descriptor of length 148, skipping remainder of the config [ 71.325490][ T5985] usb 7-1: config 232 has 0 interfaces, different from the descriptor's value: 136 [ 71.331691][ T5985] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.335619][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.339424][ T5985] usb 7-1: Product: syz [ 71.341378][ T5985] usb 7-1: Manufacturer: syz [ 71.343425][ T5985] usb 7-1: SerialNumber: syz [ 71.599889][ T5985] usb 7-1: USB disconnect, device number 7 [ 71.863119][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 71.863130][ T40] audit: type=1400 audit(1771718066.266:362): avc: denied { create } for pid=6674 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.871723][ T40] audit: type=1400 audit(1771718066.266:363): avc: denied { ioctl } for pid=6674 comm="syz.1.176" path="socket:[13714]" dev="sockfs" ino=13714 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.887258][ T40] audit: type=1400 audit(1771718066.266:364): avc: denied { setopt } for pid=6674 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.085010][ T6694] netlink: 'syz.1.182': attribute type 11 has an invalid length. [ 72.120010][ T6699] capability: warning: `syz.4.183' uses deprecated v2 capabilities in a way that may be insecure [ 72.128867][ T40] audit: type=1400 audit(1771718066.526:365): avc: denied { setopt } for pid=6698 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.138162][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 72.141282][ T6701] netlink: 'syz.1.184': attribute type 21 has an invalid length. [ 72.150769][ T6701] netlink: 'syz.1.184': attribute type 21 has an invalid length. [ 72.150780][ T1237] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.156415][ T1237] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.160294][ T1237] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.163955][ T1237] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.234724][ T6704] sp0: Synchronizing with TNC [ 72.250375][ T6709] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.260424][ T40] audit: type=1400 audit(1771718066.656:366): avc: denied { getopt } for pid=6708 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.285679][ T40] audit: type=1400 audit(1771718066.656:367): avc: denied { write } for pid=6708 comm="syz.1.187" path="socket:[12150]" dev="sockfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 72.314591][ T40] audit: type=1400 audit(1771718066.716:368): avc: denied { create } for pid=6705 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.533317][ T40] audit: type=1400 audit(1771718066.936:369): avc: denied { mount } for pid=6725 comm="syz.2.192" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.571679][ T40] audit: type=1400 audit(1771718066.966:370): avc: denied { unmount } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.594636][ T40] audit: type=1400 audit(1771718066.996:371): avc: denied { create } for pid=6729 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.833491][ T6740] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 72.835764][ T6740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.839324][ T6740] vhci_hcd vhci_hcd.0: Device attached [ 72.840187][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.844614][ T6740] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 72.847369][ T6740] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.851611][ T6740] vhci_hcd vhci_hcd.0: Device attached [ 72.855772][ T6740] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 72.990360][ T24] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 72.995364][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.001744][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.004873][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.007913][ T24] usb 6-1: Product: ] [ 73.009480][ T24] usb 6-1: Manufacturer: ꚁ㉸騅科릉╶폖㡎ᇄ姇㔱蕓若鰁鯷깃Ƈ㟁椉욀滞㻁걾燢䎽솵᲏衫뇌建衔먉㤢ꇬ❎閇ࣰ凹ꯝᘌￄ쑓࢐ [ 73.016845][ T24] usb 6-1: SerialNumber: 뫗듕긵刨ᱱ⹐㸫曹㻘륣䜙뷧剿鸦㩡袣柌辦址Ꞵ䖴韵垏䶔⓹쉧翠ᢃ啔ሦ㷷텱ᴼﻩ転ﱼ⎕ [ 73.089007][ T6024] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 73.286135][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.292164][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.307007][ T24] usb 6-1: 0:2 : does not exist [ 73.323248][ T24] usb 6-1: USB disconnect, device number 7 [ 73.332422][ T5935] udevd[5935]: setting mode of /dev/bus/usb/006/007 to 020664 failed: No such file or directory [ 73.338387][ T5935] udevd[5935]: setting owner of /dev/bus/usb/006/007 to uid=0, gid=0 failed: No such file or directory [ 73.355216][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.539332][ T6743] vhci_hcd: connection closed [ 73.539777][ T6741] vhci_hcd: connection reset by peer [ 73.542695][ T98] vhci_hcd vhci_hcd.4: stop threads [ 73.546171][ T98] vhci_hcd vhci_hcd.4: release socket [ 73.549615][ T98] vhci_hcd vhci_hcd.4: disconnect device [ 73.552408][ T98] vhci_hcd vhci_hcd.4: stop threads [ 73.554359][ T98] vhci_hcd vhci_hcd.4: release socket [ 73.556172][ T98] vhci_hcd vhci_hcd.4: disconnect device [ 73.569224][ T3246] net_ratelimit: 6 callbacks suppressed [ 73.569238][ T3246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.668360][ T6752] (syz.2.198,6752,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 73.673375][ T6752] (syz.2.198,6752,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 73.675705][ T6752] (syz.2.198,6752,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 73.678357][ T6752] (syz.2.198,6752,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 73.967892][ T6759] ISOFS: Unable to identify CD-ROM format. [ 74.170557][ T6772] netlink: 'syz.4.203': attribute type 4 has an invalid length. [ 74.175810][ T6772] program syz.4.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.215794][ T6774] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 74.235863][ T6774] bond1 (unregistering): Released all slaves [ 74.588372][ T5936] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 74.593771][ T5936] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 74.594585][ T6784] tipc: Enabling of bearer rejected, failed to enable media [ 74.599283][ T3246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.990771][ T6791] loop8: detected capacity change from 0 to 7 [ 74.996693][ T6791] Dev loop8: unable to read RDB block 7 [ 74.999588][ T6791] loop8: AHDI p1 p2 p3 [ 75.001445][ T6791] loop8: partition table partially beyond EOD, truncated [ 75.006686][ T6791] loop8: p1 start 1601398130 is beyond EOD, truncated [ 75.010207][ T6791] loop8: p2 start 1702059890 is beyond EOD, truncated [ 75.092708][ T5935] Dev loop8: unable to read RDB block 7 [ 75.095277][ T5935] loop8: AHDI p1 p2 p3 [ 75.097234][ T5935] loop8: partition table partially beyond EOD, truncated [ 75.102432][ T5935] loop8: p1 start 1601398130 is beyond EOD, truncated [ 75.105478][ T5935] loop8: p2 start 1702059890 is beyond EOD, truncated [ 75.112642][ T6791] Dev loop8: unable to read RDB block 7 [ 75.115796][ T6791] loop8: AHDI p1 p2 p3 [ 75.117779][ T6791] loop8: partition table partially beyond EOD, truncated [ 75.121416][ T6791] loop8: p1 start 1601398130 is beyond EOD, truncated [ 75.124880][ T6791] loop8: p2 start 1702059890 is beyond EOD, truncated [ 75.479861][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.641461][ T3246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.713151][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 75.887004][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.904922][ T6821] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 75.966552][ T6823] __nla_validate_parse: 7 callbacks suppressed [ 75.966568][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.973801][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.979119][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.983241][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.987461][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 75.997036][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.002195][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.006259][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.010759][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.014903][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.064910][ T6830] syzkaller0: entered promiscuous mode [ 76.067599][ T6830] syzkaller0: entered allmulticast mode [ 76.189434][ T6833] kvm: user requested TSC rate below hardware speed [ 76.368458][ T6847] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 76.377818][ T6847] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 76.445280][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.448920][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.459168][ T6850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.463706][ T6850] bond_slave_0: left allmulticast mode [ 76.470092][ T6850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.476039][ T6850] bond_slave_1: left allmulticast mode [ 76.480332][ T6850] bond0 (unregistering): Released all slaves [ 76.685001][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.805706][ T6869] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 76.824915][ T5936] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 77.099430][ T3246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.143872][ T6879] fuse: Unknown parameter '' [ 77.306123][ T6877] syz.1.234 (6877): drop_caches: 2 [ 77.324448][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 77.324463][ T40] audit: type=1400 audit(1771718071.726:403): avc: denied { map } for pid=6892 comm="syz.4.239" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 77.468086][ T40] audit: type=1400 audit(1771718071.866:404): avc: denied { watch_reads } for pid=6909 comm="syz.1.243" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.728929][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.189662][ T6024] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 78.202874][ T6933] loop2: detected capacity change from 0 to 7 [ 78.214247][ T6933] Dev loop2: unable to read RDB block 7 [ 78.216743][ T6933] loop2: AHDI p1 p2 p3 [ 78.218387][ T6933] loop2: partition table partially beyond EOD, truncated [ 78.223232][ T6933] loop2: p1 start 1818582900 is beyond EOD, truncated [ 78.226065][ T6933] loop2: p3 start 335544320 is beyond EOD, truncated [ 78.270129][ T6936] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 78.274098][ T40] audit: type=1400 audit(1771718072.676:405): avc: denied { remount } for pid=6935 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.294512][ T40] audit: type=1400 audit(1771718072.696:406): avc: denied { map } for pid=6937 comm="syz.2.254" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.309719][ T40] audit: type=1400 audit(1771718072.696:407): avc: denied { execute } for pid=6937 comm="syz.2.254" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.394505][ T6946] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.411186][ T40] audit: type=1400 audit(1771718072.816:408): avc: denied { setopt } for pid=6951 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.497858][ T6947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.599867][ T5936] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 78.603078][ T5936] Bluetooth: hci1: Injecting HCI hardware error event [ 78.619817][ T40] audit: type=1400 audit(1771718073.026:409): avc: denied { create } for pid=6959 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.628918][ T40] audit: type=1400 audit(1771718073.026:410): avc: denied { write } for pid=6959 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.631304][ T6960] netlink: 'syz.4.259': attribute type 9 has an invalid length. [ 78.738945][ T39] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.759348][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.876878][ T40] audit: type=1400 audit(1771718073.276:411): avc: denied { read } for pid=6966 comm="syz.4.260" path="socket:[14963]" dev="sockfs" ino=14963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.900101][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 78.903112][ T39] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.905792][ T39] usb 7-1: config 179 has no interface number 0 [ 78.907771][ T39] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 78.913521][ T39] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 78.917173][ T39] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 78.923160][ T39] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 78.926885][ T39] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.931305][ T39] usb 7-1: config 179 interface 65 has no altsetting 0 [ 78.933810][ T39] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 78.936691][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.948553][ T6962] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.970285][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input8 [ 79.019953][ T5319] input input8: unable to receive magic message: -110 [ 79.026697][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.032731][ T5319] input input8: unable to receive magic message: -32 [ 79.035812][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.050477][ T5319] input input8: unable to receive magic message: -32 [ 79.053739][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.058707][ T5935] input input8: unable to receive magic message: -32 [ 79.068603][ T5319] input input8: unable to receive magic message: -32 [ 79.072263][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.076789][ T5319] input input8: unable to receive magic message: -32 [ 79.089524][ T5319] input input8: unable to receive magic message: -32 [ 79.109037][ T5319] input input8: unable to receive magic message: -32 [ 79.155552][ T6962] input input8: unable to receive magic message: -32 [ 79.167217][ T24] usb 7-1: USB disconnect, device number 8 [ 79.167256][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.215678][ T40] audit: type=1400 audit(1771718073.616:412): avc: denied { connect } for pid=6979 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.264549][ T6980] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 79.384760][ T6997] ip6erspan0: entered promiscuous mode [ 79.399692][ T5926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.404646][ T5926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.408437][ T5926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.412560][ T5926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.416841][ T5926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.480026][ T9] usb usb46-port1: attempt power cycle [ 79.600158][ T5926] Bluetooth: hci3: Malformed Event: 0x2f [ 79.602598][ T7021] tmpfs: Bad value for 'mpol' [ 79.604225][ T6998] chnl_net:caif_netlink_parms(): no params data found [ 79.640082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.668263][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.671383][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.674381][ T6998] bridge_slave_0: entered allmulticast mode [ 79.677343][ T6998] bridge_slave_0: entered promiscuous mode [ 79.681716][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.684730][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.689489][ T6998] bridge_slave_1: entered allmulticast mode [ 79.693091][ T6998] bridge_slave_1: entered promiscuous mode [ 79.721685][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.728477][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.756182][ T7031] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 79.813815][ T213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.828223][ T6998] team0: Port device team_slave_0 added [ 79.834423][ T6998] team0: Port device team_slave_1 added [ 79.858429][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.862626][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.873808][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.880103][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.882993][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.894418][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.931718][ T213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.964083][ T6998] hsr_slave_0: entered promiscuous mode [ 79.966949][ T6998] hsr_slave_1: entered promiscuous mode [ 79.969575][ T6998] debugfs: 'hsr0' already exists in 'hsr' [ 79.971557][ T6998] Cannot create hsr debugfs directory [ 80.059535][ T9] usb usb46-port1: unable to enumerate USB device [ 80.085950][ T213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.190206][ T213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.220243][ T6998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.225674][ T6998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.232304][ T6998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.247027][ T6998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.287989][ T7066] program syz.2.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.288934][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.295061][ T6998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.298368][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.301573][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.355034][ T213] bridge_slave_1: left allmulticast mode [ 80.356885][ T213] bridge_slave_1: left promiscuous mode [ 80.358763][ T213] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.365760][ T213] bridge_slave_0: left allmulticast mode [ 80.367927][ T213] bridge_slave_0: left promiscuous mode [ 80.370942][ T213] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.472239][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.479128][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.491096][ T213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.496000][ T213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.500239][ T213] bond0 (unregistering): Released all slaves [ 80.509020][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.513962][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.533953][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.539718][ T6024] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 80.544092][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.561879][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.564987][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.577094][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.580340][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.709989][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 80.721939][ T6024] usb 7-1: Using ep0 maxpacket: 8 [ 80.726519][ T6024] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 80.731229][ T6024] usb 7-1: config 0 has no interface number 0 [ 80.734112][ T6024] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.734436][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.749508][ T6024] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 80.754823][ T6024] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.762366][ T6024] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.768168][ T6024] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 80.772942][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.786368][ T6024] usb 7-1: config 0 descriptor?? [ 80.803946][ T6024] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 80.813543][ T213] hsr_slave_0: left promiscuous mode [ 80.816510][ T213] hsr_slave_1: left promiscuous mode [ 80.820049][ T213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.826050][ T213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.837060][ T213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.840394][ T213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.846706][ T213] veth1_macvtap: left promiscuous mode [ 80.848528][ T213] veth0_macvtap: left promiscuous mode [ 80.852899][ T213] veth1_vlan: left promiscuous mode [ 80.854777][ T213] veth0_vlan: left promiscuous mode [ 80.860177][ T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.863320][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 80.866937][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.877187][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.883810][ T24] usb 9-1: Product: syz [ 80.885228][ T24] usb 9-1: Manufacturer: syz [ 80.886740][ T24] usb 9-1: SerialNumber: syz [ 80.904891][ T24] usb 9-1: config 0 descriptor?? [ 80.920603][ T7106] ata1.00: invalid multi_count 128 ignored [ 80.933194][ T24] usb 9-1: selecting invalid altsetting 0 [ 80.985160][ T7108] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.003988][ T6024] usb 7-1: USB disconnect, device number 9 [ 81.015871][ T6024] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 81.084161][ T213] team0 (unregistering): Port device team_slave_1 removed [ 81.095287][ T213] team0 (unregistering): Port device team_slave_0 removed [ 81.113116][ T29] usb 9-1: USB disconnect, device number 2 [ 81.151104][ T7116] loop9: detected capacity change from 0 to 7 [ 81.162872][ T7116] Dev loop9: unable to read RDB block 7 [ 81.165360][ T7116] loop9: unable to read partition table [ 81.167965][ T7116] loop9: partition table beyond EOD, truncated [ 81.172261][ T7116] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 81.309278][ T6998] veth0_vlan: entered promiscuous mode [ 81.330184][ T6998] veth1_vlan: entered promiscuous mode [ 81.356573][ T6998] veth0_macvtap: entered promiscuous mode [ 81.362571][ T6998] veth1_macvtap: entered promiscuous mode [ 81.375805][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.385612][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.413254][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.416705][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.426458][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.430151][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.478954][ T5926] Bluetooth: hci4: command tx timeout [ 81.488239][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.492073][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.511908][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.514457][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.524860][ T7129] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 81.631620][ T7140] __nla_validate_parse: 103 callbacks suppressed [ 81.631639][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 81.638477][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 81.678758][ T7145] tipc: Enabling of bearer rejected, failed to enable media [ 81.701672][ T7148] evm: overlay not supported [ 81.797521][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 81.803899][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 82.250405][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 82.322526][ T7183] random: crng reseeded on system resumption [ 82.330184][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 82.330200][ T40] audit: type=1400 audit(1771718076.726:426): avc: denied { append } for pid=7182 comm="syz.4.303" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.347802][ T7183] Unrecognized hibernate image header format! [ 82.352460][ T7183] PM: hibernation: Image mismatch: architecture specific data [ 82.358433][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.365773][ T7183] bridge_slave_0 (unregistering): left allmulticast mode [ 82.368553][ T7183] bridge_slave_0 (unregistering): left promiscuous mode [ 82.372570][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.663211][ T7200] ip6gre1: entered allmulticast mode [ 82.667938][ T7200] team0: Device ip6gre1 is of different type [ 82.681934][ T10] IPVS: starting estimator thread 0... [ 82.751518][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 82.779055][ T7204] IPVS: using max 30 ests per chain, 72000 per kthread [ 82.995798][ T7232] openvswitch: netlink: IP tunnel dst address not specified [ 83.000145][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 83.010757][ T7233] syz.2.315: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 83.013604][ T7235] syz.2.315: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 83.119020][ T40] audit: type=1400 audit(1771718077.516:427): avc: denied { setopt } for pid=7240 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.127201][ T40] audit: type=1400 audit(1771718077.526:428): avc: denied { ioctl } for pid=7240 comm="syz.1.317" path="socket:[16213]" dev="sockfs" ino=16213 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.138044][ T40] audit: type=1400 audit(1771718077.526:429): avc: denied { connect } for pid=7240 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.318983][ T53] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 83.411520][ T7256] syz.1.323 (7256): drop_caches: 2 [ 83.416325][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 83.419780][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 83.423312][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 83.426787][ T7256] netlink: 'syz.1.323': attribute type 5 has an invalid length. [ 83.474169][ T53] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 83.477971][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.484220][ T53] usb 7-1: Product: syz [ 83.486032][ T53] usb 7-1: Manufacturer: syz [ 83.488032][ T53] usb 7-1: SerialNumber: syz [ 83.496544][ T7259] syzkaller0: entered promiscuous mode [ 83.498999][ T7259] syzkaller0: entered allmulticast mode [ 83.559006][ T5926] Bluetooth: hci4: command tx timeout [ 83.639854][ T40] audit: type=1326 audit(1771718078.046:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7265 comm="syz.1.327" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f235599c629 code=0x0 [ 83.698866][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 83.704347][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 83.708785][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 83.716792][ T53] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 83.734222][ T53] usb 7-1: USB disconnect, device number 10 [ 83.756121][ T40] audit: type=1400 audit(1771718078.156:431): avc: denied { lock } for pid=7275 comm="syz.2.329" path="socket:[17503]" dev="sockfs" ino=17503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 83.762950][ T7274] syz.4.328 (7274): attempted to duplicate a private mapping with mremap. This is not supported. [ 83.773410][ T40] audit: type=1400 audit(1771718078.176:432): avc: denied { load_policy } for pid=7268 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.773726][ T7274] SELinux: policydb string length 791700844 does not match expected length 8 [ 83.787033][ T7274] SELinux: failed to load policy [ 83.848093][ T7278] loop3: detected capacity change from 0 to 7 [ 83.857311][ T7278] Dev loop3: unable to read RDB block 7 [ 83.860112][ T7278] loop3: unable to read partition table [ 83.862800][ T7278] loop3: partition table beyond EOD, truncated [ 83.865679][ T7278] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 83.909302][ T7280] geneve2: entered promiscuous mode [ 83.911620][ T7280] geneve2: entered allmulticast mode [ 83.914334][ T213] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.917535][ T213] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.932738][ T213] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.935802][ T213] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.141794][ T40] audit: type=1400 audit(1771718078.546:433): avc: denied { mount } for pid=7293 comm="syz.2.335" name="/" dev="ramfs" ino=17265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.240053][ T7304] netlink: 'syz.2.337': attribute type 10 has an invalid length. [ 84.242725][ T7304] bridge_slave_1: left allmulticast mode [ 84.244645][ T7304] bridge_slave_1: left promiscuous mode [ 84.246670][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.254230][ T7304] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.260600][ T40] audit: type=1400 audit(1771718078.666:434): avc: denied { listen } for pid=7303 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.346575][ T7306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3873 sclass=netlink_route_socket pid=7306 comm=syz.2.338 [ 84.517859][ T7312] SELinux: failed to load policy [ 84.525292][ T7314] loop4: detected capacity change from 0 to 7 [ 84.538976][ T7314] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.541408][ T7314] loop4: partition table partially beyond EOD, truncated [ 84.544660][ T7314] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 84.573110][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 84.589243][ T40] audit: type=1400 audit(1771718078.996:435): avc: denied { create } for pid=7318 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.636522][ T7327] binder: 7326:7327 ioctl 4018620d 0 returned -22 [ 84.694188][ T7336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.802743][ T7352] kAFS: No cell specified [ 84.873651][ T7355] sd 0:0:0:0: PR command failed: 1026 [ 84.875982][ T7355] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 84.879021][ T7355] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 85.110953][ T7386] openvswitch: netlink: Missing key (keys=40, expected=100) [ 85.133295][ T7386] affs: No valid root block on device nullb0 [ 85.208525][ T7393] vlan2: entered promiscuous mode [ 85.215291][ T7393] bridge0: entered promiscuous mode [ 85.314146][ T7403] overlayfs: failed to resolve './file0': -40 [ 85.538748][ T7431] hugetlbfs: Bad value '$' for mount option 'size' [ 85.538748][ T7431] [ 85.638937][ T5926] Bluetooth: hci4: command tx timeout [ 85.662952][ T7434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.779139][ T830] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 85.880045][ T7447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 85.882930][ T7447] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.886516][ T7447] vhci_hcd vhci_hcd.0: Device attached [ 85.939229][ T830] usb 10-1: Using ep0 maxpacket: 8 [ 85.954164][ T830] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.968974][ T830] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.973821][ T830] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.978080][ T830] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.998963][ T830] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.002982][ T830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.073728][ T7448] vhci_hcd: connection closed [ 86.074082][ T213] vhci_hcd vhci_hcd.2: stop threads [ 86.077855][ T213] vhci_hcd vhci_hcd.2: release socket [ 86.079877][ T213] vhci_hcd vhci_hcd.2: disconnect device [ 86.218556][ T830] usb 10-1: usb_control_msg returned -32 [ 86.221007][ T830] usbtmc 10-1:16.0: can't read capabilities [ 86.286723][ T7453] gretap1: entered promiscuous mode [ 86.609605][ T7463] ubi31: attaching mtd0 [ 86.613098][ T7460] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 86.614525][ T7463] ubi31: scanning is finished [ 86.615897][ T7460] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.617413][ T7463] ubi31: empty MTD device detected [ 86.621297][ T7460] vhci_hcd vhci_hcd.0: Device attached [ 86.779279][ T7463] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 86.782557][ T7463] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 86.785743][ T7463] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 86.788727][ T7463] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 86.792155][ T7463] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 86.795022][ T7463] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 86.798470][ T7463] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2827119745 [ 86.798978][ T830] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 86.802697][ T7463] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 86.809310][ T7467] ubi31: background thread "ubi_bgt31d" started, PID 7467 [ 86.851226][ T7469] __nla_validate_parse: 8 callbacks suppressed [ 86.851242][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 86.859216][ T830] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 86.922891][ T7474] ptrace attach of "/syz-executor exec"[5922] was attempted by " 0 @  ]"[7474] [ 86.950229][ T7474] netlink: 64 bytes leftover after parsing attributes in process `syz.2.388'. [ 87.008258][ T7484] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 87.443658][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.551417][ T7501] loop4: detected capacity change from 0 to 7 [ 87.558958][ T7501] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 87.561344][ T7501] loop4: partition table partially beyond EOD, truncated [ 87.564263][ T7501] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 87.603089][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.668084][ T7504] gfs2: not a GFS2 filesystem [ 87.718968][ T5926] Bluetooth: hci4: command tx timeout [ 87.914935][ T7506] loop5: detected capacity change from 0 to 7 [ 87.921408][ C1] blk_print_req_error: 10 callbacks suppressed [ 87.921424][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.927393][ C1] buffer_io_error: 10 callbacks suppressed [ 87.927407][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.935243][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.938789][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.942125][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.946329][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.950034][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.954299][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.965601][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.968722][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.971438][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.974877][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.978237][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.981798][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.984660][ T5935] ldm_validate_partition_table(): Disk read failed. [ 87.987510][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.988415][ T7511] syz.2.397 uses obsolete (PF_INET,SOCK_PACKET) [ 87.990807][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.991107][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.999853][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.003860][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 88.003869][ T40] audit: type=1800 audit(1771718082.406:459): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.397" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 88.003950][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.006317][ T40] audit: type=1400 audit(1771718082.406:460): avc: denied { append } for pid=7510 comm="syz.2.397" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.029580][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.033699][ T5935] Dev loop5: unable to read RDB block 0 [ 88.039351][ T5935] loop5: unable to read partition table [ 88.042034][ T5935] loop5: partition table beyond EOD, truncated [ 88.051392][ T7506] ldm_validate_partition_table(): Disk read failed. [ 88.054488][ T7506] Dev loop5: unable to read RDB block 0 [ 88.056669][ T7506] loop5: unable to read partition table [ 88.059328][ T7506] loop5: partition table beyond EOD, truncated [ 88.062014][ T7506] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 88.159785][ T40] audit: type=1400 audit(1771718082.566:461): avc: denied { ioctl } for pid=7517 comm="syz.1.399" path="socket:[17651]" dev="sockfs" ino=17651 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.169077][ T40] audit: type=1400 audit(1771718082.566:462): avc: denied { listen } for pid=7515 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.176172][ T40] audit: type=1400 audit(1771718082.566:463): avc: denied { map } for pid=7517 comm="syz.1.399" path="socket:[17655]" dev="sockfs" ino=17655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.185932][ T40] audit: type=1400 audit(1771718082.566:464): avc: denied { bpf } for pid=7517 comm="syz.1.399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.202785][ T40] audit: type=1400 audit(1771718082.606:465): avc: denied { perfmon } for pid=7519 comm="syz.2.401" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.218611][ T7522] xt_hashlimit: invalid rate [ 88.265427][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 88.269500][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 88.357422][ T40] audit: type=1400 audit(1771718082.756:466): avc: denied { read } for pid=7529 comm="syz.1.405" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 88.369055][ T40] audit: type=1400 audit(1771718082.756:467): avc: denied { open } for pid=7529 comm="syz.1.405" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 88.535054][ T7541] sctp: [Deprecated]: syz.4.407 (pid 7541) Use of int in max_burst socket option. [ 88.535054][ T7541] Use struct sctp_assoc_value instead [ 88.570685][ T7464] vhci_hcd: connection reset by peer [ 88.571731][ T29] usb 10-1: USB disconnect, device number 2 [ 88.573487][ T1144] vhci_hcd vhci_hcd.5: stop threads [ 88.576728][ T1144] vhci_hcd vhci_hcd.5: release socket [ 88.579388][ T1144] vhci_hcd vhci_hcd.5: disconnect device [ 88.733292][ T7561] netlink: 76 bytes leftover after parsing attributes in process `syz.5.412'. [ 88.771373][ T40] audit: type=1400 audit(1771718083.176:468): avc: denied { getopt } for pid=7562 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.860547][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.415'. [ 89.129807][ T7579] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 89.286100][ T7584] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.311043][ T7586] netlink: 'syz.2.420': attribute type 5 has an invalid length. [ 89.316204][ T7586] netlink: 27 bytes leftover after parsing attributes in process `syz.2.420'. [ 89.380751][ T7595] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 89.422656][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 89.433995][ T7597] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 89.471602][ T7599] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 89.477170][ T7599] exFAT-fs (nullb0): invalid boot record signature [ 89.480985][ T7599] exFAT-fs (nullb0): failed to read boot sector [ 89.483736][ T7599] exFAT-fs (nullb0): failed to recognize exfat type [ 89.494598][ T7601] xfrm1: entered allmulticast mode [ 89.546757][ T7611] geneve2: entered promiscuous mode [ 89.549301][ T7611] geneve2: entered allmulticast mode [ 89.552336][ T1237] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.556205][ T1237] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.560529][ T1237] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.564245][ T1237] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.586668][ T7619] gfs2: error -5 reading superblock [ 89.654358][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 89.732094][ T7657] netlink: 'syz.4.437': attribute type 13 has an invalid length. [ 89.747024][ T7659] atomic_op ffff88805b79d998 conn xmit_atomic 0000000000000000 [ 89.756657][ T7659] i2c i2c-1: Invalid block write size 34 [ 89.761108][ T7659] kAFS: Can only specify source 'none' with -o dyn [ 89.772317][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.439'. [ 90.005629][ T7686] (syz.4.445,7686,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 90.009299][ T7686] (syz.4.445,7686,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 90.012740][ T7686] (syz.4.445,7686,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 90.019264][ T7686] (syz.4.445,7686,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 90.082288][ T7689] ip6gre1: entered allmulticast mode [ 90.350313][ T7706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.079525][ T7738] openvswitch: netlink: IP tunnel dst address not specified [ 91.091645][ T7741] 9pnet_fd: p9_fd_create_unix (7741): problem connecting socket: ./file0: -30 [ 91.092067][ T7739] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 91.107198][ T7739] netlink: 'syz.1.461': attribute type 2 has an invalid length. [ 91.115261][ T7744] ip6t_REJECT: ECHOREPLY is not supported [ 91.196167][ T7754] xt_hashlimit: size too large, truncated to 1048576 [ 91.276346][ T7764] bond0: (slave nr0): Error: Device can not be enslaved while up [ 91.355080][ T7772] netlink: 'syz.4.473': attribute type 12 has an invalid length. [ 91.363956][ T7647] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.367735][ T7647] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.369598][ T7775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.369741][ T7772] netlink: 'syz.4.473': attribute type 12 has an invalid length. [ 91.373793][ T7647] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.380542][ T7775] xt_cgroup: xt_cgroup: no path or classid specified [ 91.384182][ T7647] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.444903][ T7779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.447498][ T7779] overlayfs: failed to set xattr on upper [ 91.450505][ T7779] overlayfs: ...falling back to redirect_dir=nofollow. [ 91.455269][ T7779] overlayfs: ...falling back to index=off. [ 91.457477][ T7779] overlayfs: ...falling back to uuid=null. [ 91.460238][ T7779] overlayfs: ...falling back to xino=off. [ 91.539227][ T7786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 91.542214][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.545870][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 91.548616][ T7799] vhci_hcd: unknown pdu 2 [ 91.551535][ T7647] vhci_hcd vhci_hcd.1: stop threads [ 91.559492][ T7647] vhci_hcd vhci_hcd.1: release socket [ 91.561494][ T7647] vhci_hcd vhci_hcd.1: disconnect device [ 91.761059][ T7826] xt_hashlimit: size too large, truncated to 1048576 [ 91.769146][ T7828] mmap: syz.2.488 (7828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.918885][ T7835] hfsplus: unable to find HFS+ superblock [ 91.959313][ T830] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 92.225260][ T7848] overlayfs: upper fs does not support file handles, falling back to index=off. [ 92.294997][ T7850] program syz.1.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.434642][ T7861] tmpfs: Bad value for 'mpol' [ 92.450443][ T7864] program syz.1.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.600734][ T7828] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.941393][ T7903] __nla_validate_parse: 10 callbacks suppressed [ 92.941410][ T7903] netlink: 104 bytes leftover after parsing attributes in process `syz.1.511'. [ 92.994447][ T7914] io-wq is not configured for unbound workers [ 93.081093][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 93.081111][ T40] audit: type=1400 audit(1771718087.486:520): avc: denied { append } for pid=7921 comm="syz.1.516" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.083835][ T7922] tmpfs: User quota inode hardlimit too large. [ 93.109639][ T40] audit: type=1400 audit(1771718087.486:521): avc: denied { map } for pid=7921 comm="syz.1.516" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.120919][ T40] audit: type=1400 audit(1771718087.486:522): avc: denied { execute } for pid=7921 comm="syz.1.516" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.245213][ T7951] netlink: 104 bytes leftover after parsing attributes in process `syz.4.522'. [ 93.254201][ T40] audit: type=1400 audit(1771718087.656:523): avc: denied { setopt } for pid=7952 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.261670][ T7953] x_tables: duplicate underflow at hook 2 [ 93.285600][ T7957] input: syz0 as /devices/virtual/input/input12 [ 93.297737][ T7959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7959 comm=syz.2.525 [ 93.497839][ T40] audit: type=1400 audit(1771718087.896:524): avc: denied { execute } for pid=7985 comm="syz.5.534" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=19267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 93.575179][ T7993] kAFS: unable to lookup cell '(' [ 93.590038][ T7993] kAFS: No cell specified [ 93.599019][ T840] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 93.602916][ T7996] No source specified [ 93.643152][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.538'. [ 93.694329][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.5.540'. [ 93.748932][ T840] usb 9-1: Using ep0 maxpacket: 16 [ 93.766362][ T840] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 93.770800][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.778883][ T840] usb 9-1: Product: syz [ 93.781317][ T840] usb 9-1: Manufacturer: syz [ 93.783337][ T840] usb 9-1: SerialNumber: syz [ 93.797659][ T840] r8152-cfgselector 9-1: Unknown version 0x0000 [ 93.800528][ T840] r8152-cfgselector 9-1: config 0 descriptor?? [ 93.822884][ T8018] tipc: Enabling of bearer rejected, failed to enable media [ 93.929419][ T8028] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 93.931970][ T8028] netlink: 152 bytes leftover after parsing attributes in process `syz.5.544'. [ 93.947390][ T8028] .`: renamed from bond0 (while UP) [ 93.950105][ T8031] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 93.963700][ T8031] CIFS mount error: No usable UNC path provided in device string! [ 93.963700][ T8031] [ 93.968243][ T8031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.007415][ T7966] lo: Caught tx_queue_len zero misconfig [ 94.013213][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.016474][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.047342][ T40] audit: type=1400 audit(1771718088.446:525): avc: denied { wake_alarm } for pid=8041 comm="syz.5.546" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.057148][ T40] audit: type=1400 audit(1771718088.456:526): avc: denied { write } for pid=8039 comm="syz.1.547" path="socket:[19320]" dev="sockfs" ino=19320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.059609][ T840] r8152-cfgselector 9-1: Unknown version 0x0000 [ 94.069361][ T840] r8152-cfgselector 9-1: bad CDC descriptors [ 94.077267][ T840] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 94.102457][ T40] audit: type=1400 audit(1771718088.506:527): avc: denied { map } for pid=8041 comm="syz.5.546" path="socket:[21241]" dev="sockfs" ino=21241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.150986][ T40] audit: type=1400 audit(1771718088.546:528): avc: denied { unmount } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 94.163108][ T40] audit: type=1400 audit(1771718088.566:529): avc: denied { mount } for pid=8053 comm="syz.4.551" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.221075][ T8060] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 94.236119][ T8060] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 94.341854][ T8071] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 94.348584][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 94.404074][ T8062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.412755][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 94.416689][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'. [ 94.429664][ T6024] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 94.579780][ T6024] usb 7-1: too many configurations: 244, using maximum allowed: 8 [ 94.584862][ T6024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 94.588201][ T6024] usb 7-1: can't read configurations, error -61 [ 94.682626][ T8105] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 94.729077][ T6024] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 94.898528][ T8122] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.899768][ T6024] usb 7-1: too many configurations: 244, using maximum allowed: 8 [ 94.906119][ T6024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 94.911906][ T6024] usb 7-1: can't read configurations, error -61 [ 94.915205][ T6024] usb usb7-port1: attempt power cycle [ 95.039987][ T8131] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 95.088556][ T8135] netlink: 'syz.1.579': attribute type 2 has an invalid length. [ 95.258982][ T6024] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 95.275508][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.583'. [ 95.280030][ T6024] usb 7-1: too many configurations: 244, using maximum allowed: 8 [ 95.284454][ T6024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 95.287042][ T6024] usb 7-1: can't read configurations, error -61 [ 95.332654][ T8143] batman_adv: batadv0: Adding interface: dummy0 [ 95.335534][ T8143] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.346790][ T8143] batman_adv: batadv0: Interface activated: dummy0 [ 95.362664][ T8143] batadv0: mtu less than device minimum [ 95.366154][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.371113][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.376052][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.381510][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.386961][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.392458][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.397878][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.403364][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.408767][ T8143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.429740][ T6024] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 95.448612][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 95.452994][ T6024] usb 7-1: too many configurations: 244, using maximum allowed: 8 [ 95.457147][ T6024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 95.459892][ T6024] usb 7-1: can't read configurations, error -61 [ 95.462183][ T6024] usb usb7-port1: unable to enumerate USB device [ 98.433274][ T8174] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 98.434484][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 98.434498][ T40] audit: type=1400 audit(1771718092.836:542): avc: denied { map } for pid=8172 comm="syz.4.590" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.448704][ T8165] netlink: 'syz.1.588': attribute type 3 has an invalid length. [ 98.455575][ T8165] netlink: 'syz.1.588': attribute type 3 has an invalid length. [ 98.455851][ T40] audit: type=1326 audit(1771718092.846:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.5.592" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c9bb9c629 code=0x0 [ 98.537622][ T8190] macsec1: entered promiscuous mode [ 98.539935][ T8190] macsec1: entered allmulticast mode [ 98.929740][ T8218] nfs4: Bad value for 'source' [ 98.932235][ T8218] __nla_validate_parse: 1 callbacks suppressed [ 98.932244][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 98.937173][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 99.134784][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 99.149118][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.606'. [ 99.173542][ T40] audit: type=1400 audit(1771718093.576:544): avc: denied { mounton } for pid=8227 comm="syz.5.606" path="/63/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 99.180715][ T8230] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 99.187048][ T8230] SELinux: failed to load policy [ 99.192346][ T8230] netlink: 'syz.1.607': attribute type 39 has an invalid length. [ 99.212441][ T40] audit: type=1400 audit(1771718093.616:545): avc: denied { unmount } for pid=6998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.268255][ T40] audit: type=1400 audit(1771718093.666:546): avc: denied { name_bind } for pid=8232 comm="syz.5.608" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 99.289407][ T8233] SET target dimension over the limit! [ 99.292769][ T5926] Bluetooth: Wrong link type (-22) [ 99.510183][ T8242] program syz.1.612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.563487][ T8243] comedi comedi3: pcl812: a I/O base address must be specified [ 99.604244][ T40] audit: type=1400 audit(1771718094.006:547): avc: denied { connect } for pid=8246 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.786789][ T40] audit: type=1400 audit(1771718094.186:548): avc: denied { bind } for pid=8251 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.797003][ T40] audit: type=1400 audit(1771718094.206:549): avc: denied { connect } for pid=8251 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.872103][ T8254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.877508][ T40] audit: type=1400 audit(1771718094.276:550): avc: denied { getattr } for pid=8253 comm="syz.4.616" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.931446][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 99.986366][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 99.993569][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 100.006490][ T8264] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 100.019723][ T8271] netlink: 148 bytes leftover after parsing attributes in process `syz.1.622'. [ 100.020728][ T8263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 100.023590][ T8271] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.031821][ T8271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.035167][ T8271] IPv6: NLM_F_CREATE should be set when creating new route [ 100.104001][ T40] audit: type=1400 audit(1771718094.506:551): avc: denied { name_bind } for pid=8275 comm="syz.4.624" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.129890][ T8278] program syz.5.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.222531][ T8287] overlayfs: overlapping lowerdir path [ 100.312802][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 100.367526][ T8293] program syz.5.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.422081][ T8293] netlink: 80 bytes leftover after parsing attributes in process `syz.5.629'. [ 100.897470][ T7639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.915006][ T8304] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 100.917975][ T8304] veth0_vlan: entered allmulticast mode [ 100.926515][ T8304] veth0_vlan: left promiscuous mode [ 100.929339][ T8304] veth0_vlan: entered promiscuous mode [ 100.933060][ T8304] team0: Device veth0_vlan failed to register rx_handler [ 100.941417][ T8304] Bluetooth: MGMT ver 1.23 [ 100.977802][ T7639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.064803][ T7639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.092536][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.096750][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.101436][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.119887][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.123423][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.168054][ T7639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.265977][ T8343] netlink: 'syz.4.644': attribute type 7 has an invalid length. [ 101.273513][ T8339] 8021q: VLANs not supported on gre0 [ 101.318178][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.324216][ T8348] CIFS mount error: No usable UNC path provided in device string! [ 101.324216][ T8348] [ 101.327432][ T8348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.411526][ T7639] bridge_slave_1: left allmulticast mode [ 101.413509][ T7639] bridge_slave_1: left promiscuous mode [ 101.415653][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.429679][ T7639] bridge_slave_0: left allmulticast mode [ 101.431601][ T7639] bridge_slave_0: left promiscuous mode [ 101.433533][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.638024][ T7639] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.649674][ T7639] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.653329][ T7639] .` (unregistering): Released all slaves [ 101.709460][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 101.800743][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.803221][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.806012][ T8325] bridge_slave_0: entered allmulticast mode [ 101.809094][ T8325] bridge_slave_0: entered promiscuous mode [ 101.813703][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.816225][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.818899][ T8325] bridge_slave_1: entered allmulticast mode [ 101.821605][ T8325] bridge_slave_1: entered promiscuous mode [ 101.824704][ T8384] Cannot find del_set index 4 as target [ 101.827501][ T8384] Cannot find del_set index 4 as target [ 101.834236][ T8384] Cannot find del_set index 4 as target [ 101.836490][ T8384] Cannot find del_set index 4 as target [ 101.837821][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.841717][ T8384] Cannot find del_set index 4 as target [ 101.842092][ T8384] Cannot find del_set index 4 as target [ 101.848769][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.851797][ T8384] Cannot find del_set index 4 as target [ 101.859167][ T8384] Cannot find del_set index 4 as target [ 101.881716][ T8384] Cannot find del_set index 4 as target [ 101.891419][ T8325] team0: Port device team_slave_0 added [ 101.894448][ T8325] team0: Port device team_slave_1 added [ 101.965422][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.967859][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.979478][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.005567][ T7639] hsr_slave_0: left promiscuous mode [ 102.008264][ T7639] hsr_slave_1: left promiscuous mode [ 102.010686][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.013101][ T7639] net_ratelimit: 10 callbacks suppressed [ 102.013110][ T7639] batadv0: mtu less than device minimum [ 102.017294][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.021421][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.025242][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.029063][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.032863][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.036658][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.040493][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.044273][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.048617][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.059125][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.059451][ T8399] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 102.064781][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.080739][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.083787][ T7639] batman_adv: batadv0: Interface deactivated: dummy0 [ 102.085944][ T7639] batman_adv: batadv0: Removing interface: dummy0 [ 102.093142][ T7639] veth1_macvtap: left promiscuous mode [ 102.094959][ T7639] veth0_macvtap: left promiscuous mode [ 102.096764][ T7639] veth1_vlan: left promiscuous mode [ 102.098498][ T7639] veth0_vlan: left promiscuous mode [ 102.240029][ T7639] team0 (unregistering): Port device team_slave_1 removed [ 102.258971][ T7639] team0 (unregistering): Port device team_slave_0 removed [ 102.310387][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.312823][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.321023][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.492128][ T8325] hsr_slave_0: entered promiscuous mode [ 102.495618][ T8325] hsr_slave_1: entered promiscuous mode [ 102.706343][ T8442] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 102.720687][ T8325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.734231][ T8325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.746295][ T8325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.785682][ T8325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.923532][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.938903][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.947896][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.951225][ T7643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.965078][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.968005][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.123070][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.168995][ T5936] Bluetooth: hci2: command tx timeout [ 103.358860][ T8325] veth0_vlan: entered promiscuous mode [ 103.376637][ T8325] veth1_vlan: entered promiscuous mode [ 103.404900][ T8325] veth0_macvtap: entered promiscuous mode [ 103.412725][ T8325] veth1_macvtap: entered promiscuous mode [ 103.432142][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.442836][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.455779][ T7642] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.467446][ T7642] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.477615][ T7642] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.481413][ T7642] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.545351][ T7642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.548744][ T7642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.569734][ T7642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.574098][ T7642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.582009][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 103.582024][ T40] audit: type=1400 audit(1771718097.986:562): avc: denied { mounton } for pid=8325 comm="syz-executor" path="/syzkaller.iNtdj6/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 103.597312][ T40] audit: type=1400 audit(1771718097.996:563): avc: denied { mounton } for pid=8325 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.732924][ T8491] kvm: MONITOR instruction emulated as NOP! [ 103.782750][ T8491] syzkaller0: entered promiscuous mode [ 103.785223][ T8491] syzkaller0: entered allmulticast mode [ 104.520352][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 105.239061][ T5936] Bluetooth: hci2: command tx timeout [ 107.318969][ T5936] Bluetooth: hci2: command tx timeout [ 109.399109][ T5936] Bluetooth: hci2: command tx timeout [ 114.730552][ T8530] overlayfs: failed to resolve './file1': -2 [ 114.749008][ T40] audit: type=1400 audit(1771718109.146:564): avc: denied { accept } for pid=8532 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.839564][ T5932] Bluetooth: hci1: hardware error 0x00 [ 114.843606][ T8500] ------------[ cut here ]------------ [ 114.846679][ T8500] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 114.849112][ T8500] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: kworker/1:4/8500 [ 114.852716][ T8500] Modules linked in: [ 114.855053][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.859096][ T8500] Tainted: [L]=SOFTLOCKUP [ 114.860878][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.864844][ T8500] Workqueue: events l2cap_chan_timeout [ 114.867215][ T8500] RIP: 0010:__queue_work+0xd0c/0x1150 [ 114.869484][ T8500] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 e5 c9 38 00 90 0f 0b 90 e9 b2 f5 [ 114.875796][ T8500] RSP: 0018:ffffc90003aa7a30 EFLAGS: 00010046 [ 114.877766][ T8500] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005bbf14b [ 114.880210][ T8500] RDX: ffff88803eb8d978 RSI: ffffffff8a86f170 RDI: ffffffff90dc64e0 [ 114.882762][ T8500] RBP: ffff88802ddf8a40 R08: 0000000000000005 R09: 0000000000000000 [ 114.885325][ T8500] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88803eb8d800 [ 114.887870][ T8500] R13: ffff888023cd2480 R14: ffff88802ddf8a88 R15: ffff88802ddf8a48 [ 114.890391][ T8500] FS: 0000000000000000(0000) GS:ffff8880d6447000(0000) knlGS:0000000000000000 [ 114.893274][ T8500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.895561][ T8500] CR2: 00007ffe1cd67ec0 CR3: 000000005b582000 CR4: 0000000000352ef0 [ 114.898074][ T8500] Call Trace: [ 114.899169][ T8500] [ 114.900151][ T8500] ? __cancel_work+0x2b5/0x340 [ 114.901713][ T8500] ? lockdep_hardirqs_on+0x78/0x100 [ 114.903506][ T8500] ? __cancel_work+0x245/0x340 [ 114.905055][ T8500] __queue_delayed_work+0x365/0x470 [ 114.906741][ T8500] queue_delayed_work_on+0x180/0x1e0 [ 114.908448][ T8500] l2cap_chan_del+0x649/0x930 [ 114.909971][ T8500] l2cap_chan_close+0x3b0/0xa70 [ 114.911550][ T8500] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.913469][ T8500] ? __pfx_l2cap_chan_close+0x10/0x10 [ 114.915199][ T8500] l2cap_chan_timeout+0x196/0x330 [ 114.916849][ T8500] process_one_work+0x9d7/0x1920 [ 114.918459][ T8500] ? __pfx_process_one_work+0x10/0x10 [ 114.920196][ T8500] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 114.921974][ T8500] worker_thread+0x5da/0xe40 [ 114.923522][ T8500] ? __pfx_worker_thread+0x10/0x10 [ 114.925169][ T8500] ? kthread+0x13a/0x450 [ 114.926551][ T8500] ? __pfx_worker_thread+0x10/0x10 [ 114.928214][ T8500] kthread+0x370/0x450 [ 114.929536][ T8500] ? __pfx_kthread+0x10/0x10 [ 114.931030][ T8500] ret_from_fork+0x754/0xd80 [ 114.932599][ T8500] ? __pfx_ret_from_fork+0x10/0x10 [ 114.934266][ T8500] ? __switch_to+0x7b4/0x1120 [ 114.935801][ T8500] ? __pfx_kthread+0x10/0x10 [ 114.937297][ T8500] ret_from_fork_asm+0x1a/0x30 [ 114.938875][ T8500] [ 114.939896][ T8500] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.942200][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.945636][ T8500] Tainted: [L]=SOFTLOCKUP [ 114.947036][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.950284][ T8500] Workqueue: events l2cap_chan_timeout [ 114.952057][ T8500] Call Trace: [ 114.953185][ T8500] [ 114.954165][ T8500] dump_stack_lvl+0x100/0x190 [ 114.955705][ T8500] vpanic+0x552/0x970 [ 114.957046][ T8500] ? __pfx_vpanic+0x10/0x10 [ 114.958508][ T8500] panic+0xd1/0xe0 [ 114.959738][ T8500] ? __pfx_panic+0x10/0x10 [ 114.961190][ T8500] ? check_panic_on_warn+0x1f/0x90 [ 114.962865][ T8500] check_panic_on_warn.cold+0x19/0x34 [ 114.964618][ T8500] ? __queue_work+0xd08/0x1150 [ 114.966155][ T8500] __warn.cold+0x191/0x348 [ 114.967615][ T8500] __report_bug+0x296/0x3d0 [ 114.968966][ T8500] ? __queue_work+0xd08/0x1150 [ 114.970521][ T8500] ? __pfx___report_bug+0x10/0x10 [ 114.972170][ T8500] ? __pfx_hci_conn_timeout+0x10/0x10 [ 114.973913][ T8500] ? __pfx_debug_object_assert_init+0x10/0x10 [ 114.975875][ T8500] report_bug_entry+0xe1/0x290 [ 114.977432][ T8500] ? __queue_work+0xd0c/0x1150 [ 114.979047][ T8500] handle_bug+0x1c9/0x2a0 [ 114.980475][ T8500] exc_invalid_op+0x17/0x50 [ 114.981946][ T8500] asm_exc_invalid_op+0x1a/0x20 [ 114.983566][ T8500] RIP: 0010:__queue_work+0xd0c/0x1150 [ 114.985236][ T8500] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 e5 c9 38 00 90 0f 0b 90 e9 b2 f5 [ 114.991273][ T8500] RSP: 0018:ffffc90003aa7a30 EFLAGS: 00010046 [ 114.993238][ T8500] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11005bbf14b [ 114.995769][ T8500] RDX: ffff88803eb8d978 RSI: ffffffff8a86f170 RDI: ffffffff90dc64e0 [ 114.998271][ T8500] RBP: ffff88802ddf8a40 R08: 0000000000000005 R09: 0000000000000000 [ 115.000758][ T8500] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88803eb8d800 [ 115.003294][ T8500] R13: ffff888023cd2480 R14: ffff88802ddf8a88 R15: ffff88802ddf8a48 [ 115.005750][ T8500] ? __pfx_hci_conn_timeout+0x10/0x10 [ 115.007498][ T8500] ? __cancel_work+0x2b5/0x340 [ 115.009046][ T8500] ? lockdep_hardirqs_on+0x78/0x100 [ 115.010718][ T8500] ? __cancel_work+0x245/0x340 [ 115.012314][ T8500] __queue_delayed_work+0x365/0x470 [ 115.013998][ T8500] queue_delayed_work_on+0x180/0x1e0 [ 115.015707][ T8500] l2cap_chan_del+0x649/0x930 [ 115.017231][ T8500] l2cap_chan_close+0x3b0/0xa70 [ 115.018807][ T8500] ? debug_object_deactivate+0x2e4/0x3b0 [ 115.020594][ T8500] ? __pfx_l2cap_chan_close+0x10/0x10 [ 115.022329][ T8500] l2cap_chan_timeout+0x196/0x330 [ 115.023970][ T8500] process_one_work+0x9d7/0x1920 [ 115.025573][ T8500] ? __pfx_process_one_work+0x10/0x10 [ 115.027314][ T8500] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 115.029097][ T8500] worker_thread+0x5da/0xe40 [ 115.030595][ T8500] ? __pfx_worker_thread+0x10/0x10 [ 115.032256][ T8500] ? kthread+0x13a/0x450 [ 115.033640][ T8500] ? __pfx_worker_thread+0x10/0x10 [ 115.035284][ T8500] kthread+0x370/0x450 [ 115.036617][ T8500] ? __pfx_kthread+0x10/0x10 [ 115.038149][ T8500] ret_from_fork+0x754/0xd80 [ 115.039654][ T8500] ? __pfx_ret_from_fork+0x10/0x10 [ 115.041299][ T8500] ? __switch_to+0x7b4/0x1120 [ 115.042816][ T8500] ? __pfx_kthread+0x10/0x10 [ 115.044349][ T8500] ret_from_fork_asm+0x1a/0x30 [ 115.045905][ T8500] [ 115.047645][ T8500] Kernel Offset: disabled [ 115.049046][ T8500] Rebooting in 86400 seconds..