last executing test programs: 1m25.714478033s ago: executing program 3 (id=51): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x18}}], 0x1, 0x0) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x147020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x74, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x230, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0x2001, 0x2, 0x4, 0x0, {0xbb, 0x3, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xa, 0x18}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_IE={0x119, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x57, 0x4, @device_b, 0x2, 0xfffffffb, 0xcbc6}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random={0xff, 0x3d, "2226818d1464f0fbd40e69fa9e6cf19e810ef7364d5678ac7f679541a5369142e876e7da7adebb2ed2351095b8394c55d3b2a86a249da73faeabcc0252"}, @link_id={0x65, 0x12, {@from_mac=@broadcast}}, @fast_bss_trans={0x37, 0x84, {0x5, 0x3, "9c0df273fc17773ea2260351f83d36ec", "deddfacf9c50260b7c10252223c533111bc37d517a36869ace43b73cace0233c", "02a317c06154d61a8babf7ed7b6648a670d1f2922c24e45d9d1cf7a4f4861dc1", [{0x4, 0xf, "3422d10ee2366ed023d145afc66bd3"}, {0x3, 0x16, "772ac24b2fb3f79f2a6fbc36bd72f146e9c81ae4fccf"}, {0x4, 0x7, "c2ebd494c28a86"}]}}, @dsss={0x3, 0x1, 0x9}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xc0, 0x6, @device_a, 0x8, 0x0, 0x8}}, @dsss={0x3, 0x1, 0x2}]}, @NL80211_ATTR_IE={0xab, 0x2a, [@random_vendor={0xdd, 0x9f, "d28d9ef2f15f9db999f0e09581054a9f6de16cf94b5c88db5aa168fb92c8d447678298c1e0c1e24e539826e96f2479140eaca6d4b80ba97be769e59becae093fddf3c574b6f8df53f8b47da77e67893395ca68dc54fc6a49ab9e1074d6c512d32e9d0946f9b135c3c1acd400b3ea0144154538181fbe7d7c1155509a101d6a84ef9fa3014644a7eb46dae8524b55620a06acc4a69485f5d69210e7e17cfa55"}, @chsw_timing={0x68, 0x4, {0x4, 0xffff}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000915}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000900)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1m25.709127873s ago: executing program 3 (id=52): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000001c0)={r1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) 1m25.481207973s ago: executing program 3 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xf) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="c74424003904506ec744240200500000c7442406000000000f0114240f20d835080000000f22d848b81bfe10fe000000000f23d00f21f8350000000b0f23f80f32c421e35a81002800003e0fc7ad00000000b9800000c00f3235001000000f300f20e035400000000f22e048b86788e09f9b9aff540f23d00f21f835000000050f23f866baf80cb88898c28aef66bafc0cb804000000ef", 0x97}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket(0x1e, 0x80004, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m25.319320208s ago: executing program 3 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000006b58ad043499873be39fb6a09d98055486d760417420d7aabc058264187099fd804093ab19742101afbd03c034871788e6a773dd908d25194c435a5e4233a59576524f4ec649e6c25e7e109b8c984a040ef222b5993f70a042178e8fc482818428c1bf8f9467a572d5b345a072", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250f00000008009f000200000008000c006400000008000d0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x4008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x89) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x17) splice(r3, 0x0, r2, &(0x7f0000000140), 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x810000}, 0x94) copy_file_range(r3, &(0x7f0000000300)=0x7, r0, 0x0, 0xc77, 0x0) r8 = socket(0x2b, 0x1, 0x1) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) syz_clone(0x80000000, &(0x7f0000000180)="279bb5f6fe2530f1084e52705af84f4e5613560889fc5ac0e5f01715709813550c86a5388cb62a282c5140f868e843508412456f09a889ce1abcd6440a2dbdd2465cf3f627538bceffece8f163e9a1caf3c24371aa3faffd5a791af33530efe6b4ea7a4b532f78d51710bb92cfc2049b65be539227c4ede67605393c7f0e4b6dfad28a849e281d3df1caf3429e4d45525aeda87f8cbaaf70aea3e76a93872b7af3143af56cf9629bebd0e33213", 0xad, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)="3ea6a34ad4fd4125d7fecc4cad0a3bb4f6899661a41af9a73e9f3047ec813619b4ac5b707f361ee47b6af107102576577718e91c85cecae32702f3e73883e7c76be23c3b86a9a9bd68f17ee103d1c939cd2ccf2cafbd64422ccb5a2af3c9f7f6b0319ab7ef79f484adacba4d4b6a9b59") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) tee(r4, r9, 0x9, 0x2) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r4, 0x0) 1m24.411689451s ago: executing program 3 (id=70): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtclass={0x434, 0x28, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0x1, 0x1}, {0xa, 0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffffff7, 0xc23, 0x2, 0xa, 0xe, 0x2, 0x810, 0x8, 0x7fffffff, 0x7ff, 0xd55681f5, 0x9e, 0xffffffff, 0x84, 0x10000, 0x1, 0x3, 0xfe000, 0x100, 0x3, 0x8, 0x2, 0x6, 0x5, 0x9, 0x0, 0x367, 0x48a926db, 0x7fffffff, 0x800, 0x0, 0x7, 0x9f, 0x0, 0x5, 0x0, 0x7, 0x1, 0xfffffffb, 0x8, 0x2, 0x6, 0xc, 0x4, 0xfffffff8, 0x6, 0xfffff53f, 0x0, 0x9a2, 0x2, 0xae, 0x7, 0x0, 0x4, 0x8, 0x9, 0xa, 0x2, 0x10000, 0xfffffffe, 0x6, 0x4000, 0xe, 0x1, 0x4f, 0x8939, 0x20400, 0x7, 0x1000, 0x6, 0x4, 0x5, 0x321, 0x7, 0x8bf3, 0x58, 0x1, 0x6, 0x134, 0x7, 0x7, 0x400, 0x3, 0x1, 0x2, 0x8, 0x0, 0xfffff801, 0x3, 0x0, 0x7, 0x7, 0x8, 0x3, 0x2, 0x6, 0x2, 0xffffffc0, 0x2, 0x800000, 0x982, 0x9, 0x9, 0x8001, 0x4, 0x7, 0x6, 0x7, 0x2, 0xebf1, 0xffffffff, 0xfff, 0x5b7, 0x7, 0x784, 0x244f, 0x7, 0x84, 0x8, 0xcfb3, 0x1, 0x10001, 0x700, 0x89a, 0xa10, 0x8, 0xf, 0x9, 0x8, 0x9, 0xd36, 0xcb3, 0x6, 0x8, 0x6, 0x5, 0x48c3, 0x10, 0x8, 0x2, 0x0, 0x9, 0xfff, 0x7, 0x1, 0x2, 0x3, 0x7fff, 0x6, 0x6, 0x6, 0xfffffff6, 0x8, 0x8, 0xf5c8, 0xffff, 0xfffffffa, 0x3, 0x6, 0x1ff, 0x800, 0xbe, 0x3, 0x1, 0x800, 0x0, 0x51, 0x7fff, 0xa5, 0x1000, 0x4, 0x10000, 0x6, 0x1, 0x2e, 0x8, 0x1, 0x7, 0x9, 0x3, 0x7fffffff, 0x1, 0x5bc, 0x6, 0x4, 0x4137, 0x8, 0x1, 0xe, 0xc, 0x7, 0x2, 0x315, 0x5, 0x4, 0x8, 0xfffffffd, 0x9, 0xdbf, 0x5, 0x6, 0x6, 0x9, 0x1fc, 0x5, 0x35346f7b, 0x7, 0x80000000, 0x9, 0xf71, 0x8000, 0x3, 0x2, 0x7, 0x5, 0xffffffff, 0x2, 0x80, 0x8000, 0x6, 0x0, 0x7, 0x0, 0x9, 0x7, 0x8, 0x5, 0x1, 0x5, 0x1, 0x2, 0x7ff, 0xfffffffd, 0x6, 0xd, 0x7, 0x4, 0x3, 0x7, 0x1, 0x0, 0x3, 0x21, 0xba, 0x7, 0x1, 0x2, 0x2, 0x8, 0x8, 0xce, 0x6, 0x1, 0x2, 0xb960, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x61f74d23f9077ad0}, 0x2000e852) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r10 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = dup(r11) fsetxattr$trusted_overlay_upper(r12, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r14, &(0x7f0000000040)=""/236, 0xec) 1m24.000060999s ago: executing program 3 (id=76): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x200, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8779}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2628}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) 1m23.90642579s ago: executing program 32 (id=76): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x200, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8779}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2628}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) 37.491323449s ago: executing program 1 (id=1026): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) 37.431359233s ago: executing program 1 (id=1027): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x1004000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@sr0, r2, &(0x7f00000000c0)) 37.430103277s ago: executing program 1 (id=1029): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x10, 0xd, 0x1dc, &(0x7f00000000c0)}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001040)=0x4) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 37.360288246s ago: executing program 1 (id=1031): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x8b}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, 0x22820, 0x55007}, [@IFLA_TXQLEN={0x8, 0xd, 0x7d631b68}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x6404c8c4) 37.221360905s ago: executing program 1 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x5c3, 0x7ffffffa}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100dbdf250b0000000800940e0000000000", @ANYRES32=r5, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES8=r0, @ANYRES8=r4], 0x40}}, 0x8080) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3}, 0x8) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12003, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000095}, 0x20000080) close_range(r8, 0xffffffffffffffff, 0x0) 37.131248768s ago: executing program 1 (id=1033): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf2505005400000000000800010000000000c9a0735fd348c1bc0680b87132c0d02e948c6db7b425cb77c7112ab11d2eb573ec66a1e36214a9b7fb8e0a0ae0d13a4efc4b9e923adbc16db612d16a1cb6d29a4439d2e34ec7e64bfad8b2350f355ebf902f66cb7ff921222a66f08f7edc27fd9bde017ea8a2a8da4e12bcff043b4fce727a38e141541be498f8eece686b2a62dbe4b3d4e182b39e2bbacf8e6c25ab04684cda83c7d66837ac7d50d40a617a16cd55d75f5c3eef75f6fa1ed9"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}]}, 0x34}}, 0x4044) 37.045778612s ago: executing program 33 (id=1033): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf2505005400000000000800010000000000c9a0735fd348c1bc0680b87132c0d02e948c6db7b425cb77c7112ab11d2eb573ec66a1e36214a9b7fb8e0a0ae0d13a4efc4b9e923adbc16db612d16a1cb6d29a4439d2e34ec7e64bfad8b2350f355ebf902f66cb7ff921222a66f08f7edc27fd9bde017ea8a2a8da4e12bcff043b4fce727a38e141541be498f8eece686b2a62dbe4b3d4e182b39e2bbacf8e6c25ab04684cda83c7d66837ac7d50d40a617a16cd55d75f5c3eef75f6fa1ed9"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}]}, 0x34}}, 0x4044) 23.120838069s ago: executing program 4 (id=1302): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r0, 0x0, 0xfffffe59) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0x4) 23.067660974s ago: executing program 4 (id=1304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x40080) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff9, @mcast2, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x44886) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x111200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r6, 0x0, 0xd7e, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf86}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040050}, 0x4000000) r13 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000940), 0x2) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000000980)={0x4, 0x8, 0x5, 0x8001, 0x2, 0x0, [{0x7ff, 0x2, 0x0, '\x00', 0x2000}, {0x0, 0x80, 0x3, '\x00', 0x201}]}) memfd_create(&(0x7f0000000a40)='nbd\x00', 0x1) add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, &(0x7f0000000b00)={0x3, 0x89, 0x76, 0x2, 0x7, 0x27, 0x2, "2c94b3a892ff851ec97f28a64fb110e1981b9ed3", "631a1cd88ee86dd982b60462483352d89518dc97"}) r14 = openat2(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x101041, 0x2, 0x1}, 0x18) ioctl$FICLONE(r11, 0x40049409, r14) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r15, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x94) 23.007975865s ago: executing program 4 (id=1306): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xffff, 0x7f, 0xc}}) 22.950926992s ago: executing program 4 (id=1307): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000300)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = io_uring_setup(0x516, &(0x7f0000000340)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) close_range(r2, 0xffffffffffffffff, 0x0) 22.950002828s ago: executing program 4 (id=1310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 22.710056366s ago: executing program 4 (id=1315): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x5761252f, 0xffffffffffffffff, 'id1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf5, r1, 0x1, 0x50, 0x6, @random="9b43938da1e5"}, 0x14) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e000000010000c0927bd7000ffdbdf256a6974746572656e74726f70795f726e670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000002000"/224], 0xe0}}, 0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 22.639560795s ago: executing program 34 (id=1315): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x5761252f, 0xffffffffffffffff, 'id1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf5, r1, 0x1, 0x50, 0x6, @random="9b43938da1e5"}, 0x14) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e000000010000c0927bd7000ffdbdf256a6974746572656e74726f70795f726e670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000002000"/224], 0xe0}}, 0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 15.288931047s ago: executing program 0 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000b6, 0x0, 0x8}, {0x801, 0x0, 0x3}]}) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1014, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@access_any}, {@aname={'aname', 0x3d, '/dev/kvm\x00'}}, {@nodevmap}, {@version_9p2000}, {@access_user}, {@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_none}], [{@hash}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}]}}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003425000701feffdfff00000000017c000004082f9bbac871deb7000600800a220010800280ec863fcb6e13e77b6389f58a0359d86701231dea345c5f8fe8385c6a49d67573c132080c43aae152b65e1dada44cb7298de60026a59c8623c3121f0d5e08fe4bc0cc998f832958e47b9f2e01f7cfb74cfdcca735f9556d2ed17286acbd045cdb02d4010000005528a6fe47be71e704ef2f81526befa615"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15.170348976s ago: executing program 0 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r3) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x44, &(0x7f0000000000)={0x4b5a9da54893e123, 0x30, 0x10, 0x2, 0x2000}, 0x8, 0x20400002, 0xc, 0x0, 0x20001, 0x20000, 0x0}) 14.535839838s ago: executing program 0 (id=1420): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000040000000000000000000062000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'veth1_vlan\x00'}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0], 0x0, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f0000000080)={r10, r10, 0x0, 0x6, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x42100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r11, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000100)=[r12], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r9, 0xc01064c4, &(0x7f00000002c0)={&(0x7f0000000280)=[r3, r8, r7, r12, r10, r8, r10, r8], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r9, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r10], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000300)='wg0\x00', 0x4) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r3, r7, r8, r10, r13, r14], 0x6}) r15 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) 13.660774418s ago: executing program 0 (id=1435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x48e, 0x0, 0x5}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r5 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0) syz_clone(0x0, 0x0, 0x3, 0x0, 0x0, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000bdf000/0x1000)=nil, 0x1000}, 0x1}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000) 13.590355467s ago: executing program 0 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 13.249308749s ago: executing program 0 (id=1437): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000002180)={'IDLETIMER\x00'}, &(0x7f00000021c0)=0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) 13.162146586s ago: executing program 35 (id=1437): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000002180)={'IDLETIMER\x00'}, &(0x7f00000021c0)=0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) 2.549079951s ago: executing program 6 (id=1647): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @multicast1}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x1310000, 0x800, 0x3, 0x2}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080)=[0x1, 0xde, 0x2], 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000380)=""/200, 0xc8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000060000000300000007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x24000420) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000002c0)={r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) dup3(r3, r5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x200, 0x9, 0x7ff, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x1}, 0x8) 2.548909483s ago: executing program 2 (id=1648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fb00000000fb"], 0x830200) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) sendmmsg$inet_sctp(r0, &(0x7f000000a840)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x4040044}], 0x1, 0x800) 2.111204236s ago: executing program 6 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r4, 0xc0b, 0x100, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4044) 2.11103269s ago: executing program 6 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x189e1911, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c000000250001012dbd7000fcffffff548e00000800030047"], 0x6c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 1.831189814s ago: executing program 7 (id=1656): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060300000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000000000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 1.830196238s ago: executing program 7 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='i2c_result\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x6, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x2004c084) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000701, 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r7, 0x40046104, &(0x7f00000002c0)) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xa}, {0x1, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x8050) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa9baaaa0000000000008100000008004500001c000000000073f89f6f99a61563a8ffff0000000000089078"], 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept$alg(r10, 0x0, 0x0) r12 = accept(r11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) socket$inet_tcp(0x2, 0x1, 0x0) 1.64836485s ago: executing program 2 (id=1660): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x75dd, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x5b1f, &(0x7f0000000200)={0x0, 0x14c7, 0xf8b62d3bac5ccb2d, 0x23, 0x400002d2}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006d656d00"], 0xc) write$vga_arbiter(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f646573206e6f6e650016ebd79f667a37426fe5de48d72003dd693ca31d610e5148d90cf3233a8fb1ba483209b043807e441711901ac57596aaf0270db3d2ab0cbc36ce76e32473be2637cbb7906d89e4209ab847218bc5b71858e98b8b4d9fd329564b5d1205e177b747ecd66a23c2ce2dcf28bb5a173e2b6fb642c8e51076cad086b3d5da70cbc00a11f890278741a6c1fe5b8134dd475aab35f13e28a9"], 0xd) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4048043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e00010000800000020000000200000006000007000000000800010064010100080002"], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x6, 0x80f, 0x1, 'queue1\x00', 0xf}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) 1.647292335s ago: executing program 2 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x3, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x11) r9 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xf0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r11 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r11, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x10000, 0xf, 0x81, 0x2, 0x4, "02a5e6aaa52f87540c49eb781075432e8bf74d", 0x9, 0x5}) 1.201012126s ago: executing program 6 (id=1662): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x3, 0x2, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x224, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DESC={0x1f4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f2f5ab2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71a5751b}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85be}]}]}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40008}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000003050000000000000000000a0000070900010073797a30000000002f000240000000000000023b"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x8006) 990.882576ms ago: executing program 6 (id=1664): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x9}}}}}}}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x2380000000000000, 0x0, 0x4, 0x2, 0x19}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 989.412415ms ago: executing program 2 (id=1665): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) listen(r2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000005a80)={0x21, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) 929.57299ms ago: executing program 2 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000002480)=""/4105, 0x1009}, {&(0x7f0000000180)=""/146, 0x92}], 0x2, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40012120) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 929.214377ms ago: executing program 6 (id=1667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x100, 0x0, 0xf23, 0x7, 0x6}) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x2, 0x100, 0x1}) 440.990429ms ago: executing program 5 (id=1670): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x41c}, [@jmp={0x5, 0x0, 0xb, 0x4, 0xb, 0xfffffffffffffffe, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@gettaction={0x174, 0x32, 0x200, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e56}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x17416}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3989}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5eeb}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x100, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x174}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x4, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x6, 0x80, 0x0, 0xf, 0x3}, &(0x7f00000001c0)=0x14) 371.208849ms ago: executing program 5 (id=1671): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r0}) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={0x0}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x2e, &(0x7f0000000040)={&(0x7f0000000600)="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", 0x1000}, 0x1, 0x0, 0x0, 0x840}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000bc0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500800000000000668c67ffa340e23fb3701988f768cf57cff004e3e6fdd0c405b861f57d810d02c2eb6a393b7e1e4fcb92d32a97563b2c28a4670482aef585fa1ed42ec675971f480059208cfb47f4fdcff14428c0c9fdedb4ae2d0e1f8dee17e22d313bcfebc8bb1aa8655c5df561741291da6e127dbab882103383fa459c24c798e2bfbecd6d4eaee25646d49d917360"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r7, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) 321.094909ms ago: executing program 7 (id=1672): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x2f) (async) r0 = socket$inet6(0xa, 0x3, 0x2f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) (async) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@dev}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@dev}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00008be000/0x3000)=nil, 0x3000}, 0x2}) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 320.657988ms ago: executing program 5 (id=1673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x0, r6}) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x40000, 0x2000}) socket$nl_route(0x10, 0x3, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048801}, 0x20000800) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r13}, 0x10) ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 170.23692ms ago: executing program 7 (id=1674): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x7, 0xd, "fcdaf3"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 159.503497ms ago: executing program 7 (id=1675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x809}, 0x8) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10008004) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xa, 0x2, 0x0, 0x0, @binary="7a25b390ad66"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 80.860454ms ago: executing program 7 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'netdevsim0\x00', 0x200}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r6, 0x24, &(0x7f0000000080)={0x0, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0x9, 0x7}) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1_macvtap\x00'}}, 0x1e) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES64=r5, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES16, @ANYRES64=r9]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r12 = dup2(r11, r9) fallocate(r12, 0x0, 0x8000000005, 0x100000101) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x8000) 80.517718ms ago: executing program 5 (id=1677): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/94, 0x5e}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000200)=""/212, 0xd4}], 0x3, 0x1, 0x1, 0x0) 80.176661ms ago: executing program 2 (id=1678): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r4, 0x1, 0x6, &(0x7f0000000000), 0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x0, 0x0, 0xbd7, 0x0, 0x0, r3}]) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) recvmsg(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84004) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001dc0)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20", @ANYRESDEC=r5, @ANYRESDEC=r10], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19}, 0x94) 72.556127ms ago: executing program 5 (id=1679): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x400000000008002) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x2e6, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xce22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) dup3(r3, r4, 0x0) (async) dup3(r3, r4, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x4, 0x2, 0x0, {0x509e, 0x707, 0xfffffff8, 0x2}}) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x4, 0x2, 0x0, {0x509e, 0x707, 0xfffffff8, 0x2}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 0s ago: executing program 5 (id=1680): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mq_unlink(0x0) r0 = socket(0x10, 0x3, 0x0) accept$ax25(r0, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @default, @netrom, @default, @null, @bcast, @null, @null]}, &(0x7f0000000140)=0x48) fsync(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x4102) kernel console output (not intermixed with test programs): T8445] bond2: (slave veth0_to_bond): making interface the new active one [ 416.396287][ T8445] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 416.407791][ T40] audit: type=1400 audit(1768139538.294:550): avc: denied { listen } for pid=8444 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 416.415461][ T40] audit: type=1400 audit(1768139538.294:551): avc: denied { accept } for pid=8444 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 416.442245][ T8453] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.446421][ T8453] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 416.449203][ T8453] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.452060][ T8453] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 416.479060][ T8458] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 416.787796][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.811833][ T979] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 416.963247][ T979] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 416.965915][ T979] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 416.969059][ T979] usb 7-1: config 0 interface 0 has no altsetting 0 [ 416.973036][ T979] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.975958][ T979] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 416.978560][ T979] usb 7-1: Product: syz [ 416.979979][ T979] usb 7-1: Manufacturer: syz [ 416.981572][ T979] usb 7-1: SerialNumber: syz [ 416.985507][ T979] usb 7-1: config 0 descriptor?? [ 416.988429][ T979] hub 7-1:0.0: bad descriptor, ignoring hub [ 416.990418][ T979] hub 7-1:0.0: probe with driver hub failed with error -5 [ 416.994346][ T979] usb 7-1: selecting invalid altsetting 0 [ 417.321858][ T979] usb 7-1: USB disconnect, device number 5 [ 417.361282][ T8509] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 417.471804][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 417.520800][ T8533] 9pnet: Found fid 0 not clunked [ 417.542005][ T8540] sctp: [Deprecated]: syz.1.730 (pid 8540) Use of int in maxseg socket option. [ 417.542005][ T8540] Use struct sctp_assoc_value instead [ 417.780970][ T8568] could not allocate digest TFM handle cryptd(blake2b-160) [ 417.863260][ T8599] netlink: 'syz.1.747': attribute type 23 has an invalid length. [ 418.570738][ T8639] syzkaller1: entered promiscuous mode [ 418.575266][ T8639] syzkaller1: entered allmulticast mode [ 418.729425][ T5289] Bluetooth: hci3: unexpected event for opcode 0x080d [ 418.801360][ T8666] tmpfs: Unknown parameter 'usrquotaeo#' [ 418.862926][ T8678] cgroup: release_agent respecified [ 418.933534][ T8682] netlink: 'syz.0.777': attribute type 17 has an invalid length. [ 418.936080][ T8682] macvtap0: entered allmulticast mode [ 418.937811][ T8682] veth0_macvtap: entered allmulticast mode [ 418.940067][ T8682] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 419.190818][ T8726] dlm: non-version read from control device 0 [ 419.254519][ T8737] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.793' sets config #1 [ 419.316238][ T8746] bond0: entered promiscuous mode [ 419.317953][ T8746] bond_slave_0: entered promiscuous mode [ 419.319935][ T8746] bond_slave_1: entered promiscuous mode [ 419.323021][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 419.323058][ T8746] bond0: left promiscuous mode [ 419.327075][ T8746] bond_slave_0: left promiscuous mode [ 419.328929][ T8746] bond_slave_1: left promiscuous mode [ 419.384758][ T8752] xfrm0 speed is unknown, defaulting to 1000 [ 419.473077][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.476675][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.480164][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.483396][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.487919][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.491106][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.495219][ T10] usb 5-1: config 0 descriptor?? [ 419.909925][ T8712] loop9: detected capacity change from 0 to 7 [ 419.915212][ T8712] Dev loop9: unable to read RDB block 7 [ 419.916974][ T8712] loop9: AHDI p3 p4 [ 419.918296][ T8712] loop9: partition table partially beyond EOD, truncated [ 419.920625][ T8712] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 419.944329][ T10] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 419.964753][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 420.160511][ T8798] geneve4: entered promiscuous mode [ 420.163475][ T8798] geneve4: entered allmulticast mode [ 420.167873][ T6835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.171351][ T6835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.175164][ T6835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.288210][ T8809] __nla_validate_parse: 16 callbacks suppressed [ 420.288222][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 420.385328][ T8824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8824 comm=syz.1.821 [ 420.402076][ T8826] netlink: 'syz.2.822': attribute type 39 has an invalid length. [ 420.471465][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 420.515308][ T8834] rtc_cmos 00:05: Alarms can be up to one day in the future [ 420.583506][ T8836] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 420.663162][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 420.775271][ T8852] bond3: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 420.779703][ T8852] bond3: entered promiscuous mode [ 420.781755][ T8852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.796272][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 420.796282][ T40] audit: type=1400 audit(1768139542.684:568): avc: denied { read append } for pid=8854 comm="syz.1.833" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 420.806354][ T40] audit: type=1400 audit(1768139542.684:569): avc: denied { open } for pid=8854 comm="syz.1.833" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 420.883514][ T40] audit: type=1400 audit(1768139542.774:570): avc: denied { ioctl } for pid=8869 comm="syz.1.836" path="socket:[24815]" dev="sockfs" ino=24815 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 420.895188][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 420.998023][ T8882] bridge: RTM_NEWNEIGH with invalid ether address [ 421.000460][ T8882] bridge: RTM_NEWNEIGH with invalid ether address [ 421.109111][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 421.149368][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 421.184368][ T979] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 421.292295][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 421.332061][ T8915] xt_l2tp: unknown flags: 51 [ 421.336206][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.341259][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.345089][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.350813][ T979] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.355321][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.362163][ T979] usb 6-1: config 0 descriptor?? [ 421.373977][ T8919] netlink: 'syz.4.853': attribute type 21 has an invalid length. [ 421.376434][ T8919] netlink: 156 bytes leftover after parsing attributes in process `syz.4.853'. [ 421.431449][ T8920] loop4: detected capacity change from 0 to 2560 [ 421.437210][ T6004] buffer_io_error: 406 callbacks suppressed [ 421.437220][ T6004] Buffer I/O error on dev loop4, logical block 0, async page read [ 421.442477][ T6004] Buffer I/O error on dev loop4, logical block 0, async page read [ 421.445180][ T6004] Buffer I/O error on dev loop4, logical block 0, async page read [ 421.447833][ T6004] Buffer I/O error on dev loop4, logical block 0, async page read [ 421.450744][ T6004] Buffer I/O error on dev loop4, logical block 0, async page read [ 421.461791][ T8920] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 421.464657][ T8920] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 421.467334][ T8920] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 421.469980][ T8920] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 421.473105][ T8920] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 421.584657][ T40] audit: type=1400 audit(1768139543.474:571): avc: denied { shutdown } for pid=8917 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.779944][ T979] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 421.815015][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 422.007190][ T6083] usb 5-1: USB disconnect, device number 5 [ 422.036160][ T1023] usb 6-1: USB disconnect, device number 4 [ 422.110749][ T40] audit: type=1400 audit(1768139543.994:572): avc: denied { setopt } for pid=8934 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.112048][ T8935] netlink: 'syz.4.857': attribute type 10 has an invalid length. [ 422.127615][ T8935] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.130522][ T8935] team0: Failed to send options change via netlink (err -105) [ 422.133026][ T8935] team0: Port device dummy0 added [ 422.138063][ T8935] netlink: 'syz.4.857': attribute type 10 has an invalid length. [ 422.140979][ T8935] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.150341][ T8935] team0: Failed to send options change via netlink (err -105) [ 422.152945][ T8935] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.155902][ T8935] team0: Port device dummy0 removed [ 422.159388][ T8935] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.226801][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 422.362050][ T40] audit: type=1400 audit(1768139544.254:573): avc: denied { append } for pid=8970 comm="syz.2.866" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.640715][ T9015] netlink: 'syz.2.873': attribute type 142 has an invalid length. [ 422.659660][ T9018] geneve5: entered promiscuous mode [ 422.661393][ T9018] geneve5: entered allmulticast mode [ 422.704668][ T40] audit: type=1400 audit(1768139544.594:574): avc: denied { bpf } for pid=9021 comm="syz.1.875" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.713630][ T40] audit: type=1400 audit(1768139544.594:575): avc: denied { perfmon } for pid=9021 comm="syz.1.875" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.885706][ T9038] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 422.944798][ T9038] netlink: 'syz.0.877': attribute type 322 has an invalid length. [ 423.126659][ T9044] sock: sock_set_timeout: `syz.4.878' (pid 9044) tries to set negative timeout [ 423.234570][ T9059] ata1.00: invalid multi_count 1 ignored [ 423.406346][ T40] audit: type=1400 audit(1768139545.294:576): avc: denied { set_context_mgr } for pid=9068 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 423.419570][ T9074] netem: unknown loss type 13 [ 423.421195][ T9074] netem: change failed [ 423.444837][ T9078] program syz.0.888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.625382][ T9092] team0: Port device team_slave_0 removed [ 423.774932][ T40] audit: type=1400 audit(1768139545.664:577): avc: denied { listen } for pid=9103 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 424.071681][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 424.222754][ T9135] netlink: 'syz.4.910': attribute type 7 has an invalid length. [ 424.232079][ T9135] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 424.256092][ T9094] geneve3: entered promiscuous mode [ 424.258393][ T9094] geneve3: entered allmulticast mode [ 424.266398][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 424.273656][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 424.276947][ T10] usb 7-1: can't read configurations, error -71 [ 424.528370][ T9157] gretap1: entered promiscuous mode [ 424.530485][ T9157] gretap1: entered allmulticast mode [ 424.856713][ T9178] input: syz1 as /devices/virtual/input/input8 [ 425.170267][ T9196] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 425.176675][ T6083] IPVS: starting estimator thread 0... [ 425.234295][ T9199] netlink: 'syz.2.932': attribute type 3 has an invalid length. [ 425.272170][ T9197] IPVS: using max 44 ests per chain, 105600 per kthread [ 425.295708][ T9202] 9p: Could not find request transport: v [ 425.383911][ T9213] __nla_validate_parse: 19 callbacks suppressed [ 425.383928][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 425.447280][ T9217] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 425.455996][ T9217] gre2: entered promiscuous mode [ 425.470200][ T9219] vlan2: entered allmulticast mode [ 425.472591][ T9219] bond0: entered allmulticast mode [ 425.474427][ T9219] bond_slave_0: entered allmulticast mode [ 425.476261][ T9219] bond_slave_1: entered allmulticast mode [ 425.478163][ T9219] team0: entered allmulticast mode [ 425.479823][ T9219] team_slave_1: entered allmulticast mode [ 425.482005][ T9219] dummy0: entered allmulticast mode [ 425.547705][ T9228] evm: overlay not supported [ 425.611056][ T9242] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 425.687118][ T9246] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 425.754929][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 425.807668][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 425.812246][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 425.850388][ T9261] 9pnet_virtio: no channels available for device syz [ 425.856963][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 425.856973][ T40] audit: type=1400 audit(1768139547.744:587): avc: denied { write } for pid=9258 comm="syz.2.951" name="/" dev="9p" ino=72876209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.895653][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 425.910704][ T9265] qnx6: unable to set blocksize [ 425.984527][ T9270] xfrm0 speed is unknown, defaulting to 1000 [ 426.121494][ T9288] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 426.122131][ T40] audit: type=1326 audit(1768139548.014:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.2.954" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f669a38f7c9 code=0x0 [ 426.305870][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 426.360964][ T9302] 9pnet_fd: p9_fd_create_tcp (9302): problem connecting socket to 127.0.0.1 [ 426.402557][ T9304] batman_adv: batadv0: Adding interface: macsec0 [ 426.405145][ T9304] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.416341][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.420434][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.425759][ T9304] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 426.431090][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'. [ 426.434662][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'. [ 426.438151][ T9305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'. [ 426.444591][ T9305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'. [ 426.601485][ T9317] nfs4: Unknown parameter 'amfs' [ 426.608667][ T9317] openvswitch: netlink: Flow key attr not present in new flow. [ 426.827906][ T9343] tmpfs: Bad value for 'mpol' [ 426.832701][ T9343] tmpfs: Bad value for 'mpol' [ 426.925660][ T40] audit: type=1400 audit(1768139548.814:589): avc: denied { ioctl } for pid=9355 comm="syz.0.984" path="socket:[26090]" dev="sockfs" ino=26090 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 426.985365][ T9365] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 427.010351][ T9365] bond3: entered promiscuous mode [ 427.012332][ T9365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.515325][ T9403] sctp: [Deprecated]: syz.1.999 (pid 9403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.515325][ T9403] Use struct sctp_sack_info instead [ 427.631391][ T40] audit: type=1400 audit(1768139549.514:590): avc: denied { getopt } for pid=9413 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.639981][ T40] audit: type=1400 audit(1768139549.524:591): avc: denied { setcheckreqprot } for pid=9413 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 427.759908][ T9422] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 427.873113][ T9435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9435 comm=syz.1.1010 [ 427.877471][ T9435] netlink: 'syz.1.1010': attribute type 29 has an invalid length. [ 427.880361][ T9435] netlink: 'syz.1.1010': attribute type 29 has an invalid length. [ 427.904346][ T40] audit: type=1400 audit(1768139549.794:592): avc: denied { wake_alarm } for pid=9436 comm="syz.0.1011" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.183503][ T9470] dlm: non-version read from control device 0 [ 428.186650][ T9471] tmpfs: Group quota inode hardlimit too large. [ 428.324894][ T9484] syz_tun: entered allmulticast mode [ 428.331866][ T9484] dvmrp8: entered allmulticast mode [ 428.335574][ T9483] syz_tun: left allmulticast mode [ 428.352250][ T9485] syz.4.1024 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 428.360503][ T9482] netlink: 'syz.4.1024': attribute type 83 has an invalid length. [ 428.454186][ T9497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9497 comm=syz.4.1030 [ 428.517559][ T9500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=9500 comm=syz.4.1030 [ 428.903461][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.907330][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.911351][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.915624][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.919159][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.949098][ T9504] xfrm0 speed is unknown, defaulting to 1000 [ 429.000544][ T9516] openvswitch: netlink: Flow key attribute not present in set flow. [ 429.037967][ T9521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9521 comm=syz.0.1038 [ 429.064048][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 429.116863][ T40] audit: type=1400 audit(1768139551.004:593): avc: denied { setopt } for pid=9528 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.122400][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.125575][ T40] audit: type=1400 audit(1768139551.004:594): avc: denied { bind } for pid=9528 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.127548][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.137138][ T9504] bridge_slave_0: entered allmulticast mode [ 429.139814][ T9504] bridge_slave_0: entered promiscuous mode [ 429.144087][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.146396][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.148637][ T9504] bridge_slave_1: entered allmulticast mode [ 429.151290][ T9504] bridge_slave_1: entered promiscuous mode [ 429.166852][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.171199][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.186162][ T9504] team0: Port device team_slave_0 added [ 429.189275][ T9504] team0: Port device team_slave_1 added [ 429.202884][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.205063][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.213183][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.217141][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.219312][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.227498][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.250638][ T9504] hsr_slave_0: entered promiscuous mode [ 429.253152][ T9504] hsr_slave_1: entered promiscuous mode [ 429.255248][ T9504] debugfs: 'hsr0' already exists in 'hsr' [ 429.257116][ T9504] Cannot create hsr debugfs directory [ 429.358507][ T9504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.364242][ T9504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.370360][ T9504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.376162][ T9504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.406449][ T9544] use of bytesused == 0 is deprecated and will be removed in the future, [ 429.409956][ T9544] use the actual size instead. [ 429.418529][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.428716][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.434279][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.436436][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.442961][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.445213][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.510773][ T40] audit: type=1400 audit(1768139551.394:595): avc: denied { remount } for pid=9552 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 429.555165][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.569183][ T40] audit: type=1400 audit(1768139551.454:596): avc: denied { unmount } for pid=5994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 429.609801][ T9566] tipc: Failed to remove unknown binding: 66,1,1/0:107175172/107175174 [ 429.613649][ T9566] tipc: Failed to remove unknown binding: 66,1,1/0:107175172/107175174 [ 429.645374][ T9569] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 429.652670][ T9569] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 429.713397][ T9504] veth0_vlan: entered promiscuous mode [ 429.715776][ T9582] smc: net device bond0 applied user defined pnetid SYZ2 [ 429.718299][ T9504] veth1_vlan: entered promiscuous mode [ 429.738070][ T9582] smc: removing net device bond0 with user defined pnetid SYZ2 [ 429.745796][ T9582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.749615][ T9582] bond_slave_0: left allmulticast mode [ 429.753939][ T9582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.757752][ T9582] bond_slave_1: left allmulticast mode [ 429.761880][ T9582] bond0 (unregistering): (slave team0): Releasing backup interface [ 429.765345][ T9582] team0: left allmulticast mode [ 429.767405][ T9582] team_slave_1: left allmulticast mode [ 429.784252][ T9582] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 429.788057][ T9582] dummy0: left allmulticast mode [ 429.792000][ T9582] bond0 (unregistering): Released all slaves [ 429.815988][ T9504] veth0_macvtap: entered promiscuous mode [ 429.822930][ T9504] veth1_macvtap: entered promiscuous mode [ 429.836912][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.845477][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.856154][ T6075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.861171][ T6075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.865159][ T6075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.868492][ T6075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.904693][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.907115][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.925525][ T6830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.928948][ T6830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.128647][ T9595] syzkaller0: entered promiscuous mode [ 430.130552][ T9595] syzkaller0: entered allmulticast mode [ 430.994539][ T5289] Bluetooth: hci2: command tx timeout [ 431.341010][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 431.341022][ T40] audit: type=1400 audit(1768139553.224:599): avc: denied { write } for pid=9610 comm="syz.2.1059" name="file0" dev="9p" ino=72876211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 431.343126][ T9613] No buffer was provided with the request [ 431.514079][ T9622] __nla_validate_parse: 19 callbacks suppressed [ 431.514091][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 431.521416][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 431.526785][ T9624] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 431.537598][ T9624] CIFS mount error: No usable UNC path provided in device string! [ 431.537598][ T9624] [ 431.542113][ T9624] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 431.807450][ T9651] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1070'. [ 431.812349][ T40] audit: type=1400 audit(1768139553.704:600): avc: denied { setattr } for pid=9650 comm="syz.2.1070" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.896984][ T9649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.026766][ T9657] tmpfs: Bad value for 'mpol' [ 432.084444][ T9659] misc userio: Invalid payload size [ 432.089571][ T40] audit: type=1400 audit(1768139553.974:601): avc: denied { read open } for pid=9662 comm="syz.5.1074" path="/" dev="configfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.121485][ T9661] xt_hashlimit: max too large, truncated to 1048576 [ 432.498336][ T9691] lo speed is unknown, defaulting to 1000 [ 432.504148][ T9691] lo speed is unknown, defaulting to 1000 [ 432.508125][ T9691] lo speed is unknown, defaulting to 1000 [ 432.549973][ T9692] ªªªªªª: renamed from lo (while UP) [ 432.581819][ T6083] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 432.684013][ T5958] ªªªªªª speed is unknown, defaulting to 1000 [ 432.686795][ T9691] infiniband sz1: set active [ 432.688868][ T9691] infiniband sz1: added ªªªªªª [ 432.716076][ T9691] RDS/IB: sz1: added [ 432.717844][ T9691] smc: adding ib device sz1 with port count 1 [ 432.719924][ T9691] smc: ib device sz1 port 1 has no pnetid [ 432.724804][ T5958] ªªªªªª speed is unknown, defaulting to 1000 [ 432.727934][ T9691] ªªªªªª speed is unknown, defaulting to 1000 [ 432.743997][ T6083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.747206][ T6083] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 432.750032][ T6083] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 432.756067][ T9695] xfrm0 speed is unknown, defaulting to 1000 [ 432.762028][ T6083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.765908][ T6083] usb 5-1: config 0 descriptor?? [ 432.791966][ T6083] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 432.794316][ T6083] dvb-usb: bulk message failed: -22 (3/0) [ 432.800069][ T6083] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 432.804036][ T6083] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 432.806466][ T6083] usb 5-1: media controller created [ 432.809260][ T6083] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.817457][ T6083] dvb-usb: bulk message failed: -22 (6/0) [ 432.819483][ T6083] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 432.832669][ T6083] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input12 [ 432.839627][ T6083] dvb-usb: schedule remote query interval to 150 msecs. [ 432.841936][ T6083] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 432.867954][ T9695] ªªªªªª speed is unknown, defaulting to 1000 [ 432.955037][ T9691] ªªªªªª speed is unknown, defaulting to 1000 [ 432.977324][ T9685] dvb-usb: bulk message failed: -22 (2/0) [ 433.002358][ T6083] dvb-usb: bulk message failed: -22 (1/0) [ 433.003548][ T6062] usb 5-1: USB disconnect, device number 6 [ 433.004814][ T6083] dvb-usb: error while querying for an remote control event. [ 433.051957][ T6062] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 433.087459][ T5289] Bluetooth: hci2: command tx timeout [ 433.142092][ T9708] trusted_key: encrypted_key: insufficient parameters specified [ 433.151054][ T9710] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 433.164266][ T9710] team0: Failed to send options change via netlink (err -105) [ 433.167385][ T9710] team0: Port device dummy0 added [ 433.170375][ T9691] ªªªªªª speed is unknown, defaulting to 1000 [ 433.171422][ T9710] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 433.256257][ T40] audit: type=1400 audit(1768139555.144:602): avc: denied { relabelfrom } for pid=9713 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 433.271765][ T40] audit: type=1400 audit(1768139555.144:603): avc: denied { relabelto } for pid=9713 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 433.292291][ T9691] ªªªªªª speed is unknown, defaulting to 1000 [ 433.304713][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 433.397005][ T9691] ªªªªªª speed is unknown, defaulting to 1000 [ 433.493701][ T9734] tipc: Can't bind to reserved service type 2 [ 433.590594][ T9739] netlink: 'syz.2.1098': attribute type 21 has an invalid length. [ 433.601895][ T9739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1098'. [ 433.624067][ T9741] netlink: 'syz.5.1099': attribute type 1 has an invalid length. [ 433.660794][ T40] audit: type=1400 audit(1768139555.544:604): avc: denied { read } for pid=9745 comm="syz.2.1101" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 433.671726][ T40] audit: type=1400 audit(1768139555.544:605): avc: denied { open } for pid=9745 comm="syz.2.1101" path="net:[4026532885]" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 433.747003][ T9749] nvme_fabrics: missing parameter 'transport=%s' [ 433.749193][ T9749] nvme_fabrics: missing parameter 'nqn=%s' [ 433.850908][ T9762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1105'. [ 433.902336][ T9772] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 434.084185][ T40] audit: type=1400 audit(1768139555.974:606): avc: denied { listen } for pid=9781 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 434.176295][ T40] audit: type=1400 audit(1768139556.064:607): avc: denied { accept } for pid=9781 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 434.227227][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'. [ 434.230233][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1110'. [ 434.233749][ T9783] netlink: 'syz.5.1110': attribute type 11 has an invalid length. [ 434.236890][ T9783] netlink: 'syz.5.1110': attribute type 7 has an invalid length. [ 434.248193][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1110'. [ 434.251310][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1110'. [ 434.538323][ T9805] ufs: You didn't specify the type of your ufs filesystem [ 434.538323][ T9805] [ 434.538323][ T9805] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 434.538323][ T9805] [ 434.538323][ T9805] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 434.547871][ T9805] ufs: ufstype=old is supported read-only [ 434.550727][ T9805] ufs: ufs_fill_super(): bad magic number [ 434.811852][ T5957] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 435.002365][ T5957] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 435.006392][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.010112][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.014484][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.018513][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.021440][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.028444][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.031936][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.034917][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.038744][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.044175][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.047146][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.051770][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.055167][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.058132][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.062270][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.066032][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.070118][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.074833][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.078550][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.082240][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.086241][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.092603][ T5957] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 435.095755][ T5957] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.099379][ T5957] usb 5-1: config 64 interface 0 has no altsetting 0 [ 435.107178][ T5957] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 435.110467][ T9822] xfrm0 speed is unknown, defaulting to 1000 [ 435.111005][ T5957] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 435.113863][ T9822] ªªªªªª speed is unknown, defaulting to 1000 [ 435.116401][ T5957] usb 5-1: Product: syz [ 435.119366][ T5957] usb 5-1: Manufacturer: syz [ 435.120911][ T5957] usb 5-1: SerialNumber: syz [ 435.135819][ T5957] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 435.151836][ T5289] Bluetooth: hci2: command tx timeout [ 435.308572][ T9828] [U] ^B [ 435.335050][ T9807] nfs4: Unknown parameter '! ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 435.335050][ T9807] ' [ 435.362662][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.366739][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.376442][ T6063] usb 5-1: USB disconnect, device number 7 [ 435.386697][ T6063] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 435.417158][ T9835] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.431110][ T9837] netlink: 'syz.2.1127': attribute type 4 has an invalid length. [ 435.496925][ T40] audit: type=1400 audit(1768139557.384:608): avc: denied { shutdown } for pid=9845 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.653425][ T9855] fuse: Bad value for 'fd' [ 435.737028][ T9862] 9pnet_virtio: no channels available for device syz [ 435.799319][ T6824] Bluetooth: hci4: Frame reassembly failed (-84) [ 435.803295][ T6824] Bluetooth: hci4: Frame reassembly failed (-84) [ 435.875827][ T9867] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 435.879480][ T9867] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 435.886637][ T9867] macvtap1: entered promiscuous mode [ 435.888363][ T9867] macvtap1: entered allmulticast mode [ 435.890680][ T9867] veth0_to_team: entered promiscuous mode [ 435.893008][ T9867] veth0_to_team: entered allmulticast mode [ 435.895897][ T9867] team0: Device macvtap1 failed to register rx_handler [ 435.898944][ T9867] veth0_to_team: left allmulticast mode [ 435.902597][ T9867] veth0_to_team: left promiscuous mode [ 435.904987][ T9871] program syz.5.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.934578][ T9876] overlayfs: failed to clone upperpath [ 436.125260][ T9899] comedi: valid board names for 8255 driver are: [ 436.127438][ T9899] 8255 [ 436.128409][ T9899] comedi: valid board names for vmk80xx driver are: [ 436.130526][ T9899] vmk80xx [ 436.133958][ T9899] comedi: valid board names for usbduxsigma driver are: [ 436.136678][ T9899] usbduxsigma [ 436.137829][ T9899] comedi: valid board names for usbduxfast driver are: [ 436.140087][ T9899] usbduxfast [ 436.141251][ T9899] comedi: valid board names for usbdux driver are: [ 436.146004][ T9899] usbdux [ 436.146967][ T9899] comedi: valid board names for ni6501 driver are: [ 436.148998][ T9899] ni6501 [ 436.149984][ T9899] comedi: valid board names for dt9812 driver are: [ 436.152392][ T9899] dt9812 [ 436.153364][ T9899] comedi: valid board names for ni_labpc_cs driver are: [ 436.155558][ T9899] ni_labpc_cs [ 436.156658][ T9899] comedi: valid board names for ni_daq_700 driver are: [ 436.158787][ T9899] ni_daq_700 [ 436.159853][ T9899] comedi: valid board names for labpc_pci driver are: [ 436.162448][ T9899] labpc_pci [ 436.163529][ T9899] comedi: valid board names for adl_pci9118 driver are: [ 436.165723][ T9899] pci9118dg [ 436.166784][ T9899] pci9118hg [ 436.167826][ T9899] pci9118hr [ 436.168867][ T9899] comedi: valid board names for 8255_pci driver are: [ 436.170983][ T9899] 8255_pci [ 436.172416][ T9899] comedi: valid board names for s526 driver are: [ 436.174453][ T9899] s526 [ 436.175349][ T9899] comedi: valid board names for multiq3 driver are: [ 436.177372][ T9899] multiq3 [ 436.178377][ T9899] comedi: valid board names for pcmuio driver are: [ 436.180329][ T9899] pcmuio48 [ 436.181257][ T9899] pcmuio96 [ 436.182582][ T9899] comedi: valid board names for pcmmio driver are: [ 436.184866][ T9899] pcmmio [ 436.185926][ T9899] comedi: valid board names for pcmda12 driver are: [ 436.187975][ T9899] pcmda12 [ 436.188976][ T9899] comedi: valid board names for pcmad driver are: [ 436.191026][ T9899] pcmad12 [ 436.192567][ T9899] pcmad16 [ 436.193680][ T9899] comedi: valid board names for ni_labpc driver are: [ 436.195830][ T9899] lab-pc-1200 [ 436.197237][ T9899] lab-pc-1200ai [ 436.198477][ T9899] lab-pc+ [ 436.199542][ T9899] comedi: valid board names for atmio16 driver are: [ 436.203045][ T9899] atmio16 [ 436.204109][ T9899] atmio16d [ 436.205164][ T9899] comedi: valid board names for ni_at_ao driver are: [ 436.207303][ T9899] at-ao-6 [ 436.208280][ T9899] at-ao-10 [ 436.209300][ T9899] comedi: valid board names for ni_at_a2150 driver are: [ 436.211503][ T9899] ni_at_a2150 [ 436.213025][ T9899] comedi: valid board names for adq12b driver are: [ 436.215112][ T9899] adq12b [ 436.216091][ T9899] comedi: valid board names for mpc624 driver are: [ 436.218110][ T9899] mpc624 [ 436.219076][ T9899] comedi: valid board names for c6xdigio driver are: [ 436.221166][ T9899] c6xdigio [ 436.222710][ T9899] comedi: valid board names for aio_iiro_16 driver are: [ 436.224940][ T9899] aio_iiro_16 [ 436.226094][ T9899] comedi: valid board names for aio_aio12_8 driver are: [ 436.228228][ T9899] aio_aio12_8 [ 436.229337][ T9899] aio_ai12_8 [ 436.230432][ T9899] aio_ao12_4 [ 436.231528][ T9899] comedi: valid board names for fl512 driver are: [ 436.234246][ T9899] fl512 [ 436.235187][ T9899] comedi: valid board names for dmm32at driver are: [ 436.237278][ T9899] dmm32at [ 436.238290][ T9899] comedi: valid board names for dt282x driver are: [ 436.240343][ T9899] dt2821 [ 436.241298][ T9899] dt2821-f [ 436.242847][ T9899] dt2821-g [ 436.243908][ T9899] dt2823 [ 436.244900][ T9899] dt2824-pgh [ 436.245993][ T9899] dt2824-pgl [ 436.247100][ T9899] dt2825 [ 436.248052][ T9899] dt2827 [ 436.249006][ T9899] dt2828 [ 436.249983][ T9899] dt2829 [ 436.250936][ T9899] dt21-ez [ 436.252550][ T9899] dt23-ez [ 436.253587][ T9899] dt24-ez [ 436.254628][ T9899] dt24-ez-pgl [ 436.255741][ T9899] comedi: valid board names for dt2817 driver are: [ 436.257801][ T9899] dt2817 [ 436.258850][ T9899] comedi: valid board names for dt2815 driver are: [ 436.260902][ T9899] dt2815 [ 436.262469][ T9899] comedi: valid board names for dt2814 driver are: [ 436.264562][ T9899] dt2814 [ 436.265691][ T9899] comedi: valid board names for dt2811 driver are: [ 436.267771][ T9899] dt2811-pgh [ 436.268839][ T9899] dt2811-pgl [ 436.269978][ T9899] comedi: valid board names for dt2801 driver are: [ 436.272345][ T9899] dt2801 [ 436.273329][ T9899] comedi: valid board names for das6402 driver are: [ 436.275481][ T9899] das6402-12 [ 436.276603][ T9899] das6402-16 [ 436.277683][ T9899] comedi: valid board names for das1800 driver are: [ 436.279684][ T9899] das-1701st [ 436.280768][ T9899] das-1701st-da [ 436.282418][ T9899] das-1702st [ 436.283532][ T9899] das-1702st-da [ 436.284741][ T9899] das-1702hr [ 436.285804][ T9899] das-1702hr-da [ 436.286953][ T9899] das-1701ao [ 436.288012][ T9899] das-1702ao [ 436.289075][ T9899] das-1801st [ 436.290172][ T9899] das-1801st-da [ 436.291323][ T9899] das-1802st [ 436.293054][ T9899] das-1802st-da [ 436.294270][ T9899] das-1802hr [ 436.295386][ T9899] das-1802hr-da [ 436.296527][ T9899] das-1801hc [ 436.297684][ T9899] das-1802hc [ 436.298943][ T9899] das-1801ao [ 436.300031][ T9899] das-1802ao [ 436.301099][ T9899] comedi: valid board names for das800 driver are: [ 436.304195][ T9899] das-800 [ 436.305536][ T9899] cio-das800 [ 436.306987][ T9899] das-801 [ 436.308310][ T9899] cio-das801 [ 436.309744][ T9899] das-802 [ 436.311071][ T9899] cio-das802 [ 436.313191][ T9899] cio-das802/16 [ 436.314742][ T9899] comedi: valid board names for isa-das08 driver are: [ 436.317533][ T9899] isa-das08 [ 436.318944][ T9899] das08-pgm [ 436.320331][ T9899] das08-pgh [ 436.322580][ T9899] das08-pgl [ 436.323998][ T9899] das08-aoh [ 436.325401][ T9899] das08-aol [ 436.326756][ T9899] das08-aom [ 436.328142][ T9899] das08/jr-ao [ 436.329395][ T9899] das08jr-16-ao [ 436.330559][ T9899] pc104-das08 [ 436.332126][ T9899] das08jr/16 [ 436.333209][ T9899] comedi: valid board names for das16m1 driver are: [ 436.335406][ T9899] das16m1 [ 436.336407][ T9899] comedi: valid board names for dac02 driver are: [ 436.338523][ T9899] dac02 [ 436.339447][ T9899] comedi: valid board names for rti802 driver are: [ 436.341517][ T9899] rti802 [ 436.343643][ T9899] comedi: valid board names for rti800 driver are: [ 436.346381][ T9899] rti800 [ 436.347675][ T9899] rti815 [ 436.348945][ T9899] comedi: valid board names for pcm3724 driver are: [ 436.352319][ T9899] pcm3724 [ 436.353688][ T9899] comedi: valid board names for pcl818 driver are: [ 436.356376][ T9899] pcl818l [ 436.357690][ T9899] pcl818h [ 436.359026][ T9899] pcl818hd [ 436.360384][ T9899] pcl818hg [ 436.362203][ T9899] pcl818 [ 436.363485][ T9899] pcl718 [ 436.364744][ T9899] pcm3718 [ 436.366099][ T9899] comedi: valid board names for pcl816 driver are: [ 436.368861][ T9899] pcl816 [ 436.370130][ T9899] pcl814b [ 436.371171][ T9899] comedi: valid board names for pcl812 driver are: [ 436.373473][ T9899] pcl812 [ 436.374455][ T9899] pcl812pg [ 436.375769][ T9899] acl8112pg [ 436.377113][ T9899] acl8112dg [ 436.378458][ T9899] acl8112hg [ 436.379744][ T9899] a821pgl [ 436.380739][ T9899] a821pglnda [ 436.382253][ T9899] a821pgh [ 436.383261][ T9899] a822pgl [ 436.384274][ T9899] a822pgh [ 436.385330][ T9899] a823pgl [ 436.386357][ T9899] a823pgh [ 436.387355][ T9899] pcl813 [ 436.388363][ T9899] pcl813b [ 436.389360][ T9899] acl8113 [ 436.390381][ T9899] iso813 [ 436.391336][ T9899] acl8216 [ 436.392404][ T9899] a826pg [ 436.393356][ T9899] comedi: valid board names for pcl730 driver are: [ 436.395605][ T9899] pcl730 [ 436.396588][ T9899] iso730 [ 436.397559][ T9899] acl7130 [ 436.398615][ T9899] pcm3730 [ 436.399612][ T9899] pcl725 [ 436.400570][ T9899] p8r8dio [ 436.401862][ T9899] acl7225b [ 436.402878][ T9899] p16r16dio [ 436.403930][ T9899] pcl733 [ 436.404920][ T9899] pcl734 [ 436.405910][ T9899] opmm-1616-xt [ 436.407063][ T9899] pearl-mm-p [ 436.408194][ T9899] ir104-pbf [ 436.409240][ T9899] comedi: valid board names for pcl726 driver are: [ 436.411300][ T9899] pcl726 [ 436.412472][ T9899] pcl727 [ 436.413425][ T9899] pcl728 [ 436.414396][ T9899] acl6126 [ 436.415626][ T9899] acl6128 [ 436.416951][ T9899] comedi: valid board names for pcl724 driver are: [ 436.419100][ T9899] pcl724 [ 436.420050][ T9899] pcl722 [ 436.420996][ T9899] pcl731 [ 436.422071][ T9899] acl7122 [ 436.423068][ T9899] acl7124 [ 436.424062][ T9899] pet48dio [ 436.425211][ T9899] pcmio48 [ 436.426413][ T9899] onyx-mm-dio [ 436.427530][ T9899] comedi: valid board names for pcl711 driver are: [ 436.429619][ T9899] pcl711 [ 436.430582][ T9899] pcl711b [ 436.431585][ T9899] acl8112hg [ 436.432687][ T9899] acl8112dg [ 436.433753][ T9899] comedi: valid board names for amplc_pc263 driver are: [ 436.436134][ T9899] pc263 [ 436.437087][ T9899] comedi: valid board names for amplc_pc236 driver are: [ 436.439312][ T9899] pc36at [ 436.440266][ T9899] comedi: valid board names for amplc_dio200 driver are: [ 436.442782][ T9899] pc212e [ 436.443740][ T9899] pc214e [ 436.444693][ T9899] pc215e [ 436.445686][ T9899] pc218e [ 436.446666][ T9899] pc272e [ 436.447644][ T9899] comedi: valid board names for comedi_parport driver are: [ 436.449920][ T9899] comedi_parport [ 436.451099][ T9899] comedi: valid board names for comedi_test driver are: [ 436.453320][ T9899] comedi_test [ 436.454414][ T9899] comedi: valid board names for comedi_bond driver are: [ 436.456597][ T9899] comedi_bond [ 436.466258][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 436.466267][ T40] audit: type=1400 audit(1768139558.354:615): avc: denied { bind } for pid=9913 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 436.498131][ T40] audit: type=1326 audit(1768139558.384:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.1151" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64078f7c9 code=0x0 [ 436.517706][ T40] audit: type=1400 audit(1768139558.404:617): avc: denied { map } for pid=9917 comm="syz.4.1152" path="/310" dev="tmpfs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.603832][ T9919] xt_hashlimit: size too large, truncated to 1048576 [ 436.713795][ T9927] __nla_validate_parse: 5 callbacks suppressed [ 436.713806][ T9927] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1155'. [ 437.022850][ T40] audit: type=1400 audit(1768139558.914:618): avc: denied { unmount } for pid=5994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 437.056364][ T9935] FAT-fs (loop2): unable to read boot sector [ 437.081826][ T5957] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 437.161336][ T9943] tipc: Started in network mode [ 437.163561][ T9943] tipc: Node identity ee9a3676e17a, cluster identity 4711 [ 437.165888][ T9943] tipc: Enabled bearer , priority 0 [ 437.168646][ T9942] tipc: Enabling of bearer rejected, already enabled [ 437.173610][ T9943] tipc: Resetting bearer [ 437.181582][ T9941] tipc: Disabling bearer [ 437.231776][ T64] Bluetooth: hci2: command tx timeout [ 437.242073][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 437.246697][ T5957] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 437.250183][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.254528][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.258352][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 54304, setting to 1024 [ 437.264332][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 437.268358][ T5957] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.273712][ T5957] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.277347][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.311472][ T40] audit: type=1400 audit(1768139559.194:619): avc: denied { map } for pid=9945 comm="syz.2.1162" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 437.458088][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 437.486544][ T5957] usb 5-1: usb_control_msg returned -32 [ 437.489024][ T5957] usbtmc 5-1:16.0: can't read capabilities [ 437.860103][ T6084] usb 5-1: USB disconnect, device number 8 [ 437.871796][ T5289] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 437.872055][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 437.932689][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 437.945729][ T9968] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1169'. [ 437.968335][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 437.971579][ T9966] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1168'. [ 437.987527][ T9970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9970 comm=syz.0.1170 [ 438.038794][ T9974] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 438.043528][ T9974] netlink: 'syz.0.1172': attribute type 2 has an invalid length. [ 438.046176][ T9974] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 438.048776][ T9974] netlink: 'syz.0.1172': attribute type 3 has an invalid length. [ 438.051168][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 438.118761][ T40] audit: type=1400 audit(1768139560.004:620): avc: denied { block_suspend } for pid=9977 comm="syz.0.1174" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.207383][ T40] audit: type=1400 audit(1768139560.094:621): avc: denied { setattr } for pid=9983 comm="syz.2.1176" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 438.231682][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 438.235002][ T9986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9986 comm=syz.0.1177 [ 438.379340][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 438.452287][ T40] audit: type=1400 audit(1768139560.344:622): avc: denied { setattr } for pid=10005 comm="syz.0.1185" name="NETLINK" dev="sockfs" ino=30920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 438.466805][ T40] audit: type=1400 audit(1768139560.354:623): avc: denied { mounton } for pid=10006 comm="syz.2.1184" path="/257/bus" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 438.466820][T10009] btrfs: Unknown parameter 'discard*½p' [ 438.543930][T10020] netlink: 'syz.0.1188': attribute type 30 has an invalid length. [ 438.558505][T10020] bond5: option arp_missed_max: invalid value (0) [ 438.560946][T10020] bond5: option arp_missed_max: allowed values 1 - 255 [ 438.565022][T10020] bond5 (unregistering): Released all slaves [ 438.584234][T10027] binder: 10026:10027 ioctl c0045006 200000000140 returned -22 [ 438.596603][T10027] binder: 10026:10027 ioctl 5412 200000000440 returned -22 [ 438.599061][ T40] audit: type=1400 audit(1768139560.484:624): avc: denied { call } for pid=10026 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 438.733483][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 438.899801][T10055] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 439.300351][T10098] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 439.566241][T10121] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.568628][T10121] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 439.571210][T10121] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.575524][T10121] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 439.579867][T10122] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.583212][T10122] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 439.586382][T10122] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.588719][T10122] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 439.924096][T10135] ipt_ECN: cannot use operation on non-tcp rule [ 440.088184][T10155] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4161737513 (33293900104 ns) > initial count (23937561264 ns). Using initial count to start timer. [ 440.202783][T10162] IPVS: Error connecting to the multicast addr [ 440.249641][T10166] overlay: filesystem on ./bus not supported as upperdir [ 440.293162][T10175] netlink: 'syz.2.1224': attribute type 4 has an invalid length. [ 440.384705][T10184] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 440.384705][T10184] program syz.2.1227 not setting count and/or reply_len properly [ 440.393756][T10185] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 440.393756][T10185] program syz.2.1227 not setting count and/or reply_len properly [ 440.426600][T10190] unsupported nlmsg_type 40 [ 440.835715][T10237] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 440.865036][T10238] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 440.868622][T10238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 440.957373][T10247] ./bus: Can't lookup blockdev [ 440.973986][T10246] block device autoloading is deprecated and will be removed. [ 441.019170][T10240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.044374][T10255] netlink: 'syz.5.1248': attribute type 11 has an invalid length. [ 441.129485][T10272] fuse: Bad value for 'user_id' [ 441.131117][T10272] fuse: Bad value for 'user_id' [ 441.159618][T10273] batman_adv: batadv0: Adding interface: macsec1 [ 441.163433][T10273] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.173665][T10273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.176999][T10273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.179991][T10273] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 441.336552][T10299] pimreg: entered allmulticast mode [ 441.483796][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 441.483813][ T40] audit: type=1400 audit(1768139563.374:708): avc: denied { write } for pid=10317 comm="syz.0.1268" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.484399][T10318] Dead loop on virtual device ip6_vti0, fix it urgently! [ 441.660005][T10330] Cannot find add_set index 0 as target [ 441.664486][ T40] audit: type=1400 audit(1768139563.554:709): avc: denied { write } for pid=10329 comm="syz.0.1273" lport=51648 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.673965][ T40] audit: type=1400 audit(1768139563.554:710): avc: denied { setopt } for pid=10329 comm="syz.0.1273" lport=51648 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.709339][ T40] audit: type=1400 audit(1768139563.594:711): avc: denied { create } for pid=10336 comm="syz.5.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 441.714984][T10337] geneve2: entered promiscuous mode [ 441.717508][T10337] geneve2: entered allmulticast mode [ 441.718447][ T40] audit: type=1400 audit(1768139563.604:712): avc: denied { create } for pid=10338 comm="syz.0.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 441.727093][ T40] audit: type=1400 audit(1768139563.614:713): avc: denied { getopt } for pid=10338 comm="syz.0.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 441.735101][ T40] audit: type=1400 audit(1768139563.614:714): avc: denied { create } for pid=10338 comm="syz.0.1275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 441.743676][ T40] audit: type=1400 audit(1768139563.614:715): avc: denied { write } for pid=10338 comm="syz.0.1275" name="file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 441.753547][ T40] audit: type=1400 audit(1768139563.614:716): avc: denied { open } for pid=10338 comm="syz.0.1275" path="/355/file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 441.771745][ T40] audit: type=1400 audit(1768139563.624:717): avc: denied { ioctl } for pid=10338 comm="syz.0.1275" path="/355/file0" dev="tmpfs" ino=1924 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 441.784229][T10339] fuseblk: Unknown parameter 'uid<00000000000000000000' [ 441.844454][T10347] __nla_validate_parse: 19 callbacks suppressed [ 441.844465][T10347] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1277'. [ 441.850060][T10347] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1277'. [ 441.950384][T10355] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 441.984194][T10358] xfs: Unknown parameter 'norecovery”i¤ã ºÇOô”bpèجл”zQŸŸ}²Ó}¸”eh%aŠ“Ãø5“ĵ§UÔ-ÙduìúBÚSuT ÖÈ9èœÅ¶/mp<¾ö­-¿ 1 [ 443.290003][ T5999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.294197][ T5999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.298811][ T5999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.302463][ T5999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.324261][ T5289] Bluetooth: hci2: command 0x0405 tx timeout [ 443.370197][T10452] xfrm0 speed is unknown, defaulting to 1000 [ 443.374229][T10452] ªªªªªª speed is unknown, defaulting to 1000 [ 443.410925][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 443.422010][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1321'. [ 443.478126][T10466] BIDI support in bsg has been removed. [ 443.667915][T10475] batadv_slave_1: entered promiscuous mode [ 443.786529][T10475] batadv_slave_1: left promiscuous mode [ 443.815909][T10452] chnl_net:caif_netlink_parms(): no params data found [ 443.878826][ T6830] bridge_slave_1: left allmulticast mode [ 443.880641][ T6830] bridge_slave_1: left promiscuous mode [ 443.885383][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.888928][ T6830] bridge_slave_0: left allmulticast mode [ 443.890740][ T6830] bridge_slave_0: left promiscuous mode [ 443.893595][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.204432][ T6830] bond1 (unregistering): Released all slaves [ 444.210729][ T6830] bond2 (unregistering): Released all slaves [ 444.276763][ T6830] bond3 (unregistering): Released all slaves [ 444.322159][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.324490][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.326839][T10452] bridge_slave_0: entered allmulticast mode [ 444.330168][T10452] bridge_slave_0: entered promiscuous mode [ 444.334589][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.337682][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.340762][T10452] bridge_slave_1: entered allmulticast mode [ 444.345003][T10452] bridge_slave_1: entered promiscuous mode [ 444.379099][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.388709][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.422016][T10452] team0: Port device team_slave_0 added [ 444.427584][T10452] team0: Port device team_slave_1 added [ 444.454388][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.459958][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.469240][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.484588][T10506] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 444.484973][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.489339][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.489719][T10506] VFS: Can't find a romfs filesystem on dev nullb0. [ 444.489719][T10506] [ 444.502733][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.517482][T10506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.544263][T10506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1330'. [ 444.547127][T10506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1330'. [ 444.553109][T10452] hsr_slave_0: entered promiscuous mode [ 444.555403][T10452] hsr_slave_1: entered promiscuous mode [ 444.557623][T10452] debugfs: 'hsr0' already exists in 'hsr' [ 444.559429][T10452] Cannot create hsr debugfs directory [ 444.594757][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1332'. [ 444.733193][ T6830] hsr_slave_0: left promiscuous mode [ 444.736085][ T6830] hsr_slave_1: left promiscuous mode [ 444.738872][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.742908][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.836333][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.078418][ T6830] team0 (unregistering): Port device team_slave_1 removed [ 445.370364][T10452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.386080][T10452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.393375][ T5999] Bluetooth: hci3: command tx timeout [ 445.399863][T10452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.405073][T10452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 445.455372][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.466601][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.473271][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.475651][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.489714][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.492049][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.629733][T10548] gfs2: error -5 reading superblock [ 445.640715][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.688838][T10551] tipc: Enabled bearer , priority 10 [ 445.799607][T10452] veth0_vlan: entered promiscuous mode [ 445.804747][T10452] veth1_vlan: entered promiscuous mode [ 445.822419][T10452] veth0_macvtap: entered promiscuous mode [ 445.826385][T10452] veth1_macvtap: entered promiscuous mode [ 445.835734][T10452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.842371][T10452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.848096][ T6835] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.852180][ T6835] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.856527][ T6835] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.859532][ T6835] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.903822][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.906447][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.926126][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.928621][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.001857][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 446.086224][T10570] nfs4: Bad value for 'source' [ 446.088560][T10570] nfs4: Bad value for 'source' [ 446.090810][T10570] nfs4: Bad value for 'source' [ 446.093492][T10570] nfs4: Bad value for 'source' [ 446.141706][ T10] usb 5-1: device descriptor read/64, error -71 [ 446.381740][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 446.433935][T10582] netlink: 'syz.6.1348': attribute type 2 has an invalid length. [ 446.498203][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 446.498219][ T40] audit: type=1400 audit(1768139568.384:815): avc: denied { write } for pid=10583 comm="syz.2.1349" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 446.511998][ T10] usb 5-1: device descriptor read/64, error -71 [ 446.519145][T10585] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 446.519145][T10585] program syz.2.1349 not setting count and/or reply_len properly [ 446.621942][ T10] usb usb5-port1: attempt power cycle [ 446.658080][ T40] audit: type=1400 audit(1768139568.544:816): avc: denied { create } for pid=10589 comm="syz.2.1351" name="#26" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 446.667266][ T40] audit: type=1400 audit(1768139568.554:817): avc: denied { link } for pid=10589 comm="syz.2.1351" name="#26" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 446.684177][ T40] audit: type=1400 audit(1768139568.554:818): avc: denied { rename } for pid=10589 comm="syz.2.1351" name="#27" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 446.770851][ T40] audit: type=1400 audit(1768139568.654:819): avc: denied { unmount } for pid=5994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 446.801207][ T40] audit: type=1400 audit(1768139568.684:820): avc: denied { getopt } for pid=10592 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 446.803559][ T6062] tipc: Node number set to 266352246 [ 446.823497][ T40] audit: type=1400 audit(1768139568.694:821): avc: denied { name_bind } for pid=10592 comm="syz.2.1352" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 446.968461][T10608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.972236][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 447.002723][ T10] usb 5-1: device descriptor read/8, error -71 [ 447.030841][ T40] audit: type=1400 audit(1768139568.914:822): avc: denied { read write } for pid=10611 comm="syz.2.1357" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 447.041934][ T40] audit: type=1400 audit(1768139568.914:823): avc: denied { open } for pid=10611 comm="syz.2.1357" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 447.241721][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 447.262467][ T10] usb 5-1: device descriptor read/8, error -71 [ 447.375967][ T10] usb usb5-port1: unable to enumerate USB device [ 447.472287][ T5999] Bluetooth: hci3: command tx timeout [ 448.525272][T10648] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 448.527790][T10648] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 448.530824][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.578396][ T40] audit: type=1400 audit(1768139570.464:824): avc: denied { write } for pid=10649 comm="syz.2.1365" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 448.604281][T10650] hub 2-0:1.0: USB hub found [ 448.608313][T10650] hub 2-0:1.0: 2 ports detected [ 448.650625][T10652] erspan1: entered promiscuous mode [ 448.681150][T10657] __nla_validate_parse: 3 callbacks suppressed [ 448.681161][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1367'. [ 448.686933][ T5999] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 448.775598][T10666] netlink: 'syz.0.1370': attribute type 5 has an invalid length. [ 448.780500][T10666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.789515][T10668] hpfs: Bad magic ... probably not HPFS [ 449.015087][T10679] binder: 10678:10679 ioctl c0306201 200000000640 returned -22 [ 449.019396][T10679] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1376'. [ 449.079514][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 449.084086][T10679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1376'. [ 449.139466][T10691] binder: 10690:10691 ioctl 8933 2000000008c0 returned -22 [ 449.157631][T10692] binder: 10690:10692 ioctl 89f8 200000000a40 returned -22 [ 449.160255][T10691] binder: 10690:10691 ioctl 89f8 200000000a40 returned -22 [ 449.163633][T10691] binder: 10690:10691 ioctl 89f0 200000000b00 returned -22 [ 449.293317][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 449.389481][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 449.474819][T10720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1386'. [ 449.555146][T10726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1388'. [ 449.562266][ T5999] Bluetooth: hci3: command tx timeout [ 449.640648][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 449.758428][T10742] overlay: ./file0 is not a directory [ 449.780229][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1394'. [ 450.058993][T10774] binder: BINDER_SET_CONTEXT_MGR already set [ 450.061523][T10774] binder: 10772:10774 ioctl 4018620d 200000000100 returned -16 [ 450.318441][T10809] openvswitch: netlink: Missing key (keys=40, expected=80) [ 450.552020][ T979] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 450.655243][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.698397][T10841] could not allocate digest TFM handle cryptd(blake2b-160) [ 450.703255][ T979] usb 11-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 450.707482][ T979] usb 11-1: config 0 interface 0 has no altsetting 0 [ 450.711101][ T979] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 450.714611][ T979] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 450.717162][ T979] usb 11-1: Product: syz [ 450.718550][ T979] usb 11-1: Manufacturer: syz [ 450.720053][ T979] usb 11-1: SerialNumber: syz [ 450.723977][ T979] usb 11-1: config 0 descriptor?? [ 450.753539][ T979] snd-usb-audio 11-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 450.767951][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.948174][T10807] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.015722][ T979] usb 11-1: USB disconnect, device number 2 [ 451.553691][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 451.553707][ T40] audit: type=1400 audit(1768139573.444:885): avc: denied { map } for pid=10859 comm="syz.2.1425" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.602487][ T40] audit: type=1400 audit(1768139573.494:886): avc: denied { mount } for pid=10859 comm="syz.2.1425" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 451.631973][ T5999] Bluetooth: hci3: command tx timeout [ 451.653697][ T40] audit: type=1400 audit(1768139573.544:887): avc: denied { read append } for pid=10864 comm="syz.6.1427" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 451.661768][ T40] audit: type=1400 audit(1768139573.544:888): avc: denied { open } for pid=10864 comm="syz.6.1427" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 451.671978][ T40] audit: type=1400 audit(1768139573.554:889): avc: denied { create } for pid=10868 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 451.680381][ T5999] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 451.681808][ T40] audit: type=1400 audit(1768139573.564:890): avc: denied { write } for pid=10868 comm="syz.2.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 451.717282][T10874] xfrm1: entered promiscuous mode [ 451.746520][ T6063] IPVS: starting estimator thread 0... [ 451.831890][T10877] IPVS: using max 43 ests per chain, 103200 per kthread [ 452.173250][T10889] overlayfs: failed to get inode (-116) [ 452.176091][T10889] overlayfs: failed to get inode (-116) [ 452.179156][ T40] audit: type=1400 audit(1768139574.064:891): avc: denied { create } for pid=10888 comm="syz.0.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 452.205363][ T40] audit: type=1400 audit(1768139574.074:892): avc: denied { read } for pid=10888 comm="syz.0.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 452.634954][T10895] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 452.639571][T10897] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 452.801987][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.805963][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.810479][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.821783][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.827628][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.851331][ T40] audit: type=1400 audit(1768139574.734:893): avc: denied { write } for pid=10914 comm="syz.2.1446" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 452.871699][ T40] audit: type=1400 audit(1768139574.734:894): avc: denied { append } for pid=10914 comm="syz.2.1446" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 452.876196][T10910] xfrm0 speed is unknown, defaulting to 1000 [ 452.885717][T10910] ªªªªªª speed is unknown, defaulting to 1000 [ 453.068394][T10926] tipc: Enabling of bearer rejected, failed to enable media [ 453.170689][T10910] chnl_net:caif_netlink_parms(): no params data found [ 453.268896][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.271556][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.278427][T10910] bridge_slave_0: entered allmulticast mode [ 453.281232][T10910] bridge_slave_0: entered promiscuous mode [ 453.285757][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.288039][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.290316][T10910] bridge_slave_1: entered allmulticast mode [ 453.301227][T10910] bridge_slave_1: entered promiscuous mode [ 453.335662][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.340121][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.385842][T10962] FAT-fs (loop6): unable to read boot sector [ 453.408086][T10910] team0: Port device team_slave_0 added [ 453.413283][T10910] team0: Port device team_slave_1 added [ 453.425005][T10964] ntfs3(nullb0): Primary boot signature is not NTFS. [ 453.428207][T10964] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 453.435251][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.437990][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.448416][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.456057][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.458367][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.467982][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.512577][T10910] hsr_slave_0: entered promiscuous mode [ 453.515415][T10910] hsr_slave_1: entered promiscuous mode [ 453.539621][T10966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.647429][T10910] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 453.652389][T10910] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 453.656602][T10910] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 453.665425][T10910] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 453.691889][T10973] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 453.696469][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.699626][T10910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.703028][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.706093][T10910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.754605][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.767988][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.774080][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.787787][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.803720][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.806181][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.812313][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.814845][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.952170][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.100758][T11004] __nla_validate_parse: 16 callbacks suppressed [ 454.100771][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1471'. [ 454.103315][T11008] 9p: Unknown Cache mode or invalid value nonw [ 454.103347][T10910] veth0_vlan: entered promiscuous mode [ 454.106457][T10910] veth1_vlan: entered promiscuous mode [ 454.126476][T10910] veth0_macvtap: entered promiscuous mode [ 454.130541][T10910] veth1_macvtap: entered promiscuous mode [ 454.140973][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.156031][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.164788][ T1166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.167632][ T1166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.170782][ T1166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.174916][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.224545][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.228033][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.245621][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.251664][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.264213][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1475'. [ 454.270064][T11016] netlink: 'syz.6.1475': attribute type 1 has an invalid length. [ 454.634808][T11038] netlink: 'syz.7.1481': attribute type 3 has an invalid length. [ 454.638120][T11038] netlink: 804 bytes leftover after parsing attributes in process `syz.7.1481'. [ 454.654596][T11050] netlink: 'syz.5.1484': attribute type 8 has an invalid length. [ 454.657255][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1484'. [ 454.745090][T11057] netlink: 2548 bytes leftover after parsing attributes in process `syz.7.1486'. [ 454.911995][ T5289] Bluetooth: hci0: command tx timeout [ 455.071785][ T6082] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 455.107728][T11096] MINIX-fs: unable to read superblock [ 455.202832][ T6082] usb 11-1: device descriptor read/64, error -71 [ 455.247237][T11107] vivid-000: ================= START STATUS ================= [ 455.249729][T11107] vivid-000: Test Pattern: 75% Colorbar [ 455.252479][T11107] vivid-000: Fill Percentage of Frame: 100 [ 455.254589][T11107] vivid-000: Horizontal Movement: No Movement [ 455.256545][T11107] vivid-000: Vertical Movement: No Movement [ 455.258476][T11107] vivid-000: OSD Text Mode: All [ 455.260038][T11107] vivid-000: Show Border: false [ 455.262666][T11107] vivid-000: Show Square: false [ 455.264243][T11107] vivid-000: Sensor Flipped Horizontally: false [ 455.266246][T11107] vivid-000: Sensor Flipped Vertically: true [ 455.268180][T11107] vivid-000: Insert SAV Code in Image: false [ 455.270104][T11107] vivid-000: Insert EAV Code in Image: false [ 455.281847][T11107] vivid-000: Insert Video Guard Band: false [ 455.283730][T11107] vivid-000: Reduced Framerate: false [ 455.285474][T11107] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 455.287900][T11107] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 455.290407][T11107] vivid-000: Enable Capture Cropping: true [ 455.293456][T11107] vivid-000: Enable Capture Composing: true [ 455.295418][T11107] vivid-000: Enable Capture Scaler: true [ 455.297087][T11107] vivid-000: Timestamp Source: End of Frame [ 455.298935][T11107] vivid-000: Colorspace: SMPTE 170M [ 455.300616][T11107] vivid-000: Transfer Function: Default [ 455.303224][T11107] vivid-000: Y'CbCr Encoding: Default [ 455.305021][T11107] vivid-000: HSV Encoding: Hue 0-179 [ 455.306867][T11107] vivid-000: Quantization: Default [ 455.308633][T11107] vivid-000: Apply Alpha To Red Only: false [ 455.310687][T11107] vivid-000: Standard Aspect Ratio: 4x3 [ 455.314889][T11107] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 455.317375][T11107] vivid-000: DV Timings: 640x480p59 inactive [ 455.319586][T11107] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 455.322255][T11107] vivid-000: Maximum EDID Blocks: 2 [ 455.323931][T11107] vivid-000: Limited RGB Range (16-235): false [ 455.324951][T11113] tipc: Failed to remove unknown binding: 66,1,1/266352246:2489646996/2489646998 [ 455.325910][T11107] vivid-000: Rx RGB Quantization Range: Automatic [ 455.328754][T11113] tipc: Failed to remove unknown binding: 66,1,1/266352246:2489646996/2489646998 [ 455.330826][T11107] [ 455.330832][T11107] vivid-000: Power Present: 0x00000001 [ 455.336381][T11107] tpg source WxH: 720x576 (R'G'B) [ 455.338176][T11107] tpg field: 8 [ 455.339291][T11107] tpg crop: (0,0)/64x36 [ 455.340646][T11107] tpg compose: (0,0)/16x9 [ 455.342571][T11107] tpg colorspace: 12 [ 455.343847][T11107] tpg transfer function: 1/0 [ 455.346859][T11107] tpg quantization: 2/0 [ 455.348220][T11107] tpg RGB range: 0/2 [ 455.349495][T11107] vivid-000: ================== END STATUS ================== [ 455.368471][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1502'. [ 455.372762][T11116] fuse: Unknown parameter 'g' [ 455.441712][ T6082] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 455.484379][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 455.571589][T11126] xfrm0 speed is unknown, defaulting to 1000 [ 455.571793][ T6082] usb 11-1: device descriptor read/64, error -71 [ 455.575458][T11126] ªªªªªª speed is unknown, defaulting to 1000 [ 455.597156][T11127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 455.600292][T11127] block device autoloading is deprecated and will be removed. [ 455.682077][ T6082] usb usb11-port1: attempt power cycle [ 455.708537][T11124] block device autoloading is deprecated and will be removed. [ 455.712803][T11124] md: invalid raid superblock magic on ram32 [ 455.715148][T11124] md: ram32 does not have a valid v0.0 superblock, not importing! [ 455.718506][T11124] md: md_import_device returned -22 [ 455.747374][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1507'. [ 455.992063][ T5289] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 455.995148][ T5289] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 456.021729][ T6082] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 456.042269][ T6082] usb 11-1: device descriptor read/8, error -71 [ 456.111866][ T5957] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 456.251762][ T6062] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 456.254128][T11150] xfrm0 speed is unknown, defaulting to 1000 [ 456.257242][T11150] ªªªªªª speed is unknown, defaulting to 1000 [ 456.281844][ T6082] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 456.284073][ T5957] usb 10-1: Using ep0 maxpacket: 8 [ 456.289905][ T5957] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 456.294518][ T5957] usb 10-1: config 179 has no interface number 0 [ 456.296704][ T5957] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 456.300657][ T5957] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 456.302247][ T6082] usb 11-1: device descriptor read/8, error -71 [ 456.304854][ T5957] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.311219][ T5957] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 456.315286][ T5957] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 456.319895][ T5957] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 456.323467][ T5957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.329901][T11136] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 456.381977][ T6062] usb 12-1: device descriptor read/64, error -71 [ 456.423218][ T6082] usb usb11-port1: unable to enumerate USB device [ 456.545136][ T5957] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input15 [ 456.622042][ T6062] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 456.751859][ T6062] usb 12-1: device descriptor read/64, error -71 [ 456.766897][ T6223] usb 10-1: USB disconnect, device number 2 [ 456.766897][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 456.773304][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 456.862054][ T6062] usb usb12-port1: attempt power cycle [ 456.992531][ T5289] Bluetooth: hci0: command tx timeout [ 457.179665][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 457.179676][ T40] audit: type=1400 audit(1768139579.064:940): avc: denied { getopt } for pid=11158 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.188035][ T40] audit: type=1400 audit(1768139579.064:941): avc: denied { execute } for pid=11158 comm="syz.2.1518" path="/dev/comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.211966][ T6062] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 457.219582][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 457.223668][T11163] netlink: 'syz.2.1519': attribute type 7 has an invalid length. [ 457.226078][T11163] netlink: 'syz.2.1519': attribute type 8 has an invalid length. [ 457.228499][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 457.233358][ T6062] usb 12-1: device descriptor read/8, error -71 [ 457.311327][T11167] xfrm0 speed is unknown, defaulting to 1000 [ 457.314335][T11167] ªªªªªª speed is unknown, defaulting to 1000 [ 457.320743][T11165] ptrace attach of "/syz-executor exec"[11169] was attempted by "/syz-executor exec"[11165] [ 457.454028][T11177] cgroup: No subsys list or none specified [ 457.473805][ T6062] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 457.502529][ T6062] usb 12-1: device descriptor read/8, error -71 [ 457.595243][T11190] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 457.614043][ T6062] usb usb12-port1: unable to enumerate USB device [ 457.616690][T11190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 457.894140][T11199] hsr_slave_0: left promiscuous mode [ 457.896660][T11199] hsr_slave_1: left promiscuous mode [ 457.917397][T11201] 9p: Could not find request transport: fdrfdno=0xffffffffffffffff [ 457.946643][ T40] audit: type=1400 audit(1768139579.834:942): avc: denied { getopt } for pid=11205 comm="syz.6.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.953008][ T40] audit: type=1400 audit(1768139579.834:943): avc: denied { getopt } for pid=11205 comm="syz.6.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.992527][T11209] syzkaller0: entered promiscuous mode [ 457.994773][T11209] syzkaller0: entered allmulticast mode [ 458.145529][T11216] netlink: 'syz.2.1534': attribute type 5 has an invalid length. [ 458.360117][T11230] kvm: emulating exchange as write [ 458.486417][T11236] input: syz1 as /devices/virtual/input/input16 [ 458.557699][T11238] dvmrp6: entered allmulticast mode [ 458.593192][ T40] audit: type=1400 audit(1768139580.484:944): avc: denied { listen } for pid=11242 comm="syz.6.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 458.620473][T11248] ufs: You didn't specify the type of your ufs filesystem [ 458.620473][T11248] [ 458.620473][T11248] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 458.620473][T11248] [ 458.620473][T11248] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 458.715111][T11251] binder: 11247:11251 ioctl c0306201 200000000640 returned -22 [ 458.718628][T11251] 8021q: VLANs not supported on ip6_vti0 [ 458.720831][T11251] binder: 11247:11251 ioctl c0189372 200000000280 returned -22 [ 458.726389][T11251] ufs: You didn't specify the type of your ufs filesystem [ 458.726389][T11251] [ 458.726389][T11251] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 458.726389][T11251] [ 458.726389][T11251] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 458.751809][ T6083] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 458.799992][T11260] gfs2: path_lookup on \\éƒ8< ‘Ô$®$‘&6n @ôMºò<ÖAÛ×¾Y@gÌÊ [ 458.799992][T11260] @£þ%ÉÅÄ–·b§R.£`fdÜ‹rBl{‚\¾A [ 458.799992][T11260] Í='ZŽ±Ãj$vïw–\\¢üã¸Çª returned error -2 [ 458.810527][T11260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11260 comm=syz.2.1548 [ 458.816458][T11260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11260 comm=syz.2.1548 [ 458.823552][T11260] ip6gre0: entered promiscuous mode [ 458.836267][T11260] team0: Device ip6gre0 is of different type [ 458.963392][T11275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 458.966677][T11275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.009775][ T40] audit: type=1326 audit(1768139580.894:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527f8f7c9 code=0x7ffc0000 [ 459.017090][ T40] audit: type=1326 audit(1768139580.894:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527f8f7c9 code=0x7ffc0000 [ 459.026695][ T40] audit: type=1326 audit(1768139580.894:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1551" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2527f8f7c9 code=0x7ffc0000 [ 459.037180][ T40] audit: type=1326 audit(1768139580.894:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527f8f7c9 code=0x7ffc0000 [ 459.047210][ T40] audit: type=1326 audit(1768139580.894:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2527f8f7c9 code=0x7ffc0000 [ 459.069049][T11275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 459.073527][ T5289] Bluetooth: hci0: command tx timeout [ 459.076158][T11275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.150540][T11275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 459.155539][T11275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.234595][T11275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 459.240218][T11275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.329538][ T6824] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 459.332687][ T6824] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.345149][ T6825] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 459.348715][ T6825] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.362162][ T6825] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 459.364759][ T6825] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.377963][ T6825] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 459.381118][ T6825] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.604447][T11287] __nla_validate_parse: 5 callbacks suppressed [ 459.604462][T11287] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1554'. [ 459.647717][T11290] : renamed from bond0 (while UP) [ 459.686701][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 459.689383][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 459.795914][T11296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.868091][T11296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.949992][T11296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.031939][ T5289] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 460.036615][ T5289] Bluetooth: hci1: Injecting HCI hardware error event [ 460.042595][ T5289] Bluetooth: hci1: hardware error 0x00 [ 460.050047][ T5957] IPVS: starting estimator thread 0... [ 460.062884][T11296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.141801][T11304] IPVS: using max 44 ests per chain, 105600 per kthread [ 460.161236][ T1166] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.169833][ T1166] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.179637][ T1166] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.188631][ T1166] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.319685][T11315] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1566'. [ 460.328662][T11313] kvm: kvm [11312]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 460.376340][T11321] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1567'. [ 460.415965][T11324] xfrm0 speed is unknown, defaulting to 1000 [ 460.418659][T11324] ªªªªªª speed is unknown, defaulting to 1000 [ 460.590046][T11329] mkiss: ax0: crc mode is auto. [ 460.928319][T11349] 9p: Could not find request transport: unixØ\Dú‹ze~¯5o€¼î)>Ÿ [ 461.028665][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 461.076709][T11363] netlink: 'syz.6.1581': attribute type 1 has an invalid length. [ 461.095801][T11363] bond0: entered promiscuous mode [ 461.098182][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.118241][T11364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.122259][T11364] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 461.125547][T11364] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 461.129955][T11364] bond0: (slave vxcan3): making interface the new active one [ 461.135338][T11364] vxcan3: entered promiscuous mode [ 461.141766][T11364] vxcan3: left promiscuous mode [ 461.158107][ T5999] Bluetooth: hci0: command tx timeout [ 461.307171][T11386] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1589'. [ 461.308480][T11384] input: syz0 as /devices/virtual/input/input17 [ 461.474962][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1593'. [ 461.831875][ T5958] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 461.879029][T11439] program syz.2.1605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.885604][T11439] block nbd2: NBD_DISCONNECT [ 461.891820][T11439] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 461.894331][T11439] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1605'. [ 462.005238][ T5958] usb 11-1: Using ep0 maxpacket: 32 [ 462.008555][ T5958] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 462.011887][ T5958] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 462.015497][ T5958] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.019733][ T5958] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 462.029854][ T5958] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 462.033006][ T5958] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.035533][ T5958] usb 11-1: Product: syz [ 462.036938][ T5958] usb 11-1: Manufacturer: syz [ 462.038435][ T5958] usb 11-1: SerialNumber: syz [ 462.053185][ C3] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 462.058962][ T5958] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input18 [ 462.095720][T11458] 9p: Bad value for 'msize' [ 462.122759][ T5289] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 462.134754][T11459] PID 11459 killed due to inadequate hugepage pool [ 462.155417][T11461] SELinux: Context system_u:object_r:zero_device_t:s0 is not valid (left unmapped). [ 462.202916][ T5289] block nbd2: Receive control failed (result -32) [ 462.238299][ T7032] block nbd2: shutting down sockets [ 462.297646][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1615'. [ 462.379360][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 462.379414][ T40] audit: type=1400 audit(1768139584.264:1005): avc: denied { write } for pid=11473 comm="syz.2.1616" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 462.390209][T11474] misc userio: No port type given on /dev/userio [ 462.434418][T11479] Bluetooth: MGMT ver 1.23 [ 462.454803][ T5958] imon:send_packet: packet tx failed (-71) [ 462.473922][ T5958] imon 11-1:155.0: panel buttons/knobs setup failed [ 462.476257][ T5958] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 462.479398][ T5958] (id 0x00) [ 462.522136][ T5958] rc_core: IR keymap rc-imon-pad not found [ 462.524649][ T5958] Registered IR keymap rc-empty [ 462.526700][ T5958] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 462.530314][ T5958] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 462.534793][ T5958] imon:send_packet: packet tx failed (-71) [ 462.551711][ T5958] imon 11-1:155.0: remote input dev register failed [ 462.553949][ T5958] imon 11-1:155.0: imon_init_intf0: rc device setup failed [ 462.564721][ T40] audit: type=1400 audit(1768139584.454:1006): avc: denied { getopt } for pid=11490 comm="syz.2.1623" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 462.574409][ T5958] imon 11-1:155.0: unable to initialize intf0, err 0 [ 462.576563][ T5958] imon:imon_probe: failed to initialize context! [ 462.578572][ T5958] imon 11-1:155.0: unable to register, err -19 [ 462.582026][ T5958] usb 11-1: USB disconnect, device number 7 [ 462.623715][T11494] vlan0: entered promiscuous mode [ 462.625496][T11494] bridge0: entered promiscuous mode [ 462.643187][T11497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.646099][T11497] IPv6: NLM_F_CREATE should be set when creating new route [ 462.672604][T11500] netlink: 'syz.5.1626': attribute type 1 has an invalid length. [ 462.675365][T11500] netlink: 'syz.5.1626': attribute type 2 has an invalid length. [ 462.757794][T11511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11511 comm=syz.2.1631 [ 462.845780][ T40] audit: type=1400 audit(1768139584.734:1007): avc: denied { name_connect } for pid=11516 comm="syz.5.1633" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 462.986883][ T40] audit: type=1401 audit(1768139584.874:1008): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 463.025741][ T40] audit: type=1326 audit(1768139584.914:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.7.1638" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2527f8f7c9 code=0x0 [ 463.080822][ T40] audit: type=1400 audit(1768139584.964:1010): avc: denied { append } for pid=11530 comm="syz.7.1638" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 463.094801][ T40] audit: type=1400 audit(1768139584.984:1011): avc: denied { setopt } for pid=11535 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 463.161512][ T40] audit: type=1400 audit(1768139585.044:1012): avc: denied { map } for pid=11539 comm="syz.5.1641" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 463.170063][ T40] audit: type=1400 audit(1768139585.044:1013): avc: denied { map } for pid=11539 comm="syz.5.1641" path="socket:[40874]" dev="sockfs" ino=40874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.177437][ T40] audit: type=1400 audit(1768139585.044:1014): avc: denied { read } for pid=11539 comm="syz.5.1641" path="socket:[40874]" dev="sockfs" ino=40874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.371325][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.374857][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.467835][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.478959][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.615184][ T6825] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.618533][ T6825] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.622093][ T6825] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.625224][ T6825] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.628603][ T6825] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.631435][ T6825] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.635379][ T6825] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.638725][ T6825] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.725292][T11563] netlink: 'syz.6.1649': attribute type 12 has an invalid length. [ 464.179007][T11592] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 464.244209][T11594] can0: slcan on ttyprintk. [ 464.261767][ T53] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 464.272978][ T5289] Bluetooth: hci2: command 0x0405 tx timeout [ 464.276485][ T6084] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 464.279183][ T6084] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 464.359589][ T9504] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 464.363599][ T9504] CPU: 3 UID: 0 PID: 9504 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 464.363616][ T9504] Tainted: [L]=SOFTLOCKUP [ 464.363620][ T9504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.363627][ T9504] Call Trace: [ 464.363631][ T9504] [ 464.363635][ T9504] dump_stack_lvl+0x16c/0x1f0 [ 464.363662][ T9504] dump_header+0x101/0x960 [ 464.363682][ T9504] oom_kill_process+0x176/0x910 [ 464.363701][ T9504] out_of_memory+0x350/0x1700 [ 464.363718][ T9504] ? __lock_acquire+0x436/0x2890 [ 464.363738][ T9504] ? __pfx_out_of_memory+0x10/0x10 [ 464.363759][ T9504] mem_cgroup_out_of_memory+0x118/0x130 [ 464.363771][ T9504] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 464.363785][ T9504] ? do_raw_spin_unlock+0x172/0x230 [ 464.363802][ T9504] try_charge_memcg+0x695/0xd30 [ 464.363821][ T9504] ? __pfx_try_charge_memcg+0x10/0x10 [ 464.363839][ T9504] ? find_held_lock+0x2b/0x80 [ 464.363857][ T9504] charge_memcg+0x8a/0x230 [ 464.363872][ T9504] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 464.363891][ T9504] __read_swap_cache_async+0x397/0x500 [ 464.363905][ T9504] ? __pfx___read_swap_cache_async+0x10/0x10 [ 464.363916][ T9504] ? __lock_acquire+0x436/0x2890 [ 464.363933][ T9504] swap_cluster_readahead+0x528/0x770 [ 464.363948][ T9504] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 464.363960][ T9504] ? __lock_acquire+0x3b0/0x2890 [ 464.363978][ T9504] ? __lock_acquire+0x436/0x2890 [ 464.363990][ T9504] ? get_vma_policy+0x242/0x3c0 [ 464.364007][ T9504] swapin_readahead+0x160/0x1220 [ 464.364023][ T9504] ? __pfx_swapin_readahead+0x10/0x10 [ 464.364035][ T9504] ? find_held_lock+0x2b/0x80 [ 464.364051][ T9504] ? swap_cache_get_folio+0x267/0x8e0 [ 464.364061][ T9504] ? swap_cache_get_folio+0x267/0x8e0 [ 464.364070][ T9504] ? swap_cache_get_folio+0x267/0x8e0 [ 464.364082][ T9504] ? swap_cache_get_folio+0x267/0x8e0 [ 464.364092][ T9504] ? swap_cache_get_folio+0x293/0x8e0 [ 464.364103][ T9504] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 464.364113][ T9504] ? __pfx_get_swap_device+0x10/0x10 [ 464.364126][ T9504] ? rcu_read_unlock+0x2d/0xb0 [ 464.364139][ T9504] ? do_swap_page+0x962/0x64a0 [ 464.364155][ T9504] do_swap_page+0x962/0x64a0 [ 464.364173][ T9504] ? __lock_acquire+0x436/0x2890 [ 464.364189][ T9504] ? __pfx_do_swap_page+0x10/0x10 [ 464.364207][ T9504] ? __pfx_default_wake_function+0x10/0x10 [ 464.364226][ T9504] ? rcu_is_watching+0x12/0xc0 [ 464.364236][ T9504] ? __free_object+0x286/0x410 [ 464.364251][ T9504] ? rcu_is_watching+0x12/0xc0 [ 464.364260][ T9504] ? ___pte_offset_map+0x175/0x380 [ 464.364276][ T9504] __handle_mm_fault+0x19cb/0x2bb0 [ 464.364295][ T9504] ? reacquire_held_locks+0xcd/0x1f0 [ 464.364308][ T9504] ? __pfx___handle_mm_fault+0x10/0x10 [ 464.364327][ T9504] ? lock_vma_under_rcu+0x176/0x580 [ 464.364348][ T9504] ? get_timespec64+0x147/0x240 [ 464.364364][ T9504] handle_mm_fault+0x3fe/0xad0 [ 464.364384][ T9504] do_user_addr_fault+0x60c/0x1370 [ 464.364400][ T9504] ? rcu_is_watching+0x12/0xc0 [ 464.364411][ T9504] exc_page_fault+0x64/0xc0 [ 464.364426][ T9504] asm_exc_page_fault+0x26/0x30 [ 464.364437][ T9504] RIP: 0033:0x7f67341c2088 [ 464.364445][ T9504] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 464.364456][ T9504] RSP: 002b:00007ffd93610d40 EFLAGS: 00010293 [ 464.364466][ T9504] RAX: 0000000000000000 RBX: 0000000000000171 RCX: 00007f67341c2085 [ 464.364472][ T9504] RDX: 00007ffd93610d80 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.364478][ T9504] RBP: 00007ffd93610dec R08: 0000000000000000 R09: 0000000000000000 [ 464.364485][ T9504] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 464.364491][ T9504] R13: 00000000000927c0 R14: 000000000007144d R15: 00007ffd93610e40 [ 464.364505][ T9504] [ 464.364509][ T9504] memory: usage 306940kB, limit 307200kB, failcnt 399 [ 464.489211][ T9504] memory+swap: usage 307244kB, limit 9007199254740988kB, failcnt 0 [ 464.491920][ T9504] kmem: usage 306712kB, limit 9007199254740988kB, failcnt 0 [ 464.494265][ T9504] Memory cgroup stats for /syz5: [ 464.494554][ T9504] cache 0 [ 464.497132][ T9504] rss 0 [ 464.498081][ T9504] rss_huge 0 [ 464.499187][ T9504] shmem 0 [ 464.500150][ T9504] mapped_file 0 [ 464.501299][ T9504] dirty 0 [ 464.502391][ T9504] writeback 0 [ 464.503482][ T9504] workingset_refault_anon 45 [ 464.504976][ T9504] workingset_refault_file 0 [ 464.506541][ T9504] swap 327680 [ 464.507626][ T9504] swapcached 12288 [ 464.508873][ T9504] pgpgin 29501 [ 464.510217][ T9504] pgpgout 30009 [ 464.511332][ T9504] pgfault 22338 [ 464.512930][ T53] usb 12-1: Using ep0 maxpacket: 16 [ 464.514665][ T9504] pgmajfault 33 [ 464.515962][ T9504] inactive_anon 0 [ 464.517363][ T9504] active_anon 12288 [ 464.518749][ T9504] inactive_file 0 [ 464.520220][ T9504] active_file 0 [ 464.521539][ T9504] unevictable 0 [ 464.522828][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.526274][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.528308][ T9504] hierarchical_memory_limit 314572800 [ 464.529392][ T53] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.529416][ T53] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 464.529428][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.531355][ T9504] hierarchical_memsw_limit 9223372036854771712 [ 464.536461][ T53] usb 12-1: config 0 descriptor?? [ 464.542995][ T9504] total_cache 0 [ 464.543003][ T9504] total_rss 0 [ 464.543007][ T9504] total_rss_huge 0 [ 464.543012][ T9504] total_shmem 0 [ 464.543016][ T9504] total_mapped_file 0 [ 464.543020][ T9504] total_dirty 0 [ 464.543025][ T9504] total_writeback 0 [ 464.543029][ T9504] total_workingset_refault_anon 45 [ 464.543034][ T9504] total_workingset_refault_file 0 [ 464.543038][ T9504] total_swap 327680 [ 464.543043][ T9504] total_swapcached 12288 [ 464.543047][ T9504] total_pgpgin 29501 [ 464.543052][ T9504] total_pgpgout 30009 [ 464.543056][ T9504] total_pgfault 22338 [ 464.543060][ T9504] total_pgmajfault 33 [ 464.543064][ T9504] total_inactive_anon 0 [ 464.543069][ T9504] total_active_anon 12288 [ 464.543073][ T9504] total_inactive_file 0 [ 464.543078][ T9504] total_active_file 0 [ 464.543082][ T9504] total_unevictable 0 [ 464.543086][ T9504] anon_cost 0 [ 464.543090][ T9504] file_cost 0 [ 464.543095][ T9504] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1659,pid=11587,uid=0 [ 464.593000][ T9504] Memory cgroup out of memory: Killed process 11587 (syz.5.1659) total-vm:98456kB, anon-rss:1148kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 464.651421][T11599] tc_dump_action: action bad kind [ 464.703080][T11599] __nla_validate_parse: 9 callbacks suppressed [ 464.703094][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 464.824883][T11593] can0 (unregistered): slcan off ttyprintk. [ 464.950266][T11621] No such timeout policy "syz1" [ 464.963518][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1658'. [ 464.971188][ T53] usbhid 12-1:0.0: can't add hid device: -71 [ 464.973754][ T53] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 464.977603][ T53] usb 12-1: USB disconnect, device number 6 [ 465.171780][ T55] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 465.323330][ T55] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 465.326769][ T55] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.331314][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.335619][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.339154][ T55] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.344068][ T55] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.346912][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.351144][ T55] usb 11-1: config 0 descriptor?? [ 465.360924][T11620] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 465.393925][T11634] overlay: Unknown parameter 'ime [ 465.393925][T11634] string [ 465.393925][T11634] statistic [ 465.393925][T11634] state [ 465.393925][T11634] realm [ 465.393925][T11634] rateest [ 465.393925][T11634] quota [ 465.393925][T11634] pkttype [ 465.393925][T11634] physdev [ 465.393925][T11634] cgroup [ 465.393925][T11634] cgroup [ 465.393925][T11634] cgroup [ 465.393925][T11634] owner [ 465.393925][T11634] nfacct [ 465.393925][T11634] nfacct [ 465.393925][T11634] mac [ 465.393925][T11634] limit [ 465.393925][T11634] ipvs [ 465.393925][T11634] helper [ 465.393925][T11634] devgroup [ 465.393925][T11634] cpu [ 465.393925][T11634] conntrack [ 465.393925][T11634] conntrack [ 465.393925][T11634] conntrack [ 465.393925][T11634] connlabel [ 465.393925][T11634] connbytes [ 465.393925][T11634] comment [ 465.393925][T11634] bpf [ 465.393925][T11634] bpf [ 465.393925][T11634] connmark [ 465.393925][T11634] mark [ 465.393925][T11634] rpfilter [ 465.393925][T11634] ah [ 465.393925][T11634] tcpmss [ 465.393925][T11634] socket [ 465.393925][T11634] socket [ 465.393925][T11634] socket [ 465.393925][T11634] socket [ 465.393925][T11634] sctp [ 465.393925][T11634] recent [ 465.393925][T11634] recent [ 465.393925][T11634] policy [ 465.393925][T11634] osf [ 465.393925][T11634] multiport [ 465.393925][T11634] length [ 465.393925][T11634] l2tp [ 465.393925][T11634] iprange [ 465.393925][T11634] ipcomp [ 465.393925][T11634] ttl [ 465.393925][T11634] hashlimit [ 465.393925][T11634] hashlimit [ 465.393925][T11634] hashlimit [ 465.393925][T11634] esp [ 465.393925][T11634] ecn [ 465.393925][T11634] tos [ 465.393925][T11634] dscp [ 465.393925][T11634] dccp [ 465.393925][T11634] connlimit [ 465.393925][T11634] cluster [ 465.393925][T11634] addrtype [ 465.393925][T11634] addrtype [ 465.393925][T11634] set [ 465.393925][T11634] set [ 465.393925][T11634] set [ 465.393925][T11634] set [ 465.393925][T11634] set [ 465.393925][T11634] icmp [ 465.693723][T11650] tipc: Started in network mode [ 465.695514][T11650] tipc: Node identity ac14140f, cluster identity 4711 [ 465.698278][T11650] tipc: New replicast peer: 255.255.255.255 [ 465.700682][T11650] tipc: Enabled bearer , priority 10 [ 465.703690][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1675'. [ 465.706537][T11650] tipc: Disabling bearer [ 465.755287][T11654] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1677'. [ 465.758233][T11654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1677'. [ 465.772488][ T55] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 465.785253][ T55] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 466.351720][ T5289] Bluetooth: hci3: command 0x0c1a tx timeout [ 466.353885][ T6084] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 466.356458][ T6084] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 466.370521][T10473] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 466.374717][T10473] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.378130][T10473] CPU: 3 UID: 0 PID: 10473 Comm: kbnepd bnep0 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.382651][T10473] Tainted: [L]=SOFTLOCKUP [ 466.384052][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.387482][T10473] RIP: 0010:klist_put+0x4d/0x1b0 [ 466.389110][T10473] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 466.395343][T10473] RSP: 0018:ffffc900066d7930 EFLAGS: 00010202 [ 466.397307][T10473] RAX: dffffc0000000000 RBX: ffff888012a8cc60 RCX: ffffffff826a79bd [ 466.399884][T10473] RDX: 000000000000000b RSI: ffffffff8b6deb05 RDI: 0000000000000058 [ 466.402560][T10473] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 466.405077][T10473] R10: 0000000000000000 R11: ffff8880285e0b30 R12: 0000000000000000 [ 466.407656][T10473] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 466.410258][T10473] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 466.413602][T10473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.416088][T10473] CR2: 00007f6735064d58 CR3: 000000002bfc9000 CR4: 0000000000352ef0 [ 466.419124][T10473] Call Trace: [ 466.420486][T10473] [ 466.421790][T10473] device_del+0x1d8/0x9f0 [ 466.423619][T10473] ? __pfx_device_del+0x10/0x10 [ 466.425533][T10473] ? netdev_unregister_kobject+0x2da/0x540 [ 466.427838][T10473] unregister_netdevice_many_notify+0x151e/0x2590 [ 466.430525][T10473] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 466.432866][T10473] ? __pfx___mutex_lock+0x10/0x10 [ 466.434646][T10473] unregister_netdevice_queue+0x305/0x3c0 [ 466.437017][T10473] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 466.439444][T10473] ? rtnl_net_dev_lock+0x28/0x360 [ 466.441347][T10473] ? rtnl_net_dev_lock+0x146/0x360 [ 466.443516][T10473] ? rtnl_lock+0x9/0x20 [ 466.445079][T10473] ? rtnl_net_dev_lock+0x146/0x360 [ 466.447144][T10473] unregister_netdev+0x1f/0x60 [ 466.448940][T10473] bnep_session+0x22db/0x2e10 [ 466.450674][T10473] ? __pfx_bnep_session+0x10/0x10 [ 466.452497][T10473] ? do_raw_spin_lock+0x12c/0x2b0 [ 466.454635][T10473] ? __pfx_woken_wake_function+0x10/0x10 [ 466.456823][T10473] ? rcu_is_watching+0x12/0xc0 [ 466.458786][T10473] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.461258][T10473] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.463454][T10473] ? __kthread_parkme+0x19e/0x250 [ 466.465583][T10473] ? __pfx_bnep_session+0x10/0x10 [ 466.467424][T10473] kthread+0x3c5/0x780 [ 466.469124][T10473] ? __pfx_kthread+0x10/0x10 [ 466.471090][T10473] ? rcu_is_watching+0x12/0xc0 [ 466.472804][T10473] ? __pfx_kthread+0x10/0x10 [ 466.474322][T10473] ret_from_fork+0x983/0xb10 [ 466.475857][T10473] ? __pfx_ret_from_fork+0x10/0x10 [ 466.477521][T10473] ? __switch_to+0x7af/0x10d0 [ 466.479068][T10473] ? __pfx_kthread+0x10/0x10 [ 466.480587][T10473] ret_from_fork_asm+0x1a/0x30 [ 466.482186][T10473] [ 466.483194][T10473] Modules linked in: [ 466.484912][T10473] ---[ end trace 0000000000000000 ]--- [ 466.486752][T10473] RIP: 0010:klist_put+0x4d/0x1b0 [ 466.488529][T10473] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 466.494971][T10473] RSP: 0018:ffffc900066d7930 EFLAGS: 00010202 [ 466.497527][T10473] RAX: dffffc0000000000 RBX: ffff888012a8cc60 RCX: ffffffff826a79bd [ 466.500740][T10473] RDX: 000000000000000b RSI: ffffffff8b6deb05 RDI: 0000000000000058 [ 466.503795][T10473] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 466.506344][T10473] R10: 0000000000000000 R11: ffff8880285e0b30 R12: 0000000000000000 [ 466.509037][T10473] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 466.512446][T10473] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 466.516175][T10473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.518803][T10473] CR2: 00007f6735064d58 CR3: 000000002bfc9000 CR4: 0000000000352ef0 [ 466.522481][T10473] Kernel panic - not syncing: Fatal exception [ 466.525953][T10473] Kernel Offset: disabled [ 466.527576][T10473] Rebooting in 86400 seconds..