last executing test programs: 3m15.799564118s ago: executing program 32 (id=203): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0xb5, 0xc}, {0x6, 0x7, [0x5, 0x3, 0x7fff, 0x4]}}}}, 0x19) socket(0x10, 0x3, 0x0) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0x1c00, 0x1000}, {0x4, 0xfffa}], 0x2, 0x0) unshare(0x20060400) 3m8.069755875s ago: executing program 33 (id=108): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x923980, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f00000002c0)="5c00000030000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000200)="8cf3645fdcf950c2246a27d27d95e5325c1f13a1f5178c65acaf23c04d27fccdc8b6d47cd84f074b62a5e244d57ac5a9a832890f939033b2b30add0bf3fa2eaae78fd20ed34023677826c4e4306084b51e0c66fcbd23db22f065f7158646524c5efe76a901397fc03e2607050b7d6ea8217687bf2beeb064bc0058b1fc74e2f58d0c676d5f0c39dc471e3e6c34f7a960b6d188624c01819b3ce1996cc779150f13b0fd223bfe5100cdf2751874ab0f5f07049d5bf5a545cd7f473fa49865169394c35a526b43ebcfa993", 0xca) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffa) 2m17.108540621s ago: executing program 34 (id=907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000140)='nat\x00', 0x880, &(0x7f0000000280)={@align=0x2, {0x9, 0x5, 0x8, 0xc}}, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x10}, {[0x5f, 0x0, 0x1eac, 0x5]}, 0x4, 0x80, &(0x7f0000000500)=""/128}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000000514020025bd7000fcc3df250800010002000000080003000200f9ff07000100020000000800030004000000"], 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x40488d1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r2, &(0x7f0000000040)=""/169, 0xa9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r2, 0x5, 0x2, 0x2}, 0x50) sendto$inet(r1, &(0x7f00000001c0)="a978b09a74945214a5f15d93eec36241454c39ed63408acfe3ea6066bd12b70021f54cad0ff94feb9212f63ddbd7244a4ba66c5bee38f664b46e2f3f", 0x3c, 0x8000, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r3}, 0xc) 2m2.778960975s ago: executing program 35 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400a6f3a658108262e4013cdcdc28dd475b3eaa73b35719922114aa6da8c49d18673200e13d3934c591803509355a7319d4a6c72bcc563f1c26527da6024268fdb42eb8ebe94ce686b616c8608b33b37a84ab79cb8f5ca952c25ccfa6d18608c6b64626ec9d3b22b79fa5b80a122184cb8f14dc4b3f9e6a948ecaf9420cf5a070afc8fdf76c6a9817c90f430a3e0f9b541633a2b594f0", @ANYRES32=0x0, @ANYBLOB="00a30000000000001c0012800b0001006d616373656300000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0xffffffff}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x0, 0xff}]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x104}}, 0x88000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x9, 0x0, [{0xa1b, 0x0, 0x2}, {0x0, 0x0, 0x3607}, {0x0, 0x0, 0x5}, {0x815, 0x0, 0x6}, {0xa01, 0x0, 0x5}, {0x9a6, 0x0, 0xfffffffffffffbec}, {0x28a, 0x0, 0x4}, {0x399}, {0xa74, 0x0, 0x1}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x13e) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000300)={0x1f, &(0x7f0000000000)=[{0x38, '\x00', @buffer={"8616099f420b662a5f4797b06d10c1a6161af0b1616efdd3b3bd4ffb2e25e903", 0x20}, 0xe04}]}) 1m58.03818623s ago: executing program 36 (id=1155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101c02, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, r1, 0xfc778000) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m49.567900337s ago: executing program 37 (id=1252): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (rerun: 32) fcntl$addseals(r2, 0x409, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 64) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x128) (rerun: 64) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m48.43062702s ago: executing program 7 (id=1266): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, 0x0, 0x88101) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x164) 1m48.421164185s ago: executing program 7 (id=1267): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) epoll_create1(0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) unshare(0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x80000004, 0x40100) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x10200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) pipe2$9p(&(0x7f0000000180)={0x0, 0x0}, 0x89080) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0x3842fb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043b0aaaaaaaaaaa1003000000"], 0xd) 1m48.328756903s ago: executing program 7 (id=1268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd2f0}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4020000000100001, 0x2000) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 1m48.1210696s ago: executing program 7 (id=1269): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x880, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x7, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0xff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x2, 0x0, 0x0, 0xdc, 0x1, 0x56, 0x0, 0xb, 0x20, 0x93, 0x1000000}]}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x219000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$getownex(r4, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000000000003, 0x80000000000020a, 0x0, 0x0, 0xd, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000ce57d03daa0f4bd00", [0x7f, 0x6]}}) sched_setaffinity(0xffffffffffffffff, 0x13, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="af26260fc7b50080baa00066edf20d473bba6100ed660f38810c0fc79b0c0066b85e9c62120f23c80f21f866350c0020000f23f80f5399008065670f380364770d", 0x41}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r6 = getpid() r7 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x19, 0x4, @tid=r7}, &(0x7f0000044000)) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000000040)={r3, r0, 0x1ff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x3, r8, 0x0, 0x2, 0x0) accept$alg(r3, 0x0, 0x0) 1m48.024712524s ago: executing program 7 (id=1270): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x800, 0x0, 0xfadf, 0x101}, 'syz1\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x540, 0x0) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) userfaultfd(0x80001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ffff2abd7000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20001800) 1m47.490218049s ago: executing program 7 (id=1276): close(0xffffffffffffffff) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x7fffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x408, 0xa0, 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ftruncate(0xffffffffffffffff, 0x4a8e) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="2e0f785c7f06660fc7b503000000f32362020f693232300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc7205fd04ee7", 0x3e}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m47.455309416s ago: executing program 38 (id=1276): close(0xffffffffffffffff) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x7fffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x408, 0xa0, 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ftruncate(0xffffffffffffffff, 0x4a8e) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="2e0f785c7f06660fc7b503000000f32362020f693232300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc7205fd04ee7", 0x3e}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m6.153052782s ago: executing program 9 (id=1899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2501000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x20054000}, 0x8800) 1m6.064296913s ago: executing program 9 (id=1901): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0442, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010}, 0x48080) 1m5.989992824s ago: executing program 9 (id=1902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x4000008) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x40) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x21, 0x7, 0x3, 0xfb37, 0x22902, r6, 0xffff8000, '\x00', r7, r8, 0x0, 0x0, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x24a020}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4080) syz_80211_inject_frame(&(0x7f00000007c0), &(0x7f0000000800)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@device_b, @device_b}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000840)={0x0, 'team_slave_1\x00', {}, 0xb}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r11, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8006000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x40000000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r11, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, 0x0, 0x220, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0xc00) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r6) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, r12, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8012}, 0x20000001) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r6) getsockname$packet(r6, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e00)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000f40)={'erspan0\x00', &(0x7f0000000e40)={'gre0\x00', r7, 0x8, 0x80, 0x2, 0xb, {{0x31, 0x4, 0x3, 0x7, 0xc4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x0, 0xc, "d03e20f87327454c3882"}, {0x2, 0x6, "817f0eb3"}, {0x5, 0xe, "072659a96cf4a1d13ad48950"}, {0x2, 0x6, "fdca71d9"}]}, @rr={0x7, 0x1b, 0xbb, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x20}, @local]}, @generic={0x86, 0x4, "3a80"}, @cipso={0x86, 0x27, 0x0, [{0x4232b6e01a48d77c, 0x9, "9e5ec083f55b3b"}, {0x6, 0x6, "c8b62b82"}, {0x0, 0x12, "aa81b800dbe84cb56f323a8ac2b8d2d3"}]}, @generic={0x0, 0xb, "f4043f83c778098333"}, @generic={0x83, 0xd, "50b0dee9b0fffbbcb896b6"}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x9, [{@local, 0x4}, {@remote, 0xffffffff}]}, @lsrr={0x83, 0xf, 0x24, [@broadcast, @rand_addr=0x64010100, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000f80)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r6, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000001400)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001100)={0x2ac, r13, 0xda00f75a91e7f612, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1m5.90092214s ago: executing program 8 (id=1904): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/42, 0x2a, 0x2040, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000002c40)="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", 0xfffffffffffffe70}, {&(0x7f00000005c0)="58cefe146555b3fe3c8a002bebcd02bf52c357c0075245686d2b7167cec30b94d710be1368c3245e962beadfe87fffb904a9d9f6e51774af78911cec099af8cad3ffcce2d994015b24f05737a0d4d7e01f76e0428daa18c69ffb36cc8dfe3e390fac9985cb451263fc7f9f72976ffdb160291f48eab1bfcd1c9a315dc510", 0x7e}, {&(0x7f0000000640)="cb1a64b595", 0x5}, {&(0x7f0000000680)="714610ecfb079cc438a4a2cc3d4c00b93c1c", 0x12}, {&(0x7f00000006c0)="9a104420e2fcd65bc1f180788193f8da83acbb2c6fceadaf4238292f6eca1b2201e6a2e577f138da31b372f31a9d18b2f79b7d4282741cf51545887ffb86088c8e5467565351e4a611a1fd4bce39446f5997bcb43fb99545d721d5ef04ca5e77b88df6cdad4af48864f366fbd51208f64576c63ef4d368956bfa11c3402fb5", 0x7f}, {&(0x7f0000000740)="274c259472c8529d95f607ed3bb5ff6347839821f0f6f9d0f57cbe5648424eee1d37016cd7b1f819a8f6dfb5ec586ea92cdd583cb1a0c6760c2da7f36478f06a09be103ba182d45ed16144e0a59811332e1a2308fa7ec746aade9b39c0ab037aa9cafc0005fcc37e4f276793af377f466c13e258959fc6766b2af0c49e6b8c62e9ba7c91f2876d8a3569f8e6e05fc26a29ae62551f8757a85b7fc716c791a9ea7bf96296c74a8be55aa2828e92bc4786b51805c2745b714f0df194d4b3711107e0ebb2bcb57b8aeb5c5a6f44df", 0xcd}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1c9ed500000000000000000008000000", @ANYRESHEX=r0, @ANYBLOB="e00000010a010102000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffffe0000001000000001400000000000000000000000100000001000100000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac14142400000000900000000000000000000000070000000703598645000000030604b542060205120f6ab91e3ca1cbf9e1001031d218b89c0004ff3500033101064043f9850108a4a8ab4569ab05122f6337310916ab8220fb9d90b945c7fb8307670000000001831b84ac1414aa64010102ffffffff00000000640101020a0101010044147270ffffff7d000002800000000300000007"], 0x108}}], 0x2, 0x20000804) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002940)={0x0, 0x82, "d960fd6f0200cda17afef4d0df7c598971dbc53c42304b87773da39fc73bf588e632b6c2ddfa31c380eeb4c20772b021555bd19fd3bd2c4563460200000000000000f02a4a8aeaa7dfac7d9764ce6414b5af67556419f4ed773332d7f09f80626d3022eadbf712d59fb2f68fc396fda5d13044d54d3558326c7177ca3f0000000000"}, &(0x7f0000002a40)=0x8a) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'ipvlan0\x00', &(0x7f0000000380)=@ethtool_channels={0x3c, 0x5, 0x5, 0x7fff, 0xfffffff9, 0x1, 0xd1, 0x1, 0x8}}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys\x00', 0x80141, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa025) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r7, 0x40184152, &(0x7f0000002a00)={0x0, 0x0, 0x8}) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setown(r1, 0x8, r8) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x1, 0x10000, 0x1, 0x9, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 1m5.433036786s ago: executing program 9 (id=1909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2501000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x20054000}, 0x8800) 1m5.430213322s ago: executing program 9 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="418301be"], 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x1020000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) 1m5.25635616s ago: executing program 6 (id=1912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dummy\x00', 0x8000, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) 1m5.255782476s ago: executing program 8 (id=1913): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00002b000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000062c000000000000c12c4d04000280040003"], 0x64}}, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000d00)="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", 0xd, r3) 1m5.233024087s ago: executing program 9 (id=1914): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r2, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r3, 0x541b, 0x0) (async) ioctl(r3, 0x5451, 0x0) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd608004500001c0000000000119078000b0000000000004e214e2100089078cf49cb674f69d413b6b28940f97f2db908cf89b9230b1b2af230164c50"], 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={0x0, 0xfb}, 0x8) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m5.151065855s ago: executing program 8 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000006c0000032bbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a20a0000046c020008000f00020900001400350076657468315f766c616e0000000000000800250000000000dead294c65ed404930e84fb60000000060300b47a894d729c8cc5200da91376930997a4dee2a95e8b42d5033c0c559d7e08bc12cb8704bc756dfece6178444652a0efb3fd9be91bae8e0b572399127c8933b8af6409468a56d75ff1bb5d52c9a1e9fab899444661f15f75c63d0cc189c09cd1e5b91e9ba2959dc677f6160d9de4ae1f0b93a9bccfa531707ff94e1d686c11a174c203c879cb6547c60de0e401004554fae3ad511f2867058"], 0x44}, 0x1, 0x0, 0x0, 0x60800}, 0x4000001) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x6, 0x2, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ftruncate(0xffffffffffffffff, 0x4a8e) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="320000001400090528bd7080faffffff0218ef00", @ANYRES32=r6, @ANYBLOB="08000100ac14141d0800040064000100080002007f0000"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m5.060721952s ago: executing program 6 (id=1917): syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') (async) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {@noprefix}, {@xattr}], [{@audit}]}) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0xb, 0x2, 0x0, {0x1, 0x8, 0x1000, 0x90000005, 0x1ffffffffffff, 0x8000000000000001, 0x0, 0x8, 0x40, 0xa593e9c1ca988eda, 0xffffff39, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) (async) write(r3, &(0x7f0000000140)='1', 0x1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000db80)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a0300000000000000dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa98220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88f3dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9495b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd5bcb7c58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x1, 0x8, 0x1, 0x0, [0x0]}}, 0x29) 1m4.540942091s ago: executing program 8 (id=1924): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x4, 0x40080, 0xff, 0x2eaa}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x480}]}) (async) write(r0, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0xa, 0x6040) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000140)=""/67) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1581004900000d010000801a000000463b9a11fd92f9"], 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0x100, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf86}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}}, 0x2014) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000093176fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000380cbc74e19aa6960000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x3, 0x3, 0x0, 0xb}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b7f495, 0x0) ioctl$KVM_CAP_XEN_HVM(r6, 0x4068aea3, &(0x7f00000001c0)={0x26, 0x0, 0x54}) 1m4.179998226s ago: executing program 6 (id=1925): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_vlan\x00', @remote}) 1m4.179350413s ago: executing program 8 (id=1926): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x26020480) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000540)={0x7, 0x0, [{0x80000019, 0x5, 0x2, 0x4, 0x401, 0xb1, 0x100}, {0x80000000, 0x3, 0x4, 0x0, 0x800, 0xff, 0x3}, {0x4, 0xc332, 0x1, 0x4b, 0xffff, 0x7, 0xc}, {0xc0000001, 0x8001, 0x5, 0x9, 0x578, 0xf0, 0x8}, {0xc0000000, 0xffff, 0x0, 0x8, 0x5, 0xd, 0x4}, {0xa, 0xffffffc9, 0x0, 0x7fffffff, 0x6, 0x2, 0x4}, {0xd, 0x9, 0x0, 0x3, 0x3, 0x6, 0x1}]}) r8 = dup(r7) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000500)={&(0x7f00000003c0)=[{0x2, 0x0, 0x2, 0x6, 0x9, 0x8000000000000001, 0x31a2, 0x80000000}, {0x0, 0x0, 0x7, 0x3, 0x544, 0x8497, 0x8000, 0x8000000000000001}, {0x2, 0x0, 0x4, 0x4b71fd8c, 0x8, 0xffffffff, 0x8, 0x7fffffff}], 0x3, 0x38, 0x0, 0x1ac3}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="f3980f2207bad104b000ee660f38826a060f10eb0f07d9d8bad00466b8463d000066ef66b9800000c00f326635000400000f300f005600", 0x37}], 0x1, 0x71, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x800, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_csum={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x9, 0x9, 0xd37a4cf81893ceb4, 0xff, 0x7ffffffe}, 0x3a}}]}, {0x0, 0x6, "f3450ccd68ff641a2e0a58430b63fb721e7af8ce819af432662a69186e1d0d8bd3f87eb9e2fabaa47fa4bc8a2d98209a3da9fa6ed76411fd5a01b07c3d8542f70c32f18f2695fec1c4d826014fd45bd3a7fb8a25c151e05c06d762cb75bd148c6317590d0e66fbf0b34ec6423b62a55bbbc98cfe206ecffcb1cebf386dbc6eaeec6a73e0ea3516b3be678e33700cc7a93df5d1e166a6b31865fea466569bc9f80efd6b73cf11892f091999dfc027a7f8dbdb0c116750f374"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}]}]}, 0x60}}, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r15, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc400000", @ANYRES16=r16, @ANYBLOB="14002bbd7000fbdbdf250a0000002400028008000400c80900000800070002000000080004000500000008000300000000003c000180060001000a000000060001000a00000008000800050000000600020087000000080005000200000008000b007369700008000b0073697000080004000200000014000280080005000900000008000500070000003400028006000b000a000000060002004e22000008000900090000000800090009000000080005000300000008000900090000000800050006000000"], 0xcc}}, 0x44) 1m3.807300662s ago: executing program 8 (id=1927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2501000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x20054000}, 0x8800) 1m3.676894203s ago: executing program 39 (id=1927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2501000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x20054000}, 0x8800) 1m3.270037822s ago: executing program 6 (id=1935): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async, rerun: 32) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000ffdbdf25240000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e31000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r5, 0x25, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x1, r6, 0x80}, 0x10}}, 0x20) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x10, 0x0, 0x14, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)}, 0x40) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000006334b20cf3ddb1c00090028bd7000fedbdf2507e28f00", @ANYRES32=r9, @ANYBLOB="4000260b0a0002000180c200000c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="653e260f225166ba2000b800500000ef66b829018ed066bad104b808000000efc4e2292bedf30fc7b59b1d24a60f79f60f329a020000003901660f2080", 0x3d}], 0x1, 0x4, &(0x7f00000002c0), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) r10 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r11 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f00000008c0)='trusted\x00', &(0x7f0000000900)=@keyring) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m3.061106181s ago: executing program 6 (id=1938): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x9, &(0x7f0000000140)=[{0x1f, '\x00', @data=0x5, 0xa799}]}) 1m2.639517623s ago: executing program 6 (id=1942): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x18c58ab577ba7d84}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "da33c78226"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x18c58ab577ba7d84}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "da33c78226"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) (async) 1m2.573301188s ago: executing program 40 (id=1942): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x18c58ab577ba7d84}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "da33c78226"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x18c58ab577ba7d84}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "da33c78226"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) (async) 50.203984987s ago: executing program 41 (id=1914): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r2, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r3, 0x541b, 0x0) (async) ioctl(r3, 0x5451, 0x0) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd608004500001c0000000000119078000b0000000000004e214e2100089078cf49cb674f69d413b6b28940f97f2db908cf89b9230b1b2af230164c50"], 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={0x0, 0xfb}, 0x8) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 35.899886077s ago: executing program 5 (id=2178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount$cgroup(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000300)={[{@release_agent={'release_agent', 0x3d, './dev/sda1'}}, {@release_agent={'release_agent', 0x3d, './dev/sda1'}}]}) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="f0835f28c266b9800000c00f326635002000000f300f6e3d0f20d86635080000000f22d8dde1660f73da5c64660fc7b3ec0067660f3881791b66b90604000066b80800000066ba000000000f30660f3a406706d3", 0x54}], 0x1, 0x5, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) (rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000024c0)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x7, [@struct={0x5, 0x5, 0x0, 0x4, 0x1, 0x5, [{0x9, 0x1, 0x8000}, {0xd, 0x2, 0x5}, {0xd, 0x5, 0x1}, {0x0, 0x4, 0x2}, {0x8, 0x0, 0x6}]}, @enum64={0xa, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x4, 0xfffffffc, 0x2}]}, @enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x10, 0xa, 0x9}, {0xd, 0x14, 0x2}]}, @fwd={0x7}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x376d, [{0x7, 0x1, 0xf}, {0x1, 0x4, 0x1}, {0x4, 0x4, 0x40}, {0x2, 0x0, 0x101}]}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0xa, 0x3, 0x200}, {0x5, 0x4, 0x4}]}]}, {0x0, [0x2e, 0x5f, 0x61, 0x0, 0x30]}}, &(0x7f0000002440)=""/87, 0x11b, 0x57, 0x1, 0x7, 0x10000, @value=r3}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r8, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002600)=ANY=[@ANYBLOB="4c0200003a000008ff030000fcdbdf250300000008000700", @ANYRES32=r5, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8a4}, 0x20008000) 34.952920471s ago: executing program 5 (id=2188): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r1, &(0x7f0000000380)="197dbf32ede9d75074596b3c2b52b5827131c5c8964ccca84caa4c83f030f3d515a6ccc358b8c43dc310f01f51271cd0615fab5ae44892d341b411eb679f4680eb457be1fa1323d35b7b50d45dd4b8153e3685271110ea043c5ccb2ab681e5fa470dc42ef6411cf0876e7e6b08f7da201617c8ab14eccebeff0cbb905cd9aab85ce35ebeb6b67072c8b024c96e3297", 0x8f, 0x4000000, &(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/nf_call_ip6tables\x00', 0x0, 0x0) read(r2, &(0x7f0000000300)=""/100, 0x64) (async, rerun: 32) pause() (async, rerun: 32) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', '.', [], 0xa, "59c773073df102eb47231cf9199b365ec50c8e21787defbfa4a58ee040eed69858e8228d8a1f24fbd8aef8dd2c1e1022c48ec8fad1904d6aa0f0c7eacabeb38dcec3a6ace876cb8ad00264e367fa53ca7a16028009ac6b9ff89ef21723f6383f5336bf3df1644cc74b13189ae22e3804c491f5b348796a956530a7"}, 0x80) (async, rerun: 64) r4 = syz_io_uring_complete(0x0, 0x0) (rerun: 64) openat2(r4, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x18) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x4435, 0x2, 0x0, 0x2}, {0xdd, 0x2, 0x0, 0x8e3}, {0x1ff, 0x5, 0x4, 0xa77}, {0x5, 0x9, 0x0, 0x4}, {0xa, 0xc, 0x6, 0x105}, {0xd8, 0x1, 0xd, 0x5f6a}, {0x6, 0x0, 0xfd, 0x4}]}) (rerun: 64) chmod(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x22) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000fcff00012abd7000c40180000c0000004472706595deb6581321d73a0c3174177dd76618755a0eb9abd40ccda35ee9b28369a9045cf325c5b029cb906bab9d819a0a02466e0f19c4888c7d4f78d0e064c01d3bf771bbb2b5fbfc4df9f6de74907cf14afc55b04fe415bd88572b6f27f2dbcc962b9ec07f8f88f7b6cfea16a16fd0cbad9a8a1211db584022d176435c46480346e7ea5590cab4273028b9ca5e1b718cdfb8b216a43e6f5e841ae65b66724220"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 32) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) (async, rerun: 32) write$UHID_CREATE(r7, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/27, 0x1b, 0x6, 0x8, 0x8, 0x4, 0xc08}}, 0x120) (async, rerun: 32) write$UHID_DESTROY(r7, &(0x7f0000000180), 0x4) socket(0x10, 0x803, 0x8) (async) readlinkat(r4, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)=""/235, 0xeb) (async) removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000001fc0)=ANY=[@ANYBLOB="bc1503a8e1a88d234ab2ceb7db7a5151a77b29ffa73d4d25062989fd0b679a6ec22e9976bd1b67129290487722b0d8654301ed703f80defa0b5e9ece601085dd18fdc97b57a4ba7801026667cc88940de8d115ec2ce1de091e7cc346887a699f923ef585666fc9d72ca856084edb78c95e7a4db29b19a6c7abc4acb1e291c76d025a6c40988354c0c4a7fe4e8aa0feabbaea9156c6f8b63cae7b015990e85a82cafdc1496a87cc066ff3e7b9c92db10e05562b69d03d6a93c41e012c15a45f18717f7d281b8056db98", @ANYRESOCT=r6]) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xffffffff, 0x8, 0x40010, r4, 0x20000000) 33.948337219s ago: executing program 5 (id=2205): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000200)=r1, 0x4) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="57131fd5377a082c3b6ec114920f2fcb6a4f8a0f2c27f6a16da164796743964e8c1696aa897d08b16999c1206581f151e9a994d6f0b5fd5fb6804777bd238e0baed171b016fe1b58d84c672009d0a634127feeaf73a74a17b260f4d23782c529ce20fe0a289bba46d444b8c824e60186e59ab91c168b00", 0x77}, {&(0x7f00000004c0)="5fde2997730aab08aef24a8ad6c812d316a0b6da4a1d969b075cbba60e673068727f68f75a2e16030bf587d61ce4ad0e616b382659505cef2dc241682fed9beb1c874b21e89e916df1d565d21fe7df925a10ee529c75bcdc09629557e36c9ef4d2b21237ffcd0834af0c47f9b397417188cc6dc1fade756bc91ceecd5048739410c4c5cd8006ffc90a111ee2eb2e43bb51b2fd7688871baa3ef76f5c7915dc32283f4a35abf9d56d1e72492ad71be0fb12f4b6017ffd264011cd38015120246f07df83b9c292a493f2dc4ce03f58427d1f42ed6fd657ccc75ece86564fc75916b8bb6e16643a0bf6530b678cecfbfddc", 0xf0}, {&(0x7f00000005c0)="598b2f34f497195def3ff8e4b08bf222ffd1c74870a445a1491ab593b1ac9981e6c44d51f8cbc58a9b9a47a792fda1345d50e9e92ba3da96c1fac2bff10a53fb29f65a663364321f0b7a01d2b8d0c328f016113d5b8a844c4e46e98bd4b9a2229084585a56e1b4881c06b8e4502d5d0b64f34cb5f7c5f8ca3fed2c3d909c264303842b40a9da3e2d0d977795234c1a3b2f2f8bc5977b2aeda91477bd4c613370702326db96c131dff1063335130c326160ae9bbbe852db5cc3d77dcb64", 0xbd}], 0x3, &(0x7f00000020c0)=[{0x1010, 0x119, 0x45, "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"}, {0xc0, 0x110, 0x1, "1af6326b112b2f37a78aa2e9e8bce3dee33fbb601d139665811a189970a52545c7f43976f131e63aa7847e6d1af05f3f356db288dd1a789333105d535f82464a20ccb37d47d198f1bfb4091de4a0e82aadf7393964b9d6b38184ae7c0ab05c982f883aadb4d7d3b3a1e1252900fad511bc496bed0a972f1d4e780d7c881520e401076b5116467a9bdc09dac766815a736be360ef70359981dc00a40a73958cbfb40dfc32de99f2389b"}, {0x18, 0x0, 0xffffff0e, "fd63e281bd"}, {0x1010, 0x0, 0x3ff, "6fa7e764c8f9d5cc1c900e5d6b04535435869248a9cb988e99363c6e41c56ee23f08becf592c7ece5295858bab2cdc59946e52aa6590efc158c0a99f94ab9ce677a335fb0ded1ebc54d24bf54a1402bf88748b1ed00a47278cb01abc44eff534e9147bb1e21d92c9aecbe6f88e56827f8fe28bce8dad88511e1bb40ede8ee2f52dde3950da806c2b33a6b08805624a7458023a8c29ef39a0a0ae2f5e917d804e4bc8da994f754368c0696834da4157c739304f6c11cf1f94bd5e8185d07fa466f164816f63eba4c37523ce5c2adbff94925ca5f176d21bdf7979d3f32fe236b624f56bf07328e3b5144dbad84f41e003c7220c2afd213805e5f63a4d497993342e05476703b526b5568c6b951b83b13fbef57b1abef876d322ab887dec2f33a5cefb369d8c977b38aeae11693843ecf84ec2b9eca67c714acf5afac39b879fb00a2ce67774f48ca68a4744c89996f7108a2569a68421e3a313b70f15cc5241f7387e7de43bcee9ecb069980a3ab4e3ebf4b94f45eee1d6570e682032a904f4a2e297e1c360e19da6ea7a781e1ebf2520c9d1945c0e771815452ad91b993092811ce3a52475e6d21883e06a907ba413e6cf65e1730af49b892fb4a2df260c27916fbeafbc87022f5eca2b100a63ebf8389901c1d5cee532efe341d74ba4fb74f0534666c3d516ba468c70b30d58e9b9ea37a9a3e8fb24847ce49c88688d271494a5a948362af8f649c12f622757e1a9b182a613c4ef19d50ab75ef7bdab61fe4c1bc8d042814052ea3f060b78ed21c8b582cea0411022243bedbcab4347d2362494aee6d82125d8263bd5999b4fa08502938beaa39ead242e89ff86531a33ac66b8718a329f5aedff3322157a1a1fa7777dcac627b0d45d8222edd7d9d0a89723f4b289a9716db029ed94f3cc5e855e88113542465450a3f66793190cc9bba59cc3ffcca14a2d346de8912023309bf01af6a801752fbc0d5fc89e9dae7f70d9fdfb4b17c3919cbd495415ad3135a88bb774fa8d3c690f544d7a7e3aef9945e02516d3519c553a11659694cadcaeee70ccf28ed38fb30fb65bf4bccf448ad93704b21143f35e3e8d44e64dd162a9e4ee4ec5f4155a064a8cb4a743b533a6fb479a16041576b094dd4a2e85ba2298aaf691a9c1b946159c1fcb6312fa3b5a24d8edaaedbf1369f4d73888a795fa8528d5fd47a1d8e4f9592abd1d7522e215e3d5b308daf3ee58c5637bbaf494a1d7cb726b5c338c492a162e0fabbc9f01aa4dc47572b36753bf2c0c0c3034560f1cbca1e5e5ad9e2f25e2b77f83e8588f54fe3669b5f7acb63be0f62d3dab5cb3a2c1cb30c22ca551c22ed04724f7a7ec7571922898748c3c4318a8bec860a9d762625ccdb64b9006a468f4ccb2754856362a4b6d4f55beed1e07b63ec7f39c58aebe66aaf7aa3060136e5057906faf630d40708caf97b2487585283a3c5f4c4ae99ec0076a93854de7f9c8bdf9882df86ed1755e0c74b19c5c35a957e0b84e191e9e33e19bd8d9e45ce283c18c06d15e1d0c9b4ad80f858f5cd0e3ac3c171f5325130e0f964dd6ba38ed71bcd5100f232299bd7ba690d703dcf0a2eced7f9d79c3be94585a1b9fe2082ecf1bd9b1b14003d5188e332c750d897c006d16b6348d237202464412f57875e367f9c9dc789ee153e13694cc86c054fe09f3541c83a72fd900caf59f9b4a63600e802dc3ff76e74f2883a24d5f45acaf2e036a3a72c10b1de910f25f9b3d11a19acbaba0397980fa8551803ff502735491e161a641a7dc94b25ca2919b123dc2fe1ed2e1ff6613545b29a9c34c7a8d47db38e8b092dffffd5b6634b00de10583e5f0d9d90dcbbbc29cbb52815717eaa5431cd3a6ba63a1fa88ea5999b11aacb18224d51aa7e75efec44ab5ed742e1f6e481a5556e27f4d8ed98dd8ab9f389f132cd7680b5baa2c5d18c121da4034f9c532570aa773b90711e88270bceadd4d69a54a30a3b244750b58ab5c6f924f77e579fea094d34aebf967c14fed738baaa948648010f28eb1fb60ad3403265e6d4d1cf0a15ed7fdc6b75129d76db17f197fbb266976ff988b058d09a5e88ef40fc7dbc875c265d6425aba85b62f968a5cdabfd9c00a3c1c0fd0925bc45ab25a691eadcbff02b0563622df6bff1f6f1ae42bd414c9b93595a613fd67544f47d7f234f03bca2f95a227df851e564f150fa85d8f0030909d08519225f3dbc1ed51faae42ae5182b1702e18905206e387fc7fde72f6911cfdf08dec68d83f1787d02263ef4a17727256a6c4a8bbf5e54d889d6fc5d88905b9f0c0bd1b89258af415bec74e6836b5564449ed648254a727282ec1832be0379fe28a7d6ff4f621594712f6c085027ebcd0e3a9ecf4833554ef31faa6050471f2f15786433fd1d47ccf5b8d55847ca06417a2c00bf7fb0bbd5f4cdf0af101b081f9978333f8b9af708d70bb6ca9a606f0c257205de72544cb9622dfe2b57a260268ac5be8edb12c3d20075d47d690f4975f8f1217d66eb9d2283ed11876a777a092aa1758743785dfc418ee1f29314d61656ea6ddf207ef99ab3701b51dffc9a67cf14f62276bb595c1bfd761fa3aa251a8263aa2175376fefff29579ed4f8bfb316ab46a1092fbe5fb5110c0d39cd3c3da843f490a69db29c4922081c22c16d886ab01ee527f4260dad079a8ae891ce4b9ed1b245039336cf998a3b7274144811107e5a8b704acbe12ce72dd56d19a9b41dc1367c88da73c06f8951a969faa651bcfa7f3a2e1f864735d7915fb5be7f1408030141beb700d1ce38865bd8fd84a9074ba812dd13c3fb6257e3614997469890a7f06a3b4a38cbef615069c4c584b65ceb0cbb957b793427b9bde82494e71ee61131d38da25b7e7c94fc2c7e68282495befbf4cda951740755ac1b9d57e756649fb4030e1e805f843d414889f30e5ec6afbb083db95e3a97213ca2adf649fe8d6abd41857023ff19b7fb0210476bf6079b896667206d1681da06079efffe132544a1f69300116ca2725258a8dd26869ee82a79d59b0b21cf9825c4bf1c1b80065301f44a1955108386079d93e2625364b120fff11278467a8db5209a9f3b4af2a9838af9a8ca83ef041686f72cf8a282d45eba7df15785e69e8e0310812010be07863e9872f8001e222519e0015d7b1fd9bb93aa6e085cbe331f09c73e61c937dd93dd6d5f9646d77a8a9174c3956f4077973fcc40eea9fb4b79a091a09292e0ebba44fefaba6c43d21a1e2f43c40c874a553ee0d57f413751ed43e684a9a240967e7ba5797f4641f7f4cc26a56780cea7cf3f9df527675b4b07eba8f8ff23d0cc8e3d5c7a62b058955c94550e2cd4b44bf9986449422474ee35540159cd64e72908f0520452e1039351608f18f918b49acbe57ef0fc52fb8464e56d7ee38d710cc75ae8cf35cea1dae9f5b14973da94fc8588bfa365610e0995ab47c90cf4b71ed2a6276102676fc22c8a194a5241f6494a8caaa8088fa4eb114054236aa0f68764f558209d90a7febaa0c48e199ac0dcecae32be70a517a8bd1dbbbe5cec5cc22ebf36d13da1e6f9b5832e0f5f7247926914182930b33e055fe7bb1e77a33076f4201a40115e335cf4d3ab38024f9d6015d8647531e033e521cfccae67cc0f989c13f5f1a74d79bdadc6416b2db0edf8a95b8f6964e19e25694e637d4e0828bf020a89d6c106d8bba4ccb13daf5c1edd8813a8c5ae9a6a167d81294c2d02f5f61f774abfc7cec9611ab3bc398e6323e32dc699a3885a36afbeeec8766f6db878adca03ff4080904cdceee86bddba2d3c04f50436f9dcffde8d87fc0b480145524e0af8d3a28f28f90ba5f2b3bf0480408549c68477943175d9cb8a176d7796a83fdd9ccc14aaf20733ba2d8aba098910f13a9053425d38cdb369cce00e1ffdd2d136c797cf042b1f4640f01e01c1ad7dc21fd1bf17a82f9c1a4022595a422bcb1d52cce2bd2fc7448c4714a3b10a878f31622161c5f7ecb1501564cb58c04713aebe4b6c855012690f11d12a1987a5cb3c3671fe5e657098c77504a334659e81c616ab15b04c5c18b6de01f8dc8e8fcffede5b6880bc52425c367d43d08037c922771e5331f26c8424acd4fd48a45d4b34f05cba010f10b6a4f13865dbdf09a25ec33008e9ca522b7bd5843ff72e1587a84bcf3b66abcba82885d7e79fae86ab79516f76f752724c72d29618d00c4d3eeab2543b08177d5e4d1d0fb028a63d8930d74e19758b3792e658d483202212528daede992f003f56eca12911083b06407bda09d621e43812c374b340baa31c735b80da3cf8dd0db0ba9e09fd02c8e07023e970e426877a4c26339a84ab509b6657b80ac562521ad894e07a7f44b781ec848982bf027df6976224937e66199d33b1e16ccc019d08cf76bac03e166659c48a7307bf90355f362be58454258c080795ee3febd8fe41bc0061ec89ac1d0573f0192e6cc6b4195726077e8f936df05d9196fc503375d78e53f14b3cc9584ce95f2ae204078accce8cf66c6626c9c7b2fdee3c94fa77efbb69df42d2381fed2782222280323f577074e9b38733ae7c0ecf12270e016178efcdac1eb32bc6025cb635721bf9c188881209469e234c895b5fda7ac673ac3ae671aecf43e0d89ab02c91ae1f19cf5d0c45d50cf6cb35771b35701103b311c2b5aacf700b41fff55a7e54547cbc21d61966ad41c901830965c9fa7df87867fd4407a04af7fc31f8cb43e4842f7054595e92b26b3478ddd8732724ecd50c4b4baa012f04a18e53fc7e6a79793bc02cac5f1076c8d1ffb3e41be45c322f67bfd179864e3edea64147155a52c0fd0b9032de031515ad9423ac36d6118af464a365796c8ac2c74fda819f0becf371a045ded6a0352b64c46f23791fd119406978238433819990dbc54b8dc99903ece1469096897bd82f60b7efdc05dd9aa34c9481a3a6e22d94077b67ae85dd6569006df5ad8c929967677901375d02ff832b1a883d894a7f226d2ceee82e8fe35490c5d7a6bc05dec6620650330bebcd04bae56775821dcc9ca541e0e07c94e71866256e359830d840079f3ee01cd29f6c9429802326766d6a6f4f1c3a3d0803e373affad3acec237b1a1e94866a128da33fafbb45ffcbd3736f8f1e445d210b0ec9346e0f1ec46fcf449ac757ff34a67208dded66ed2a73db9ad0340805654058b6d20c07bd10d2ea2f31b7aedd6528334f1678d7be7d846a65161020c068c09d725b4ac79e0ff938e0ed1e337068a8f51eb9155581606331db1e33adfc2780a975c8be4f69b7d5cf1cd3cce17bf974dcdb230291087605744c663bdfe5343a515755eba7ab2571c0f1f7c90935722da8ded7fc499ed7df52cfa45260524f16f71de7d90523e5a095ec24dfecd65b24dddc707141860ee806e64f3de2652e7c0f340265dc6f4595003b2150aff2a3a2f879df152bd1b6f3f41619fbe5259efe992e1ca1922c7d0480b6f8aa6c14b7de879fae967c726c201453b4deb118183197628cbbf12afcc29ea8d69a43c47e34be209bfa08ce9ecfb1cf49f545ac53b16293dee754043ee3855e9445fe02736db8b0b42613a80818df1c17fd0b8351849897a8650b9a29a20d383d993755ad4dccd8be054bf6a2a1878cdd5b78bce9946921bb1835dc5a3252f5bf2a280a2e56f8695742348da8968c0063e927443ce6806d1df105a61e239997e8ad11e16028af04cccf58327decb19b7396d4e628f3ddeebdbe9c7eba3c93c1e32d72317b8f807f316c1c96cd768c6b37b29975da3806246d170acd5e3e48cec62b33b00fc"}], 0x20f8}}], 0x1, 0x4008000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 33.882579143s ago: executing program 4 (id=2206): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x4, 0x72, &(0x7f0000000040)="976d9023", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xa4, 0x4c, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd7", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b", 0x0, 0x8000}, 0x50) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000000)) 33.58755506s ago: executing program 5 (id=2209): socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x1c, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd700002dcdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="40007a801400020001ceb5581c2a57e668532c8a629750cde66ba082020000000c000303000000ff7f000000080004000204000014000100b1d75dff838fba0f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000180005000000000000e8ffff2c00000000000001010100000500feff08000000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) fdatasync(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./config\x00', 0x0, 0x8, r4}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./config\x00', 0x0, 0x8, r4}, 0x18) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x21100, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x0) (async) umount2(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write(r5, &(0x7f0000000900)='0x', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xfffffffffffffead) mount$9p_virtio(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}]}}) (async) mount$9p_virtio(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}]}}) 33.586847153s ago: executing program 4 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/202, 0xca}, 0x1ff}, {{&(0x7f0000001a80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}, 0xffff73b6}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x80, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x80000001, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) munlock(&(0x7f0000c27000/0x4000)=nil, 0x4000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x1, {0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x32) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000090000000000001101000000ffffffff0a0000000000000901000000080000000000000204000000005f0e2e5f0091c5b2818ddb6283de130c3988c38fb365766f7f2586a2ba5f3148cb35100a212790fe05992aff108617470fd6beb2c513a2d7fc78a703b716e4"], &(0x7f0000000140)=""/151, 0x46, 0x97, 0xfffffffc, 0x1ff, 0x10000}, 0x28) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x0, 0x4, "9eb19c9f6815d55e20465ccc8b991dd3537ba7096a2ec8691613069cd557ee96", 0x59555956}) mmap(&(0x7f0000c28000/0x4000)=nil, 0x4000, 0x100000b, 0x50, r4, 0x35ea7000) 33.007903969s ago: executing program 5 (id=2215): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(0x3) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r2, 0x7ff) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@rand_addr=0x64010100, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}}, 0xf0}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x13c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0xbf, 0xc, "a98cb5cf99719adf5ff5ca461b058b9d60e9d4a2ee437c2389a0cbf22a28d840c54085350ade20927147093d6ddb47946b224924a7676abeca45b27d5d45cf137fb0fa232e46b966fc48b898ab34cca230dddad6c6e2738eeac6064df60ff342336fe0885c965cead49dcde47b507c1cd3bd69b5c490de06eec5e2f697dd39a884e2ed26af54ac96aafcbdabd2d0aa2c173dd7d7ec15a0a7db962e99c5bcfca2ef0f33e4fd4bdd1daa64e291314c41ee4f9447615b628d40f2cedf"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}, @NFT_MSG_DELCHAIN={0x15c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xa5, 0xc, "9878d9ef2119511800b5f62bba1468ed55c42002db2dd2e6e66289928dc642f9e22ba79a80bd102589ebbc2d4f84c10857776b2883955605afd760467f136eb8b089d8729fde0db99abfc81dbae60e7a371c1068cb760415d58fb4df9b456dd12ec4c8548164012c9ec127049744ad0aa5f8570fb6b4f7b159f882c5c58c46fe7f243a52c8b594e6c703c54a3f853d2eb7152235e4c8d0f9bc3a19419e02ea7299"}, @NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}, @NFT_MSG_NEWSET={0x468, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_USERDATA={0x55, 0xd, 0x1, 0x0, "73b971cd9f6755ac6414db8ed221cc44b3b68bb8115365d0fc09047f04a6e7200968c21632aa50b69d5a0270f6042726c48a01ae4d618dc577a148115fab85e41798fe8e8cbaae6547ae07b64f45f18578"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_DESC={0x3ec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x19c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5381}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffa01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x340c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x113a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb933}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4ff0}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWFLOWTABLE={0xe0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x31, 0x6, "047a2de5036ec403d4c2eaf521c1f19ddc1237f4458be766cc6ca2c6bbc30042050621fe2a7da0f73e5082e0fc"}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "6cbc8c8eeca42cd321d4c495b59580e737f591a54135b34d77ffd848c51f4cf58d"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa14}, 0x1, 0x0, 0x0, 0x4008}, 0x24000880) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) writev(r0, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x63b}], 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000007800010025bd7000feffffff0ad3b44b155cb560"], 0x18}, 0x1, 0x0, 0x0, 0x28000}, 0x4040010) 32.720885524s ago: executing program 5 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 32.717538489s ago: executing program 42 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 32.480258822s ago: executing program 4 (id=2223): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/103, 0x67}], 0x7, &(0x7f0000000900)=""/93, 0x5d}}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/223, 0xdf}], 0x4, &(0x7f0000001dc0)=""/149, 0x95}, 0xf2b}, {{&(0x7f0000001e80)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000001f40)=""/181, 0xb5}], 0x2, &(0x7f0000002040)=""/98, 0x62}, 0xd}, {{&(0x7f00000020c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002140)=""/13, 0xd}], 0x1, &(0x7f00000021c0)=""/128, 0x80}, 0x2}, {{&(0x7f0000002240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002400)=[{&(0x7f00000022c0)=""/20, 0x14}, {&(0x7f0000002300)=""/246, 0xf6}], 0x2, &(0x7f0000002440)=""/213, 0xd5}, 0x23}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002540)=""/63, 0x3f}], 0x1, &(0x7f00000025c0)=""/4096, 0x1000}, 0xc30}], 0x6, 0x40000001, &(0x7f0000003740)) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = syz_open_dev$hidraw(&(0x7f0000000240), 0x9, 0x40) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000002c0)={{r1}, 0x7, &(0x7f0000000280)=[0x6, 0xa9c4, 0x2, 0x6, 0x1, 0x200, 0x100c], 0x5, 0xd}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x6, 0x4002fbe4e3ce06c2, 0x0, 0xa, 0xfffe}, &(0x7f0000000200)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="a7072dbd7020fe73df251f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040010) accept4$llc(r0, 0x0, &(0x7f0000000340), 0x80000) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, 0x44, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x124, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 32.311615336s ago: executing program 4 (id=2225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+=', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="05001e00"], 0x3c}, 0x1, 0x0, 0x0, 0x24f1c6e5fc09d0d1}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r7 = accept4$tipc(r2, 0x0, 0x0, 0x80800) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r9, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r10, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 31.371183435s ago: executing program 4 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) 31.09046876s ago: executing program 4 (id=2236): syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x85}, &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 31.024179299s ago: executing program 43 (id=2236): syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x85}, &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.869292724s ago: executing program 2 (id=2736): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f7ff00000206050000000000000000000000ada896a507"], 0x18}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.823420704s ago: executing program 2 (id=2738): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x3, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x3, 0x3}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) (async) 1.73716334s ago: executing program 2 (id=2739): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 1.735349893s ago: executing program 2 (id=2741): r0 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d000000001090500000000000000000000000001a40002001400018008000100ac14141108000200ac1414bb14000180080001007f00000108000200e0000001060003400004000006000340000000002c00018014000300ff02000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100010000000600fa40000200001400018008000100ffffffff08000200640101000c0002800500010006000000060003400000000008000340fffffff808000640000000000800064000000001"], 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x8050) 1.660455203s ago: executing program 2 (id=2742): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x25dfdbf7, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x5c, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000000}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r1) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x8000) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b90"], 0x65) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) 1.495298075s ago: executing program 1 (id=2746): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10200) setresuid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000380)={0x9, &(0x7f0000000140)}) 1.49368413s ago: executing program 2 (id=2749): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffea3, &(0x7f0000000140)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1}, 0x40000141) r2 = syz_ublk_setup_io_uring(0x1431, &(0x7f0000000040)={0x0, 0xa693, 0x8, 0x2, 0x174}, &(0x7f00000000c0)=0x0, &(0x7f0000000300), &(0x7f00000001c0)) r4 = socket(0xa, 0x1, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='100000', 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) read$FUSE(r7, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) unshare(0x2a020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) read(r10, &(0x7f00000004c0)=""/4096, 0x1000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xee00, &(0x7f0000000280)='./file0\x00') syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0xee9e, 0x8000, 0x1, 0xb6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd24e, 0x800, 0x3, 0x356}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3899, 0x1, 0x1, 0x25a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc932, 0x200, 0x0, 0x224, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9872, 0x2, 0x0, 0x2ba}}], 0x4, &(0x7f0000001800)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xd96, 0x0, &(0x7f0000000800)=@buf_4k="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"}}, &(0x7f0000001880)) syz_usb_connect(0x1, 0x977, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000002a80)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x201, 0x81, 0x8, 0x0, 0x20, 0x7}, 0x1c, &(0x7f00000029c0)=ANY=[@ANYRESDEC=r3], 0x2, [{0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x2c0a}}]}) 1.389523846s ago: executing program 1 (id=2750): r0 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0xddf2, 0x40000, 0x0, 0x7a}, &(0x7f0000000140)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000010c0)="ea", 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r6, 0x3305) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)='8', 0x1}], 0x1) syz_usb_connect$uac1(0x3, 0x96, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 1.210066457s ago: executing program 3 (id=2758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000065c0)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='efivarfs\x00', 0x20001b, 0x0) 1.160625275s ago: executing program 3 (id=2759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10200) setresuid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010000000000000000000000000000000000000000000c0003006272696467653000140012800b000200627269646765000000000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010800000000000000000000000000000000000000000b00030064756d6d79300000130012800a00020064756d6d79000000a5760000750093e19d4f9d0b51a7e603dd240ae6d10e622a849bd1a69826a2b3e132829b699b61baefd36db9537debec18e850d5f6fadcc23e782fc55dd31f8d0c1e295a5467a030d7c15c1322f0de0c41b425188327dd7e0cfb5bafdf488c00c628dae6d74a3f8a9e7adda5e7782e46d81f995c4dc3b5ecc160cd616b681e46d3d0e580f8ad21b1c358d5df78d3d8173f38ce7899b162cbbbcaa194683b0e52c1d85497d935541046fae5012ca985817090dffeb20ab4a4d6e5871a90f35c8cb153f3874fb3a7acfacbfc55"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000008000f00", @ANYRES32=r3], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r4], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000038001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, r3, 0x3e}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x9, &(0x7f0000000140)}) 1.159986685s ago: executing program 3 (id=2761): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000040)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x80800, 0x75) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x4, 0x249ceb8a, 0x8, 0x3, 0x100}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x400}, &(0x7f0000000280)=0x8) (async) recvfrom$inet(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x10000, &(0x7f00000012c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000001300)=0x10, 0x8) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001340)={r2, 0x1, 0x3ff, 0x101}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000001380)={r4, 0x8}, 0x8) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001400)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @private=0xa010102}, 0x88, 0x0, 0x0, 0x0, 0x8, &(0x7f00000013c0)='batadv_slave_1\x00', 0x8, 0xb}) (async) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000001480)) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000014c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000018c0)={0x0, 'veth0_vlan\x00'}, 0x18) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), r5) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xac, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001e00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b40)={0x250, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x180, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001e40)={r3, 0x401, 0x6, 0x4, 0x9, 0x2, 0xf, 0x7d, {r4, @in6={{0xa, 0x4e21, 0x4, @remote, 0x46e}}, 0xcc, 0x4, 0x4, 0x0, 0x80000001}}, &(0x7f0000001f00)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001f40)={r4, 0xa}, &(0x7f0000001f80)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001fc0)={r8, 0x6}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002040)={r3, 0x4, 0xba, 0xa}, &(0x7f0000002080)=0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002100), r5) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000002140)={0x0, @local, @empty}, &(0x7f0000002180)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000021c0)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000002480)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002200)={0x228, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4800) 1.090078922s ago: executing program 3 (id=2762): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000004000001400033000000000000008000a00bd32a5a3f8f590c2a6c2390a5661b0109c13037d2656dc6bc913dc1c31410e51d76138921b3c13f1b7", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce40102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f00000003c0)='0', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r7, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x8) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000de711a662dee3acfcb3baee103f385480ef6015c4305bac912f1f7664a7d1fb11d0bc318599585f046dcd4f385dddaf7328aab5c069489ae5d3c90ef33d5ec001d39e323b74c60d8dbcfbc1b26d535fd5f40766836d7e23eb0d07ec14362305e35cda7007e894cd259adce439f0067895e8b7d4dde5fe3ee4b9917df7d0cf47bb2859f091dea105185b521dad4b872090b45acea9d4f88db6a7e0b586cb5097e4652a5afc339fe", @ANYRES16, @ANYRES32=r4], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fcntl$lock(r8, 0x410, &(0x7f0000000200)={0x1, 0x1, 0x1, 0xfffe}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="bf652bbd7000fbdbdf250d0000000c00060003000000000000000c000600020000000200000008000d0000000000080001000300000008000300", @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x48044) 820.154076ms ago: executing program 1 (id=2765): r0 = syz_io_uring_setup(0x6f82, &(0x7f0000000400)={0x0, 0x5544, 0x8, 0x2, 0x10000051}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)=0x8001, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r4, 0xd) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x40}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 819.957005ms ago: executing program 1 (id=2766): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10200) setresuid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x9, &(0x7f0000000140)}) 794.909432ms ago: executing program 1 (id=2767): r0 = socket$inet6(0xa, 0x80002, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42000004, 0x0, 0x5c) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9d7, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14dc8befa79aa1cb3e84da028d81310000000000000077610c7e3b0000000100000000000000"], 0x18}}], 0x1, 0x34001401) 710.587643ms ago: executing program 1 (id=2768): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x4, 0x0, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x26000810}, 0x4000855) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r4, &(0x7f0000000480)=""/74, 0x49) r5 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x80000000, &(0x7f0000000200)) r6 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0xb, 0x141200) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r6, 0x800a6f2f, &(0x7f0000000100)) 550.272435ms ago: executing program 3 (id=2769): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) close_range(r0, r1, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000080)={0x5, 0x10000, 0x96, 0x4}) (async) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000011c0)={r3, &(0x7f00000001c0)=""/4096}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001200)={r2, 0x5, 0x9, 0x7}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4064800) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000001380)={0x0, @reserved}) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x20000, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000001480), &(0x7f00000014c0)={0x0, 0xfb, 0xfa, 0x4, 0x7, "e5553de03e51398ffc7c0f63819d04f4", "268834adc5a7b153ffcddd654054c1eeaf4cd54f13c4fd873987be0b8a578de2ecf9845dd0781b0d66264d37135d39ca267e49c0a8511be0133265e13e50753a0f037164171c4ac7a494c9eb855de0c451deb89c556f0d3bdf11ad53951757e1e3c266847321c5146dd90fc192bd51b04e7b9764473c7a6be20f72e7629163e22602ba5abe47d2d6a1a05f4e36d23ffc4d5d7a31220ac0b961900a0c13b12810fec3c09f370eaa92eaacba631049a6a9ce4b072c4759645aa700c0b7996fd108fb1baf8f0674c4a3f493d88c01249607345ee7b46a8e6cbc34604108e701f9a933782e6873"}, 0xfa, 0x2) (async) syz_emit_ethernet(0x56, &(0x7f00000015c0)={@local, @empty, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0xd, 0x0, 0x0, 0x0, "dc60fc991de72438cc378362210dfe3645decec4a3eadd2da5d2698561e47003d9f2fe740d6a6f0f8bb6d960e153a23d058370c23e635e5988bd8113870bd52f"}}}}, &(0x7f0000001640)={0x0, 0x4, [0xf7f, 0x0, 0xca, 0x87d]}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000001680)) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000002900)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000028c0)={&(0x7f0000001740)={0x115c, r6, 0x301, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x104c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "b951d26c0eb26c250b080a835b4adc65db720d71da98884b42ac6a890a9703bc63b87ab28070e94a3ac8b488d9c79202a845b346e9f3d47060dd1b74e02a17c3b32872b4da4ebde567531e3fc8029f6d166e56a80805d1b01716992f5fb7bfc34123c23c69ef7b8471ec0c1380ffbe866a885002ad34c3c10c40c399dc7e70c3d3e124437d753e121c3bad88965476d10ece256a1eb77c7ce7e40cfd08569791965d14e5a56432ede23ea68679a64464b6d8b36f358ea3c83bda6dbc8b3f82aceb759864c7161da041afbc33cf2cd531f7c54bdadb41230bf976456825e3d1e28507014925ea88d84b296cfbf51045f2785fe009e12169f8622466b33ac6388a8599e873596a89516a3a61961649ee9cc17af10a7ab94456d2c66c1bcd01f4aab1e29e54ca3ef32f4c036303f8dca0ffd7124781274413dede1254b6ac6fcec66190f91dd456b009d1a1e50275d9d34a3ce291e68ee68983a96f7777cb72b0190a7985f9ec30ce9320689f0ddf499f27181e819cd509d5e441fd2f922c0a0c20eb32a24aa78bd90772c414ee286991f89f86bd843f179325375507e40bf87684cf44130338e25a675a158adf678eb87c02993707e41a729c5cf2c95c5fd9889806f4de37dff7cd072794622a3d9ec78d821b2e111ba0ab9a423fee83c7b4421ff9916ae748f102bbe0e321633590fbe536c35b4b9b009b619d92539d054ac4ac42cf7923e505c77a799952c67195d3f58694f1f2551a9a8aba08f2368a647f4d6328346d1918daacdba82efd3b610b6448b2cc0e72c07aabb4e5671166c552458423ac96137d06d8f65c7adcf2e997ee7db2dfa3edc430e05d540606e013d78d9c0e4ea098fb0c958cb3f3d3c1a7d78b8c18ea5f92747c103f8af1a9a5e30602e093d1010cbf540facf6850859bf0cb5659e788c3e7cfc39e48e39f5183f2c4421123a97d3fcfcfb785594cfe7aa668cf225ec1c090a92727ef344ea972651fa9fc4d6a0f65f9ee48969064a5c1e60f32057f78b6ca2b9da47eb2d3fa9ad629a6ea65eab875ab3c8d5efc785d83e8550ee1efc889fc46de9a0ede129b9cc2191434aa800b0cded7ea04319cd444aae7a84f63eaeb289ce0255e755dd06f341bf6b1ef9b90972bbdc39763bc26360957712ae0210af3d23d323211053e00d43906b49fbf2f9fa98c5d520e15d22acb7caa5642c8eb77c7668fd5d10b4a22a731c876625390e76169a1abeea1c50cfb099088e18c859dc52de5bf8cec0d4b552886e2b6db59e85a4c813a38dea8545e2de152814f946209e322201ac327828856e455ebb4ce2ee85cedbca90afcfec8a6826b3f8c97e5c80a56af0cc5f4197c47106781ed84dd79db2db1d002434364e6a192061aca9cb43e0e1b8fb3354683e4b25c3a29e1645a92c9e5cd955a93aa601202c2b9dc21a80ea1ddcd4d37d4ec355940122346afa2bc7fe2acc49b77248232b7a518c1b226a4a706a9f78a7cce2b56e622d1da68090f596b711937ccd81c3da9a30155ab50cfd1b28fa0376a57f8f097d964a01b2f903b7448446e3dcf37a53c79496f2955c365828bde7a7e658f99a1f8812947ef7f0014f2381497620f9b079587a54a900d0a30cf47480d01c13c13cfb32e133892d8689f60a22df199a3b3a3adf76183058ae7bb4f4b0d88b6701c2be28774cf8948e9cdd9e1b0f1603212502a81112cfe222e1d171c3a7792777745391c48af10c595ec38e0718235189f1d7b14dc9e8dd3dcdc7a6083a392ffdeb216e6bfddbf0d667c155f2611ea4ea9e4fe01b137f8ebad852f195d57ec8145bc3fe9abf15f93fb2abbb7ee4dbb67a811e2c3ffd6da9bb43146470096ce8e8011a47ecb907f4b377b4fb9707c0020d65ee99c05f5ad8e0c4f7ba41de67f06a3946b76f0d7de2ede3add242fcf56dad0505360f6e9b99f0996e3e12056d36c4fcc84464df13fd7971f602315661ddefd8cd3b9c62814cd7572c29758b368c18aa3362ed0f853a47dece57d516472fc2c34dab700407ac4e97ddd717657085e3362c34da0fde05798fd8d6a167a231cc2e5176a4edb4f5f29e5180c98e2c9e69465f101e28ade9a10dfe2240734081b5903dac6d16694c05281e98445aa1927cf6a67536f192fc80cbb74debea184f5712e4678e0930fdf282993a7d78cf6402a5eb32cfa0e15a594a8721dd203ea57b0c24415b1a6480ea0c11ec534355e12e995a6b04ddb048c7bc68489bbe73850849adc4132f99e8adafaa0864d653e6c5af0404df6a8bf935b91aa0f5e8e0881c96d709d1eff79abfc1b72b2005518a6fd03a70303a369ac3bde226b05b2999b01588e367cf2a846719ea9dcf130ccf3f1df674bb2c581804e8eba8f6f74f112648bf8d17fa0ca16241e245fd54a550ac590e4e5d6907bff1d2ddc1b30be0c44d78cd1fc93645372e377680bdf9613c505440e6f59cddb64515209bf6ea88dd17c1c1b3ba1ff951f695827ff25d8702beb0c21ee0f744efd6fb3340775df4dcccb6d61c8e664a417735bf682576521911163a5bb4879ebf9ad021b44a937bf089054efc449f83033c2abb4bc85747b51ace9de9cb4c27bedfad9b19057794dfd2064aa735ecbaed158e627082d4ee71712ab719c2ee206f4f6f049d69827a3d8415901f185ef845d187abaf7673b0f4e3e09571c8e7e8374c6a7c350ffbbccc0b8efc796d9ee4f1ded821522f1d44119aca5d759c6ec3ddfb1b1581a58f151a352db7b6d3150538dcfba32c875ee8b94a6cff2e9b94dcf9840f142441f2c25355b28f1dbdf903f8585f11f0c62141a4c115bc32ffdc34bea82439a7d71ed751151e90dc4876e8b50d713f96262d76a0874a24aec23f594030c4ed57953a8c4ac60c5c3323e8a39287b3d24ba6e8e3d812f9ebb02c6d6cc3d0500c60cfc8a81e47638cde49697c905deb50eb437631e437e9166d25f28824113a4cfcbe09d8fc46587b0b0034992ce6fe46df73a60910d6797c8199c8e93bb8cddc4d5a9b23458355924623f2ec12f2e9a9811539e67ce26f4760c0f9b9519059a888cfb4192c000821f08c2d68d2445e57cf7865ddea6565f900561de6abad4621bc11a3a34c5b488f71a53657718da6247957f875dbc93a3297205f0f3af2f69b981467e705502175d11e932f9bbb3c3a342a927c32238f23c058f493c7b63b85c14cefbaf1ba4af8240229609bd893c108bbe4ee176e0c924b09a18eec9ef81a368d753e9de946d83ba9cfe0bc82120aeaab3b8a38a3d45ab99d2ba794656575865687ad3050e018b4e771a49afb47d1c95a3105f8738849827b271fc2a67e8647d5cc5349a6f99cd08d1e437eba93b93f59460c97ad08775c0244247028193fbd3d6782d6c7ac960be8e3096070783501c4adb5355cbdb046cdc1b286e3139ef415902a7081316c8cff43fdf57c4ca471df176a33fb9ef2ed3db3eb4780df775d460c44aff0b00c2eed100bfc3a10b6a491ff1414771362515fc5a6a6e091438efcd135f9f05a5a4bf519a5e0c19da6110cc55bcae5e5933eb906cb7c0637714a30e65e88c02009905e3de5729fd88db5df900155bc18bf9592c6075cb7ed156698d1fe234526c266610fd96ae84125a195752f8809e87574d085c965cc96364bdd6e8ee0eb33f218b2a023fff476553ba7972b6e460d1317911b304dbe34efa9e732821a16036591f863dc2d33e614ad744c6cda94caa85f0fe65e7343a8ea4f79e590d2a3093c9a44a6d7ac24fa64e5a6204095cfb35cc27854a7dab17cd905c96ccbfd98e99cfaaf4a52107233fee16a47746259979e917e87680e30c848637bb813b08b76aaf322d7e0d145c6beea03501d1a286d31a6f6d64cc4ca165d113fb5459869095985444cd89890891358c8e34e186938ba1a45af6b353a6a2576c625f25cd307d61f6b22d90fdb5e07eaaf0ed1c4edba205fae45e893b8c1959f5882dd5c9d4c8964cbe9379402dc676c5e0dacc85e77bde3c67149cb6184da3a097c7a7faa7fba9307002184a106cb61de5aa1b2700ef44a0c4668d93b7a38a22a6189e6b83e311541f2b708e1803daa8ed549f126a94f6f3387507a264e1ca223b2e955216c05512ef0a3e0864e92968a031e34a7fec3d9c5eb3b3c119981ba6d53519176e86743331deea22283453437ce653e85e16b1721cf0cf88ef97ad4aebe901a5bf6682bafc20622a1ea07a2a98850c0b903d2ad37464708eb8484fb528626e5c7be78198a0037bc3dff1822bef4eaa2551a4f2646f6d3bbac2e7e28e8f354d049d6c4ba5e42a5e782dfdc058d3059edfbc6f413d3566a5aef52bb4ef6f3bdc275fae80e70ba4223a36e65269f6c97546fff9de92972901725456b633e94079d23b8c3b3fd6b520b690796e600644760653dbd749ad27c27bb1350fc473de262d2799e5288f2b808b1c82f17332cb646ff77d4c4db484e6ef5f6e6d57c8df98e18e910b17e0cf239bc4cf0b118523bf33e96e0d6d6f7556f77bc9a700419e409679a17767ae9eb2fb366d4285198c1979f8900f95f636badd7112d2d66bae97c42eb73647bfdfd40dea3a7ef201a9925e4035577120e354aca8b3981883a5bf4caf59d17530ef26b03506a2b1c931cf6982380f06e31dae9391705e28f8af1838bf214ff71990646efab10e8705d55ae68e8674242c651d5b0ca4258bea0e1e564a5b916eab328af20ad3dbe9e140ee62fa6a0dfe4bc7f0c3a017fa5dbe405005dc885e136020b20a1389d33478cac71d6ddd3086269a08c768e7d5c0cf2c11b673b5d299673e25785c3fd000a1802cf1cf3d84d98708571c94668879a1088549288db9fae12dc514b5d6245e228565706d5cdd622c8d853bd9686f92d93d2e573f929e8d6f87cf776431e78caa6cb54175be523bde2c226aaeb09ff89db7f79d6d19f42eb166c4c2d14bcbb02afac1025915aa6ebcc78238efb45caa20970ba91ea548468b6efbb985d21c484a76e02f28dcf63028f4b0405840ad77e6d2493de0067b40e5cd4fc6c7e4b3cb0f4c87764f70936ce7d92943f6a80bea70077b0a4d014170548e9f3c0b86dece00e619ae83752f15d31bc1434a5a98f45c4fad5a5a7c02ae01b78bc0c52233e99c6875a1badefcbd809beb74f1f6186269b5df6479a97314a0750236c52940b8d65dfbce15b4e307f00cdd1aa4111f3f3c8da77c905024808da9429df2e6d07f43165f7542f7205123f2a0296b6c0a1d9eac67910c989ca4174d3415b537d865e75f33723306dc4ba5220380ac73f65b6ac089ecdb6ae6d1575ea74efd9033c2b40217ef0aa957a8a3a85624213e93849fb3ec4f93543d8b3dd05346f7ead5d1cddfdae5072c02b7cbe25667832cd26dd68b0d59d0903494ceebffe6ad9ad5c703f05c31cdff9c7187909ac0e9aacb2f69a700b62d85b8533cbbd7137e659a0d940265cb4fa4827253a93b37ffa39f5263b022b90864ea600509dc0649fd0c52262ba93f926982e5cba04b1d31134b2c88b49134d30ad6165de4fad635f08d1e37b49c5dfaeddd9f89cdd01eeafaa52ab6f4b44619b7239e4a8b0ee7fe7ffb00802ae091d6ae5e60587e6ce2a5fd449ecf932c3c0d911a8071d60cb3a34ea082e865b9c57e3d1eb34e2014ad0d9af89781f905a73805904379daaa6fb07c7497db87c2492a60446de9be7b3bb57609e4db495b307cc4a448d678bd0bfa559cc619f53449ac70b66a08b31c2cbf678dbf0efc370a77a5b9624f8b59ba996ab98cda9bdc831822dc02c0f1469ea74d93737f0b9db94bb21e5dd85c537c0cb56ae62a3aa95"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6c7cb0fbaa49fab847087fb0dd14f62c11a1bebe9c943ef5b95f"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x115c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040844) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) (async) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002940)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000002980)=0x6) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000029c0), 0x50000, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000002a00)={0x6000, 0x14000, 0x9bd133d1a547c262}) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000002a40)={0x4, "bd04bdc0614db10f7bf4940741ef26b6724c4e02766cc3f522d879e383a35671", 0x1, 0x1}) (async) readv(r5, &(0x7f0000003b80)=[{&(0x7f0000002a80)=""/154, 0x9a}, {&(0x7f0000002b40)=""/25, 0x19}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x3) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000003bc0)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003c40), r4) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000003dc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0x100, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xb65f3436f81102e0}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff63b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008880) (async) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000003f40)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e40)={0x9c, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x11}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc60000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x404c800) (async) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000003f80)={0x1, 0x1, 0x3}, 0x8) (async) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f0000003fc0)) 549.989406ms ago: executing program 3 (id=2770): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x79}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10200) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x7, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) gettid() timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000780)="a747d87b63dea2af992313966136e5c985ec70e379f4313069ede1eadcb66fbb95fdf92443aa6ba62745d746c3343261db21459843f75c85b04cd6c9eba8b8fd19fb163273600330a2104795739ee5235436f6f718c5090f29d3936fc5d2396f7020cef125678a3885846cc2b6e4a182d275a44fc0f96f4d45305c576a510ca3464d5fd5fa9902401b8ad786e9856677d7f858642d69d26f3419fbc0ef203fd63519821c6e8d7326990e317f3443c1107839160f1a80795f0579c93e4001e4d9b094f5f99206313bcd1cb936851ebea1b1c3a5f21933e92f", &(0x7f0000000680)="a9e07979d66df0da490b94cda7cea749bed1da3d8ff79c2f8063b48a4e027cb9656bfbebc2cbd95aa5fb0cbbb6b861bf7eed50aef303c978f2195de70593512451320c44526e2f77e3c6fb1b03743458c88e92c65f24e522793a9f2822669d21487d61956da8b5db3e768bee9419e2c15a58c2bb49fbbf745cba1ed60c58d2af492f74a8cecaa600f6f8a5ac94809c3ef4aa88825710b9156952372095263b5a6bbccd15810bcfd18aa7316f99b526abb2c91ed47110b397019b856afe86e759fbe25f1cf8e5017f6fc19499ab97de8b1cfc57e59b1ab03cb7c7"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="47c30f01cf48b83f1c5e09000000000f23d80f21f835000000700f23f866ba610066ed2e3e0fc72a440f060f01c52e65440f794450000ff1d148b800000000008000000f23d00f21f835200000090f23f8", 0x51}], 0x1, 0xe4, 0x0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x5c4, 0x8000, 0x5, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x568d}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socket$vsock_stream(0x28, 0x1, 0x0) r9 = accept(r5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000021217bc6f86d558307d4ba73f4007fd475525a3c80950b1b7c6f00ac1e4de702fc635938", @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r9, 0x1}, 0x20) ioctl$int_in(r9, 0x5421, &(0x7f0000000300)=0x10001) recvmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 290.335588ms ago: executing program 0 (id=2774): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(0xffffffffffffffff, 0x1, 0x77) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000300)={0x3ff, 0x30, [0x6, 0x2, 0x5, 0x8000000000000001], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fchdir(r1) r2 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3, 0x2000000, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000108)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) io_uring_enter(r2, 0x6, 0x0, 0x0, 0x0, 0x0) 210.457614ms ago: executing program 0 (id=2775): r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='0', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="187b23f58e156121d9be0c0f7600000000000000010000000000000095004b0010000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18120058bab72d", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000bfa400000000000007040000f8ffffffb70500000000000085000000190000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000000002000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000600)=0x28) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000091) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6000, 0x200, &(0x7f0000000280)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020}, 0x2020) dup(r8) 58.710644ms ago: executing program 0 (id=2776): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) mkdir(&(0x7f0000000140)='./control\x00', 0x111) inotify_init1(0x800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r1, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) inotify_init1(0x80000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000200)=0x68) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@ldst={0x2, 0x3, 0x3, 0x8, 0xa, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000486a0f600000000000000061197000000000009500000000000100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r3}, 0x94) 58.550779ms ago: executing program 0 (id=2777): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="343600003a00290200000000fadbdf2502"], 0x3634}}, 0x8000) getpid() (async) syz_pidfd_open(r0, 0x0) (async) close(0x3) (async) socket$alg(0x26, 0x5, 0x0) (async) pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="343600003a00290200000000fadbdf2502"], 0x3634}}, 0x8000) (async) 424.472µs ago: executing program 0 (id=2778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x40002, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x58, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x3, 0x19dff}}}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="ecd0e988d822f31d2abd7000bedbdf2500000000", @ANYRES32=r2, @ANYBLOB="06470000ba7e03000500210000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) 0s ago: executing program 0 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xd12, 0x7, 0x7fff, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) r1 = memfd_secret(0x80000) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x2, @mcast1, 0xc}}, 0x0, 0x0, 0x4e, 0x0, "9e0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16efe7c7c1c8ecfcc76b47d9ab75573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x15) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x2000, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @dev}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {0x7, 0x3}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) kernel console output (not intermixed with test programs): stem_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.440673][T14137] netlink: 'syz.3.1975': attribute type 7 has an invalid length. [ 201.440688][T14137] netlink: 'syz.3.1975': attribute type 3 has an invalid length. [ 201.440695][T14137] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1975'. [ 201.501999][ T44] audit: type=1400 audit(1789103338.666:2619): avc: denied { write } for pid=14140 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.577547][ T44] audit: type=1400 audit(1789103338.746:2620): avc: denied { write } for pid=14142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.637718][ T44] audit: type=1400 audit(1789103338.806:2621): avc: denied { write } for pid=14145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.731703][ T44] audit: type=1400 audit(1789103338.896:2622): avc: denied { write } for pid=14150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.957110][ T5730] Bluetooth: hci1: command tx timeout [ 202.002378][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 202.002396][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 202.374684][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 202.544678][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 202.546419][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 202.546442][ T35] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 202.547259][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.548897][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.548909][ T35] usb 7-1: Product: syz [ 202.548916][ T35] usb 7-1: Manufacturer: syz [ 202.548924][ T35] usb 7-1: SerialNumber: syz [ 202.676784][ T5730] Bluetooth: hci4: command 0x1003 tx timeout [ 202.678148][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 202.770850][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.770879][ T35] usb 7-1: MIDIStreaming interface descriptor not found [ 202.862363][ T35] usb 7-1: USB disconnect, device number 4 [ 202.914721][ T65] Bluetooth: hci3: command tx timeout [ 202.966753][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1985'. [ 203.897309][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 203.994091][ T65] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 204.025044][ T65] Bluetooth: hci1: command tx timeout [ 204.142250][T14236] netlink: Conntrack attr has 8 unknown bytes [ 204.142267][T14236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.440036][T14260] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2006'. [ 204.448228][T14258] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2006'. [ 204.448498][T14259] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2006'. [ 204.483575][T14258] lo speed is unknown, defaulting to 1000 [ 204.524637][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 204.675060][ T30] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 204.677099][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 204.677114][ T30] usb 8-1: Product: syz [ 204.677122][ T30] usb 8-1: Manufacturer: syz [ 204.991331][T14265] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2008'. [ 205.035484][T14265] netlink: 'syz.5.2008': attribute type 2 has an invalid length. [ 205.120860][ T30] scsi host6: uas [ 205.289956][ C1] usb 8-1: stat urb: status -71 [ 205.290151][ C1] usb 8-1: cmd cmplt err -71 [ 205.290842][T11291] usb 8-1: USB disconnect, device number 6 [ 205.292661][T11291] scsi 6:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 205.292709][T11291] scsi 6:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 205.451035][T14275] overlayfs: failed to resolve './file2': -2 [ 205.529107][T14277] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 205.529125][T14277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.529240][T14277] vhci_hcd vhci_hcd.0: Device attached [ 205.548891][T14278] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 205.549123][ T13] vhci_hcd vhci_hcd.5: stop threads [ 205.549134][ T13] vhci_hcd vhci_hcd.5: release socket [ 205.549145][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 206.080908][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 206.080921][ T44] audit: type=1400 audit(1789103343.246:2629): avc: denied { bind } for pid=14293 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.082389][T14294] FAULT_INJECTION: forcing a failure. [ 206.082389][T14294] name failslab, interval 1, probability 0, space 0, times 0 [ 206.082411][T14294] CPU: 2 UID: 0 PID: 14294 Comm: syz.5.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.082427][T14294] Tainted: [L]=SOFTLOCKUP [ 206.082432][T14294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.082439][T14294] Call Trace: [ 206.082443][T14294] [ 206.082448][T14294] dump_stack_lvl+0x100/0x190 [ 206.082479][T14294] should_fail_ex.cold+0x5/0xa [ 206.082497][T14294] should_failslab+0xc2/0x120 [ 206.082515][T14294] __kmalloc_noprof+0xfc/0x840 [ 206.082528][T14294] ? __kasan_kmalloc+0xaa/0xb0 [ 206.082542][T14294] ? lsm_blob_alloc+0x68/0x90 [ 206.082561][T14294] lsm_blob_alloc+0x68/0x90 [ 206.082578][T14294] security_shm_alloc+0x22/0x240 [ 206.082594][T14294] newseg+0x33f/0xed0 [ 206.082610][T14294] ? __pfx_newseg+0x10/0x10 [ 206.082623][T14294] ? down_write+0x146/0x1f0 [ 206.082646][T14294] ? ksys_write+0x190/0x250 [ 206.082659][T14294] ipcget+0xee/0xf50 [ 206.082674][T14294] ? __pfx_do_futex+0x10/0x10 [ 206.082693][T14294] ? __pfx_ipcget+0x10/0x10 [ 206.082706][T14294] ? __x64_sys_futex+0x34f/0x4d0 [ 206.082722][T14294] ? __x64_sys_futex+0x358/0x4d0 [ 206.082739][T14294] __x64_sys_shmget+0x13b/0x1b0 [ 206.082754][T14294] ? __pfx___x64_sys_shmget+0x10/0x10 [ 206.082771][T14294] do_syscall_64+0x123/0x790 [ 206.082787][T14294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.082798][T14294] RIP: 0033:0x7fd6a299e159 [ 206.082808][T14294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.082819][T14294] RSP: 002b:00007fd6a38bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 206.082830][T14294] RAX: ffffffffffffffda RBX: 00007fd6a2c25fa0 RCX: 00007fd6a299e159 [ 206.082841][T14294] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 0000000000000000 [ 206.082848][T14294] RBP: 00007fd6a2a3503b R08: 0000000000000000 R09: 0000000000000000 [ 206.082855][T14294] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000000 [ 206.082861][T14294] R13: 00007fd6a2c26038 R14: 00007fd6a2c25fa0 R15: 00007ffec017fef8 [ 206.082876][T14294] [ 206.083444][ T44] audit: type=1400 audit(1789103343.246:2630): avc: denied { write } for pid=14293 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.264180][T14298] netlink: 'syz.5.2018': attribute type 1 has an invalid length. [ 206.370288][T14309] netlink: 'syz.2.2022': attribute type 3 has an invalid length. [ 206.370306][T14309] netlink: 'syz.2.2022': attribute type 1 has an invalid length. [ 206.534764][ T5731] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 206.684640][ T5731] usb 8-1: Using ep0 maxpacket: 8 [ 206.685345][ T5731] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.686174][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.686197][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.689779][ T5731] usb 8-1: config 0 descriptor?? [ 206.897318][ T5731] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.387556][T14303] __nla_validate_parse: 4 callbacks suppressed [ 207.387614][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 207.491027][ T5731] usb 8-1: USB disconnect, device number 7 [ 207.847061][T14353] MTD: Couldn't look up './dev/mtdblock0': -2 [ 207.908697][T14358] syz_tun: entered allmulticast mode [ 207.921559][T14364] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 207.936708][T14364] team0: Port device dummy0 added [ 208.150732][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.155860][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.162547][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.167105][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.167586][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.263019][ T44] audit: type=1400 audit(1789103345.426:2631): avc: denied { read } for pid=14366 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.451728][ T13] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.451751][ T13] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.511873][T14380] lo speed is unknown, defaulting to 1000 [ 208.578159][ T44] audit: type=1400 audit(1789103345.746:2632): avc: denied { write } for pid=14404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.624346][ T13] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.624369][ T13] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.691461][ T44] audit: type=1400 audit(1789103345.856:2633): avc: denied { write } for pid=14411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.695742][ T13] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.695762][ T13] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.722055][ T44] audit: type=1400 audit(1789103345.886:2634): avc: denied { name_bind } for pid=14412 comm="syz.5.2041" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 208.833988][ T13] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.834009][ T13] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.848460][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2041'. [ 209.060824][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.060972][T14380] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.061122][T14380] bridge_slave_0: entered allmulticast mode [ 209.064441][T14380] bridge_slave_0: entered promiscuous mode [ 209.084876][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.084923][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.085028][T14380] bridge_slave_1: entered allmulticast mode [ 209.086012][T14380] bridge_slave_1: entered promiscuous mode [ 209.397072][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.429308][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.435669][ T13] bond0 (unregistering): Released all slaves [ 209.442165][T14380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.450896][T14380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.500554][T14380] team0: Port device team_slave_0 added [ 209.528126][T14380] team0: Port device team_slave_1 added [ 209.585947][T14380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.585959][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.585972][T14380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.612860][ T44] audit: type=1400 audit(1789103346.776:2635): avc: denied { watch_mount } for pid=14426 comm="syz.2.2042" path="/32/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.623649][ T65] Bluetooth: hci3: Malformed HCI Event [ 209.660931][T14380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.660943][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.660957][T14380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.679322][ T44] audit: type=1400 audit(1789103346.846:2636): avc: denied { write } for pid=14431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.720550][T14380] hsr_slave_0: entered promiscuous mode [ 209.723644][T14380] hsr_slave_1: entered promiscuous mode [ 209.790097][ T44] audit: type=1400 audit(1789103346.956:2637): avc: denied { write } for pid=14439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.860483][T14455] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 209.875045][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 209.899072][ T6243] hsr0: entered promiscuous mode [ 209.899313][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 210.035707][ T13] hsr_slave_0: left promiscuous mode [ 210.036394][ T13] hsr_slave_1: left promiscuous mode [ 210.036988][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.037005][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.039397][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.039408][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.048223][ T44] audit: type=1400 audit(1789103347.216:2638): avc: denied { mount } for pid=14463 comm="syz.5.2046" name="/" dev="pstore" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 210.050061][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2046'. [ 210.050079][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2046'. [ 210.086480][ T13] veth1_macvtap: left promiscuous mode [ 210.086529][ T13] veth0_macvtap: left promiscuous mode [ 210.086700][ T13] veth1_vlan: left promiscuous mode [ 210.086736][ T13] veth0_vlan: left promiscuous mode [ 210.194986][ T65] Bluetooth: hci0: command tx timeout [ 210.284367][ T13] team0 (unregistering): Port device team_slave_1 removed [ 210.630372][T14485] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2052'. [ 210.798873][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 210.811312][ T13] IPVS: stop unused estimator thread 0... [ 211.023335][T14512] netlink: 'syz.3.2060': attribute type 10 has an invalid length. [ 211.044334][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 211.047891][T14514] netlink: 'syz.2.2059': attribute type 1 has an invalid length. [ 211.056803][T14514] tmpfs: Unknown parameter 'usrquota(p' [ 211.117340][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 211.117354][ T44] audit: type=1400 audit(1789103348.286:2648): avc: denied { write } for pid=14518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.138142][T14512] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 211.138154][T14512] device-mapper: raid: Choosing default region size of 4MiB [ 211.167034][ T44] audit: type=1400 audit(1789103348.336:2649): avc: denied { write } for pid=14522 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.219071][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 211.342682][T14380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.348449][T14380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.349001][T14380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.350703][T14380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.351226][T14380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.356754][T14380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.357163][T14380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.365483][T14380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.387862][ T44] audit: type=1400 audit(1789103348.556:2650): avc: denied { write } for pid=14531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.454120][ T44] audit: type=1400 audit(1789103348.616:2651): avc: denied { write } for pid=14545 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.460794][T14380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.470550][T14380] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.478315][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.478364][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.492324][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.492370][ T7826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.517296][T14512] device-mapper: table: 248:2: raid: Component device(s) too small (-EINVAL) [ 211.517314][T14512] device-mapper: ioctl: error adding target to table [ 211.585506][ T44] audit: type=1400 audit(1789103348.756:2652): avc: denied { write } for pid=14548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.687509][ T44] audit: type=1400 audit(1789103348.856:2653): avc: denied { write } for pid=14554 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.806490][ T44] audit: type=1400 audit(1789103348.976:2654): avc: denied { write } for pid=14564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.915982][ T44] audit: type=1400 audit(1789103349.086:2655): avc: denied { write } for pid=14569 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.961847][T14380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.075034][ T44] audit: type=1400 audit(1789103349.236:2656): avc: denied { write } for pid=14580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.100979][ T44] audit: type=1400 audit(1789103349.266:2657): avc: denied { ioctl } for pid=14586 comm="syz.2.2067" path="socket:[66280]" dev="sockfs" ino=66280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 212.210198][T14380] veth0_vlan: entered promiscuous mode [ 212.224214][T14380] veth1_vlan: entered promiscuous mode [ 212.243482][T14600] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 212.247376][T14605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14605 comm=syz.2.2069 [ 212.264922][ T65] Bluetooth: hci0: command tx timeout [ 212.285238][T14600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.297412][T14601] bond1: (slave veth0_to_bond): making interface the new active one [ 212.300900][T14601] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 212.308478][T14605] macvlan2: entered promiscuous mode [ 212.308491][T14605] macvlan2: entered allmulticast mode [ 212.308744][T14605] bond1: entered promiscuous mode [ 212.308752][T14605] veth0_to_bond: entered promiscuous mode [ 212.309204][T14605] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.309457][T14605] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 212.309560][T14605] bond1: left promiscuous mode [ 212.309568][T14605] veth0_to_bond: left promiscuous mode [ 212.393711][T14380] veth0_macvtap: entered promiscuous mode [ 212.404982][T14380] veth1_macvtap: entered promiscuous mode [ 212.427190][T14380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.433284][T14380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.445116][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.445232][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.445258][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.531071][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531092][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531103][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531114][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531125][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531136][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.531146][T14615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14615 comm=syz.2.2071 [ 212.557949][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.643827][ T7851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.643842][ T7851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.670610][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.670624][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.808639][T14631] lo speed is unknown, defaulting to 1000 [ 212.894501][T14635] overlay: ./file0 is not a directory [ 213.054462][T14648] : Can't lookup blockdev [ 213.073433][T14631] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 213.317156][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 213.317170][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 213.317184][T14675] netlink: 'syz.2.2080': attribute type 19 has an invalid length. [ 213.339813][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 213.340284][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 213.367551][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.367578][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.367596][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.367616][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.474319][T14695] lo speed is unknown, defaulting to 1000 [ 213.482105][T14700] sctp: [Deprecated]: syz.4.2086 (pid 14700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.482105][T14700] Use struct sctp_sack_info instead [ 213.500202][T14700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2086'. [ 213.631333][T14705] xt_bpf: check failed: parse error [ 213.645881][T14714] fuse: Unknown parameter 'grd' [ 213.941646][T14730] binder: BINDER_SET_CONTEXT_MGR already set [ 213.941655][T14730] binder: 14729:14730 ioctl 4018620d 200000000080 returned -16 [ 214.345135][ T65] Bluetooth: hci0: command tx timeout [ 214.582928][T14776] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 214.582953][T14776] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 214.656238][T14788] Bluetooth: MGMT ver 1.23 [ 214.779802][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 214.779824][T14799] netlink: 'syz.5.2103': attribute type 13 has an invalid length. [ 214.779832][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 214.816466][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 214.816502][T14799] netlink: 'syz.5.2103': attribute type 13 has an invalid length. [ 214.816509][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 214.830733][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.830803][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.830822][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.830840][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.002961][T14822] loop8: detected capacity change from 0 to 16384 [ 215.050226][T14826] netlink: 'syz.3.2108': attribute type 12 has an invalid length. [ 215.303712][T14846] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 215.335516][T14846] bond2: entered promiscuous mode [ 215.335717][T14846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.348207][T14846] ipvlan2: entered allmulticast mode [ 215.348221][T14846] bond2: entered allmulticast mode [ 215.377607][T14846] bond2: (slave bridge1): making interface the new active one [ 215.377622][T14846] bridge1: entered promiscuous mode [ 215.377702][T14846] bridge1: entered allmulticast mode [ 215.379736][T14846] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 215.415637][T14829] loop8: detected capacity change from 16384 to 16383 [ 215.438585][T14851] fuse: Unknown parameter '' [ 215.632215][T14863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14863 comm=syz.3.2115 [ 215.632344][T14863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14863 comm=syz.3.2115 [ 216.235662][T14907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2123'. [ 216.360137][T14912] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 216.424969][ T65] Bluetooth: hci0: command tx timeout [ 216.560984][ T9946] Bluetooth: hci4: Frame reassembly failed (-84) [ 217.127415][ T44] kauditd_printk_skb: 84 callbacks suppressed [ 217.127428][ T44] audit: type=1400 audit(1789103354.296:2742): avc: denied { connect } for pid=14931 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.136713][T14932] usb usb7: usbfs: process 14932 (syz.2.2132) did not claim interface 0 before use [ 217.227370][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.227535][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.227660][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.230131][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.230369][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.230494][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.230688][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.230800][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232535][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232572][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232607][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232686][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232725][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232761][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232796][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232832][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232868][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232903][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.232963][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233002][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233037][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233073][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233108][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233145][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233180][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233216][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233253][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233290][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233326][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233361][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233395][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233433][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.233470][T14938] program syz.2.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.310763][T14943] sg_read: process 191 (syz.5.2134) changed security contexts after opening file descriptor, this is not allowed. [ 217.379737][T14935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.455365][T14948] binder: BINDER_SET_CONTEXT_MGR already set [ 217.455375][T14948] binder: 14946:14948 ioctl 4018620d 2000000002c0 returned -16 [ 217.511608][T14947] binder: 14946:14947 ioctl c0306201 200000000280 returned -14 [ 218.071231][T14968] fuse: Unknown parameter '000000000000000000000060x0000000000000003' [ 218.283728][ T44] audit: type=1400 audit(1789103355.446:2743): avc: denied { mounton } for pid=14972 comm="syz.2.2143" path="/bus" dev="hugetlbfs" ino=69812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 218.301786][T14973] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 218.301803][T14973] overlayfs: failed to set xattr on upper [ 218.301808][T14973] overlayfs: ...falling back to redirect_dir=nofollow. [ 218.301813][T14973] overlayfs: ...falling back to index=off. [ 218.301817][T14973] overlayfs: ...falling back to uuid=null. [ 218.301828][T14973] overlayfs: maximum fs stacking depth exceeded [ 218.507501][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.545614][T14983] macsec1: entered allmulticast mode [ 218.545634][T14983] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 218.545738][T14983] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 218.546308][T14983] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 218.745102][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.745491][T14914] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 218.745506][T14914] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 218.831686][T15002] netlink: 'syz.3.2151': attribute type 2 has an invalid length. [ 218.831700][T15002] netlink: 'syz.3.2151': attribute type 7 has an invalid length. [ 219.332502][T14914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.332520][T14914] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 219.363779][T14914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.364868][T14914] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 219.472820][ T44] audit: type=1800 audit(1789103356.636:2744): pid=15006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2152" name="/" dev="fuse" ino=1 res=0 errno=0 [ 219.576370][T14914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.576385][T14914] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 219.600974][T15008] __nla_validate_parse: 4 callbacks suppressed [ 219.600989][T15008] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2153'. [ 219.607386][T15009] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2153'. [ 219.856321][T14984] kexec: Could not allocate control_code_buffer [ 220.264646][T15037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.354816][ T44] audit: type=1400 audit(1789103357.516:2745): avc: denied { append } for pid=15045 comm="syz.5.2162" name="mouse1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.407625][T15047] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 220.566708][T15051] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 220.863087][ T44] audit: type=1400 audit(1789103358.026:2746): avc: denied { bind } for pid=15065 comm="syz.2.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.114840][ T5880] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 221.265013][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 221.275766][ T5880] usb 10-1: unable to get BOS descriptor or descriptor too short [ 221.275804][ T5880] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 221.282148][ T5880] usb 10-1: string descriptor 0 read error: -22 [ 221.282242][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.294722][ T5880] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 221.294755][ T5880] dw2102: su3000_power_ctrl: 1, initialized 0 [ 221.294770][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 221.336807][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.341740][ T5880] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 221.341784][ T5880] usb 10-1: media controller created [ 221.341805][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341816][ T5880] dw2102: i2c transfer failed. [ 221.341826][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341836][ T5880] dw2102: i2c transfer failed. [ 221.341846][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341856][ T5880] dw2102: i2c transfer failed. [ 221.341865][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341874][ T5880] dw2102: i2c transfer failed. [ 221.341884][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341894][ T5880] dw2102: i2c transfer failed. [ 221.341903][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 221.341914][ T5880] dw2102: i2c transfer failed. [ 221.341920][ T5880] dvb-usb: MAC address: 02:02:02:02:02:02 [ 221.368737][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.410415][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 221.410433][ T5880] dw2102: command 0x0e transfer failed. [ 221.410440][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 221.410450][ T5880] dw2102: command 0x0e transfer failed. [ 221.495083][T15059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.495408][T15059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.651495][T15098] lo speed is unknown, defaulting to 1000 [ 221.683869][T15100] syzkaller0: entered promiscuous mode [ 221.683884][T15100] syzkaller0: entered allmulticast mode [ 221.714631][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 221.714645][ T5880] dw2102: command 0x0e transfer failed. [ 221.714649][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 221.714656][ T5880] dw2102: command 0x0e transfer failed. [ 221.714660][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 221.714667][ T5880] dw2102: command 0x51 transfer failed. [ 221.714753][T15059] dvb-usb: bulk message failed: -22 (5/0) [ 221.714763][T15059] dw2102: i2c transfer failed. [ 221.794991][ T5880] DVB: Unable to find symbol ds3000_attach() [ 221.795002][ T5880] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 221.834621][ T5880] rc_core: IR keymap rc-su3000 not found [ 221.834632][ T5880] Registered IR keymap rc-empty [ 221.838400][ T5880] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 221.839262][ T5880] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input30 [ 221.842952][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 221.842965][ T5880] dw2102: su3000_power_ctrl: 0, initialized 1 [ 221.842972][ T5880] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 221.848793][ T5880] usb 10-1: USB disconnect, device number 8 [ 221.870266][ T44] audit: type=1400 audit(1789103359.036:2747): avc: denied { write } for pid=15104 comm="syz.3.2174" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.873719][ T44] audit: type=1400 audit(1789103359.036:2748): avc: denied { write } for pid=15104 comm="syz.3.2174" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.886347][T15107] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 222.192628][ T5880] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 222.472151][T15127] hpfs: hpfs_map_sector(): read error [ 222.901198][T15143] netlink: 'syz.3.2179': attribute type 3 has an invalid length. [ 222.901212][T15143] netlink: 'syz.3.2179': attribute type 6 has an invalid length. [ 222.901219][T15143] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2179'. [ 222.955397][T15147] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2183'. [ 223.135798][T15164] 9p: Unknown uid 00000000004294967295 [ 223.151442][ T44] audit: type=1400 audit(1789103360.316:2749): avc: denied { write } for pid=15157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.207200][ T44] audit: type=1400 audit(1789103360.376:2750): avc: denied { write } for pid=15171 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.282682][T15175] selinux_netlink_send: 2146 callbacks suppressed [ 223.282696][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.282769][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.282819][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.282865][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.282912][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.282957][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.283007][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.283053][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.287794][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.287853][T15175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=15175 comm=syz.5.2188 [ 223.300429][ T44] audit: type=1400 audit(1789103360.466:2751): avc: denied { write } for pid=15170 comm="syz.4.2187" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.310597][ T44] audit: type=1400 audit(1789103360.476:2752): avc: denied { write } for pid=15170 comm="syz.4.2187" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.316821][T15179] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 223.349049][ T1039] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 223.349115][ T1039] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 223.349135][ T1039] hid-generic 0006:0008:0008.0008: unknown main item tag 0x2 [ 223.349154][ T1039] hid-generic 0006:0008:0008.0008: unknown main item tag 0x1 [ 223.368941][ T1039] hid-generic 0006:0008:0008.0008: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 223.789144][T15178] cgroup: fork rejected by pids controller in /syz5 [ 223.868585][T15230] openvswitch: netlink: IPv6 tunnel dst address is zero [ 223.903775][T15234] xt_cgroup: path and classid specified [ 223.993789][ T44] audit: type=1800 audit(1789103361.156:2753): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2198" name="nullb0" dev="tmpfs" ino=893 res=0 errno=0 [ 224.194382][T15263] bond4: option downdelay: invalid value (18446744073709551615) [ 224.194398][T15263] bond4: option downdelay: allowed values 0 - 2147483647 [ 224.209103][ T44] audit: type=1400 audit(1789103361.376:2754): avc: denied { write } for pid=15256 comm="syz.4.2201" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.213496][T15264] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 224.262188][T15263] bond4 (unregistering): Released all slaves [ 224.319487][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2205'. [ 224.319521][T15270] netlink: 'syz.5.2205': attribute type 30 has an invalid length. [ 224.674216][T15285] input: syz0 as /devices/virtual/input/input31 [ 224.794826][ T5731] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 224.954793][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 224.955442][ T5731] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.959346][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.959385][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.980136][ T5731] usb 7-1: config 0 descriptor?? [ 225.173715][T13831] syz_tun (unregistering): left allmulticast mode [ 225.183458][ T5731] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 225.195831][ T44] audit: type=1800 audit(1789103362.366:2755): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2216" name="nullb0" dev="tmpfs" ino=893 res=0 errno=0 [ 225.418951][ T5731] usb 7-1: USB disconnect, device number 5 [ 225.572371][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.573761][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.578789][ T5730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.582197][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.582728][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.672794][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.677350][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.685699][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.688648][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.692393][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.761458][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.761482][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.776746][T15325] netlink: zone id is out of range [ 225.776757][T15325] netlink: get zone limit has 8 unknown bytes [ 225.836991][T15327] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 225.917408][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2225'. [ 225.982676][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.982710][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.143103][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.143125][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.157429][T15317] lo speed is unknown, defaulting to 1000 [ 226.209759][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 226.224089][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.224112][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.444456][T15317] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.444672][T15317] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.444784][T15317] bridge_slave_0: entered allmulticast mode [ 226.446564][T15317] bridge_slave_0: entered promiscuous mode [ 226.451370][T15317] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.451462][T15317] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.451550][T15317] bridge_slave_1: entered allmulticast mode [ 226.452652][T15317] bridge_slave_1: entered promiscuous mode [ 226.473782][T15317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.493683][ T13] bridge_slave_1: left allmulticast mode [ 226.494363][ T13] bridge_slave_1: left promiscuous mode [ 226.495743][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.509783][ T13] bridge_slave_0: left allmulticast mode [ 226.509810][ T13] bridge_slave_0: left promiscuous mode [ 226.510072][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.648755][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.650644][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.653796][ T13] bond0 (unregistering): Released all slaves [ 226.664011][T15317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.716389][T15317] team0: Port device team_slave_0 added [ 226.718728][T15317] team0: Port device team_slave_1 added [ 226.739034][T15317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.739047][T15317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.739061][T15317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.803314][T15317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.803325][T15317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.803339][T15317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.927107][T15317] hsr_slave_0: entered promiscuous mode [ 226.931783][T15317] hsr_slave_1: entered promiscuous mode [ 226.938356][T15317] debugfs: 'hsr0' already exists in 'hsr' [ 226.938375][T15317] Cannot create hsr debugfs directory [ 226.987409][T15363] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 226.987447][T15363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.987470][T15363] IPv6: NLM_F_CREATE should be set when creating new route [ 226.989110][T15363] IPv6: NLM_F_CREATE should be set when creating new route [ 227.018116][ T44] audit: type=1400 audit(1789103364.186:2756): avc: denied { write } for pid=15370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.086214][ T44] audit: type=1400 audit(1789103364.256:2757): avc: denied { write } for pid=15374 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.104507][ T13] hsr_slave_0: left promiscuous mode [ 227.113450][ T13] hsr_slave_1: left promiscuous mode [ 227.117645][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.117666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.118605][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.118622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.147774][ T13] veth1_macvtap: left promiscuous mode [ 227.147813][ T13] veth0_macvtap: left promiscuous mode [ 227.147959][ T13] veth1_vlan: left promiscuous mode [ 227.148018][ T13] veth0_vlan: left promiscuous mode [ 227.244959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.254959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.285333][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.289343][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.300855][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.302130][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.311982][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.344958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.364950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.425594][T15394] 9p: Could not find request transport: vartio [ 227.465017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.548781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 227.564991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.566818][ T13] team0 (unregistering): Port device team_slave_0 removed [ 227.574951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.634610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.664600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.685057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.705622][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 227.784671][ T65] Bluetooth: hci1: command tx timeout [ 227.901302][T15395] cgroup: fork rejected by pids controller in /syz2 [ 227.938756][T15430] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 227.984060][ T44] audit: type=1400 audit(1789103365.146:2758): avc: denied { write } for pid=15427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.043468][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.053586][T15430] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 228.198251][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 228.258513][T15387] lo speed is unknown, defaulting to 1000 [ 228.318181][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 228.318199][ T44] audit: type=1400 audit(1789103365.486:2760): avc: denied { write } for pid=15444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.348915][T15317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.350831][T15317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.353953][T15317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.357000][T15317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.370207][T15317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.372696][T15317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.373216][T15317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.377816][T15317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.433423][ T44] audit: type=1400 audit(1789103365.596:2761): avc: denied { write } for pid=15454 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.477952][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.646052][ T44] audit: type=1400 audit(1789103365.816:2762): avc: denied { write } for pid=15461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.649484][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.715898][T15317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.751096][ T44] audit: type=1400 audit(1789103365.916:2763): avc: denied { write } for pid=15468 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.787753][T15317] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.816238][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.848413][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.848503][T15092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.873697][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.873743][T15092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.915390][T15387] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.915486][T15387] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.915675][T15387] bridge_slave_0: entered allmulticast mode [ 228.916695][T15387] bridge_slave_0: entered promiscuous mode [ 228.929484][T15387] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.929543][T15387] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.929724][T15387] bridge_slave_1: entered allmulticast mode [ 228.930501][T15387] bridge_slave_1: entered promiscuous mode [ 228.952196][T15387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.955805][T15387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.025160][ T44] audit: type=1400 audit(1789103366.186:2764): avc: denied { write } for pid=15478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.089289][ T44] audit: type=1400 audit(1789103366.256:2765): avc: denied { write } for pid=15481 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.168202][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.209679][T15387] team0: Port device team_slave_0 added [ 229.211850][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 229.219984][T15387] team0: Port device team_slave_1 added [ 229.233521][T15387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.233533][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.233546][T15387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.237013][T15387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.237023][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.237036][T15387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.262967][T15387] hsr_slave_0: entered promiscuous mode [ 229.263738][T15387] hsr_slave_1: entered promiscuous mode [ 229.264147][T15387] debugfs: 'hsr0' already exists in 'hsr' [ 229.264165][T15387] Cannot create hsr debugfs directory [ 229.387666][ T65] Bluetooth: hci0: command tx timeout [ 229.443557][ T44] audit: type=1400 audit(1789103366.606:2766): avc: denied { write } for pid=15494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.572627][ T44] audit: type=1400 audit(1789103366.736:2767): avc: denied { write } for pid=15508 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.588581][T15511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 229.712865][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 229.748415][T15520] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.749703][T15520] bond4 (unregistering): Released all slaves [ 229.778855][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 229.778875][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2253'. [ 229.801440][T15526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.845103][ T44] audit: type=1400 audit(1789103367.006:2768): avc: denied { write } for pid=15529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.865254][ T65] Bluetooth: hci1: command tx timeout [ 229.958695][ T44] audit: type=1400 audit(1789103367.126:2769): avc: denied { write } for pid=15537 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.009376][T15317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.023464][T15540] team0: Port device dummy0 removed [ 230.026561][T15540] bridge_slave_0: left allmulticast mode [ 230.026582][T15540] bridge_slave_0: left promiscuous mode [ 230.026774][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.040166][T15540] bridge_slave_1: left allmulticast mode [ 230.040189][T15540] bridge_slave_1: left promiscuous mode [ 230.040349][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.054973][T15540] bond1: (slave veth0_to_bond): Releasing active interface [ 230.059624][T15540] bond0: (slave bond_slave_0): Releasing backup interface [ 230.062826][T15540] bond0: (slave bond_slave_1): Releasing backup interface [ 230.072377][T15540] team0: Port device team_slave_0 removed [ 230.077330][T15540] team0: Port device team_slave_1 removed [ 230.077701][T15540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.077711][T15540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.079277][T15540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.079288][T15540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.192861][ T13] bridge_slave_1: left allmulticast mode [ 230.192895][ T13] bridge_slave_1: left promiscuous mode [ 230.193004][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.195220][ T13] bridge_slave_0: left allmulticast mode [ 230.195232][ T13] bridge_slave_0: left promiscuous mode [ 230.195323][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.317737][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.319247][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.320126][ T13] bond0 (unregistering): Released all slaves [ 230.366350][T15317] veth0_vlan: entered promiscuous mode [ 230.379791][T15317] veth1_vlan: entered promiscuous mode [ 230.402444][T15552] netlink: 'syz.2.2257': attribute type 3 has an invalid length. [ 230.402467][T15552] netlink: 'syz.2.2257': attribute type 3 has an invalid length. [ 230.403364][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 230.461378][T15317] veth0_macvtap: entered promiscuous mode [ 230.466648][T15317] veth1_macvtap: entered promiscuous mode [ 230.489402][T15317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.503597][T15317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.544833][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.545472][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.545686][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.545875][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.640004][ T5443] 8021q: adding VLAN 0 to HW filter on device eth25 [ 230.706312][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.706333][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.715316][T15564] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 230.743479][ T7853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.743499][ T7853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.965665][ T13] hsr_slave_0: left promiscuous mode [ 230.966772][ T13] hsr_slave_1: left promiscuous mode [ 230.967448][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.967466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.968932][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.968949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.999938][ T13] veth1_macvtap: left promiscuous mode [ 230.999961][ T13] veth0_macvtap: left promiscuous mode [ 231.000007][ T13] veth1_vlan: left promiscuous mode [ 231.000041][ T13] veth0_vlan: left promiscuous mode [ 231.189148][ T13] team0 (unregistering): Port device team_slave_1 removed [ 231.194415][ T13] team0 (unregistering): Port device team_slave_0 removed [ 231.295195][ T5443] 8021q: adding VLAN 0 to HW filter on device eth26 [ 231.464721][ T65] Bluetooth: hci0: command tx timeout [ 231.953095][ T65] Bluetooth: hci1: command tx timeout [ 232.119667][T15387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.122367][T15387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.122907][T15387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.124501][T15387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.125391][T15387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.128214][T15387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.129428][T15387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.131953][T15387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.180112][T15387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.186951][T15387] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.189653][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.189700][ T7851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.193159][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.193238][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.226257][T15387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.254680][T15620] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 232.340839][T15672] kvm [15670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 232.341458][T15672] kvm [15670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 232.405368][T15620] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 232.406231][T15620] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.406256][T15620] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.406267][T15620] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.406278][T15620] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.408057][T15620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.408069][T15620] usb 6-1: Product: syz [ 232.408077][T15620] usb 6-1: Manufacturer: syz [ 232.408084][T15620] usb 6-1: SerialNumber: syz [ 232.460526][ T5443] 8021q: adding VLAN 0 to HW filter on device eth20 [ 232.467320][T15387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.487880][T15387] veth0_vlan: entered promiscuous mode [ 232.494810][T15387] veth1_vlan: entered promiscuous mode [ 232.527207][T15387] veth0_macvtap: entered promiscuous mode [ 232.540905][T15387] veth1_macvtap: entered promiscuous mode [ 232.561515][T15387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.570902][T15387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.620526][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.620553][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.620571][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.620589][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.628711][T15620] usb 6-1: usb_control_msg returned -71 [ 232.628747][T15620] usbtmc 6-1:1.0: can't read capabilities [ 232.660938][T15620] usb 6-1: USB disconnect, device number 20 [ 232.689658][ T7853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.689676][ T7853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.732957][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.732980][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.750275][T15707] netlink: 'syz.3.2282': attribute type 7 has an invalid length. [ 232.779570][ T5443] 8021q: adding VLAN 0 to HW filter on device eth27 [ 232.807357][T15714] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 232.808005][T15714] syz_tun: entered promiscuous mode [ 232.813073][T15714] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 233.124771][T15620] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 233.124907][ T9926] IPVS: starting estimator thread 0... [ 233.234711][T15747] IPVS: using max 28 ests per chain, 67200 per kthread [ 233.276678][T15620] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 233.277682][T15620] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.277725][T15620] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.277743][T15620] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 233.277763][T15620] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.279854][T15620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.279873][T15620] usb 6-1: Product: syz [ 233.279886][T15620] usb 6-1: Manufacturer: syz [ 233.279897][T15620] usb 6-1: SerialNumber: syz [ 233.382415][ T44] kauditd_printk_skb: 33 callbacks suppressed [ 233.382433][ T44] audit: type=1400 audit(1789103370.546:2803): avc: denied { write } for pid=15758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.439362][T15765] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 233.469082][ T44] audit: type=1400 audit(1789103370.636:2804): avc: denied { write } for pid=15764 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.493884][T15769] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 233.493904][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 233.526204][T15620] usb 6-1: usb_control_msg returned -32 [ 233.526246][T15620] usbtmc 6-1:1.0: can't read capabilities [ 233.547221][ T65] Bluetooth: hci0: command tx timeout [ 233.592681][ T44] audit: type=1400 audit(1789103370.756:2805): avc: denied { write } for pid=15770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.633061][T15789] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 233.639114][ T12] bond0: (slave bond_slave_0): interface is now down [ 233.639129][ T12] bond0: (slave bond_slave_1): interface is now down [ 233.639137][ T12] bond0: (slave netdevsim1): interface is now down [ 233.639144][ T12] bond0: (slave syz_tun): interface is now down [ 233.661821][ T12] bond0: now running without any active interface! [ 233.675309][ T44] audit: type=1400 audit(1789103370.846:2806): avc: denied { write } for pid=15790 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.731934][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 233.760035][ T44] audit: type=1400 audit(1789103370.926:2807): avc: denied { write } for pid=15803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.817982][T15813] macsec1: entered promiscuous mode [ 233.818003][T15813] macsec1: entered allmulticast mode [ 233.819743][T15813] team0: entered allmulticast mode [ 233.819755][T15813] team_slave_0: entered allmulticast mode [ 233.819809][T15813] team_slave_1: entered allmulticast mode [ 233.819820][T15813] dummy0: entered allmulticast mode [ 233.840545][ T44] audit: type=1400 audit(1789103371.006:2808): avc: denied { write } for pid=15814 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.938857][ T44] audit: type=1400 audit(1789103371.106:2809): avc: denied { write } for pid=15820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.941013][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 233.941027][T15826] openvswitch: netlink: Flow key attr not present in new flow. [ 233.978274][T15830] ip6t_hbh: Not strict - not implemented [ 234.015147][T15838] overlayfs: failed to clone upperpath [ 234.021516][ T44] audit: type=1400 audit(1789103371.186:2810): avc: denied { write } for pid=15836 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.024994][ T65] Bluetooth: hci1: command tx timeout [ 234.079352][T15845] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 234.130739][ T44] audit: type=1400 audit(1789103371.296:2811): avc: denied { write } for pid=15846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.209394][ T44] audit: type=1400 audit(1789103371.376:2812): avc: denied { write } for pid=15855 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.298299][T15857] usbtmc 6-1:1.0: usb_control_msg returned -32 [ 234.501955][T15620] usb 6-1: USB disconnect, device number 21 [ 235.078526][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'. [ 235.078549][T15903] netlink: 'syz.3.2321': attribute type 7 has an invalid length. [ 235.078557][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 235.453476][T15932] binder: 15930:15932 ioctl c0306201 200000000080 returned -14 [ 235.458486][T15932] binder: 15930:15932 ioctl c0306201 2000000003c0 returned -14 [ 235.625786][ T65] Bluetooth: hci0: command tx timeout [ 236.523760][T15967] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2341'. [ 236.594446][T15976] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 236.678876][T15983] tmpfs: Unknown parameter 'm}ol' [ 236.747338][T15992] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.076284][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2356'. [ 237.406517][T16041] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 237.531826][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 237.531848][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 237.538021][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 237.564799][T11247] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.564861][T11247] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.564892][T11247] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.564922][T11247] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.657334][T16067] MTD: Couldn't look up './dev/mtdblock0': -2 [ 237.849798][T16081] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.936403][T16089] xt_CT: No such helper "pptp" [ 238.305404][T16114] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.311769][T16117] netlink: 'syz.3.2390': attribute type 12 has an invalid length. [ 238.384652][ T5731] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 238.534808][ T5731] usb 6-1: Using ep0 maxpacket: 16 [ 238.537784][ T5731] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.538906][ T5731] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 238.538928][ T5731] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 238.538947][ T5731] usb 6-1: config 1 interface 0 has no altsetting 0 [ 238.542428][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.542447][ T5731] usb 6-1: Product: syz [ 238.542459][ T5731] usb 6-1: Manufacturer: syz [ 238.542471][ T5731] usb 6-1: SerialNumber: syz [ 238.579986][T16107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.580128][T16107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.583587][T16141] 9p: Could not find request transport: vitio [ 238.584310][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 238.584320][ T44] audit: type=1400 audit(1789103375.746:2818): avc: denied { write } for pid=16140 comm="syz.0.2398" name="functions" dev="configfs" ino=14396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.586590][ T44] audit: type=1400 audit(1789103375.756:2819): avc: denied { write } for pid=16140 comm="syz.0.2398" name="c.1" dev="configfs" ino=40120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.587507][ T44] audit: type=1400 audit(1789103375.756:2820): avc: denied { create } for pid=16140 comm="syz.0.2398" name="Loopback.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 238.589732][ T44] audit: type=1400 audit(1789103375.756:2821): avc: denied { write } for pid=16140 comm="syz.0.2398" name="c.1" dev="configfs" ino=40120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.660098][T16148] fuse: fd is not a fuse device [ 238.788600][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.788922][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.798073][T16107] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 238.823426][ T44] audit: type=1400 audit(1789103375.986:2822): avc: denied { associate } for pid=16168 comm="syz.1.2386" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 238.875501][T16107] SELinux: ebitmap: truncated map [ 238.875747][T16107] SELinux: invalid class [ 238.879920][T16107] SELinux: failed to load policy [ 238.895015][ T5731] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 238.907902][ T5731] usb 6-1: USB disconnect, device number 22 [ 238.920714][T16171] batadv_slave_0: Caught tx_queue_len zero misconfig [ 238.999580][T16180] selinux_netlink_send: 24 callbacks suppressed [ 238.999593][T16180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16180 comm=syz.3.2415 [ 239.000627][T16191] input: syz1 as /devices/virtual/input/input32 [ 239.042478][ T44] audit: type=1400 audit(1789103376.206:2823): avc: denied { shutdown } for pid=16189 comm="syz.0.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.219911][T16202] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.273986][T16208] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 239.310095][T16208] bond2: option mode: invalid value (7) [ 239.311524][T16208] bond2 (unregistering): Released all slaves [ 239.498701][T16232] fuse: Bad value for 'rootmode' [ 239.509947][T16232] __nla_validate_parse: 4 callbacks suppressed [ 239.509963][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'. [ 239.509981][T16232] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 239.540420][ T5824] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 239.599892][T16237] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.678633][ T44] audit: type=1400 audit(1789103376.846:2824): avc: denied { write } for pid=16243 comm="syz.2.2435" name="functions" dev="configfs" ino=14396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.690457][ T44] audit: type=1400 audit(1789103376.856:2825): avc: denied { write } for pid=16243 comm="syz.2.2435" name="functions" dev="configfs" ino=14396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.691722][T16244] printk: legacy console [ttyGS0] disabled [ 239.705208][ T5824] usb 5-1: New USB device found, idVendor=0000, idProduct=a715, bcdDevice=f8.4c [ 239.705232][ T5824] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 239.705684][ T5824] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 239.705700][ T5824] usb 5-1: can't read configurations, error -22 [ 239.707813][T16244] netlink: 'syz.2.2435': attribute type 21 has an invalid length. [ 239.844683][ T5824] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 239.887635][T16259] bridge0: port 3(syz_tun) entered blocking state [ 239.887767][T16259] bridge0: port 3(syz_tun) entered disabled state [ 239.887901][T16259] syz_tun: entered allmulticast mode [ 239.889376][T16259] syz_tun: entered promiscuous mode [ 239.889882][T16259] bridge0: port 3(syz_tun) entered blocking state [ 239.889953][T16259] bridge0: port 3(syz_tun) entered forwarding state [ 239.908176][T16259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.015987][ T5824] usb 5-1: New USB device found, idVendor=0000, idProduct=a715, bcdDevice=f8.4c [ 240.016023][ T5824] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 240.016640][ T5824] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 240.016668][ T5824] usb 5-1: can't read configurations, error -22 [ 240.017022][ T5824] usb usb5-port1: attempt power cycle [ 240.085932][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 240.128138][T16271] Invalid logical block size (1048576) [ 240.185321][ T44] audit: type=1400 audit(1789103377.346:2826): avc: denied { relabelfrom } for pid=16270 comm="syz.2.2445" name="SCTPv6" dev="sockfs" ino=74667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.185501][T16276] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 240.185739][ T44] audit: type=1400 audit(1789103377.356:2827): avc: denied { relabelto } for pid=16270 comm="syz.2.2445" name="SCTPv6" dev="sockfs" ino=74667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0" [ 240.186701][T16276] bridge0: port 1(team0) entered blocking state [ 240.186772][T16276] bridge0: port 1(team0) entered disabled state [ 240.187210][T16276] team0: entered allmulticast mode [ 240.193415][T16276] team0: entered promiscuous mode [ 240.374850][ T5824] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 240.395808][ T5824] usb 5-1: New USB device found, idVendor=0000, idProduct=a715, bcdDevice=f8.4c [ 240.395841][ T5824] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 240.396324][ T5824] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 240.396347][ T5824] usb 5-1: can't read configurations, error -22 [ 240.534659][ T5824] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 240.566205][ T5824] usb 5-1: New USB device found, idVendor=0000, idProduct=a715, bcdDevice=f8.4c [ 240.566243][ T5824] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 240.566825][ T5824] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 240.566852][ T5824] usb 5-1: can't read configurations, error -22 [ 240.567146][ T5824] usb usb5-port1: unable to enumerate USB device [ 240.780707][T16299] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 240.887968][T16305] tipc: Started in network mode [ 240.887996][T16305] tipc: Node identity ac1414aa, cluster identity 4711 [ 240.888214][T16305] tipc: New replicast peer: 172.20.20.187 [ 240.890628][T16305] tipc: Enabled bearer , priority 10 [ 241.357171][T16337] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 241.426363][T16345] FAULT_INJECTION: forcing a failure. [ 241.426363][T16345] name failslab, interval 1, probability 0, space 0, times 0 [ 241.426387][T16345] CPU: 3 UID: 0 PID: 16345 Comm: syz.2.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.426405][T16345] Tainted: [L]=SOFTLOCKUP [ 241.426409][T16345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.426417][T16345] Call Trace: [ 241.426422][T16345] [ 241.426427][T16345] dump_stack_lvl+0x100/0x190 [ 241.426464][T16345] should_fail_ex.cold+0x5/0xa [ 241.426480][T16345] should_failslab+0xc2/0x120 [ 241.426499][T16345] __kmalloc_cache_noprof+0x91/0x6d0 [ 241.426516][T16345] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 241.426535][T16345] ? io_uring_alloc_task_context+0x1a3/0x656 [ 241.426552][T16345] io_uring_alloc_task_context+0x1a3/0x656 [ 241.426567][T16345] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 241.426583][T16345] ? alloc_file_pseudo+0x1ee/0x290 [ 241.426601][T16345] __io_uring_add_tctx_node.cold+0x15/0x20a [ 241.426614][T16345] ? security_inode_init_security_anon+0x7b/0x230 [ 241.426635][T16345] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 241.426653][T16345] ? __anon_inode_getfile+0x17c/0x280 [ 241.426666][T16345] io_uring_setup.cold+0x1a10/0x1cde [ 241.426680][T16345] ? __pfx_io_uring_setup+0x10/0x10 [ 241.426692][T16345] ? find_held_lock+0x2b/0x80 [ 241.426717][T16345] ? __pfx___x64_sys_futex+0x10/0x10 [ 241.426732][T16345] ? ksys_write+0x1ac/0x250 [ 241.426742][T16345] ? __pfx_ksys_write+0x10/0x10 [ 241.426756][T16345] __x64_sys_io_uring_setup+0xc2/0x170 [ 241.426769][T16345] do_syscall_64+0x123/0x790 [ 241.426785][T16345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.426796][T16345] RIP: 0033:0x7f1fad99e159 [ 241.426806][T16345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.426818][T16345] RSP: 002b:00007f1fabbf5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 241.426830][T16345] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f1fad99e159 [ 241.426837][T16345] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000fab [ 241.426843][T16345] RBP: 00007f1fada3503b R08: 0000000000000000 R09: 0000000000000000 [ 241.426850][T16345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.426856][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd17c385e8 [ 241.426871][T16345] [ 241.607355][T16369] No such timeout policy "syz1" [ 241.735028][T16385] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 241.960487][T16401] macvtap1: entered allmulticast mode [ 241.960517][T16401] bond0: entered allmulticast mode [ 241.960531][T16401] bond_slave_0: entered allmulticast mode [ 241.960547][T16401] bond_slave_1: entered allmulticast mode [ 241.960641][T16401] bond_slave_0: entered promiscuous mode [ 241.960673][T16401] bond_slave_1: entered promiscuous mode [ 241.962921][T16401] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 241.964447][T16401] bond0: left allmulticast mode [ 241.964466][T16401] bond_slave_0: left allmulticast mode [ 241.964481][T16401] bond_slave_1: left allmulticast mode [ 241.986288][T15620] bond_slave_0: left promiscuous mode [ 241.986308][T15620] bond_slave_1: left promiscuous mode [ 242.004738][T15620] tipc: Node number set to 2886997162 [ 242.027011][T16404] ip_tables: iptables: counters copy to user failed while replacing table [ 242.383568][T16420] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 242.447718][T16430] Bluetooth: MGMT ver 1.23 [ 242.447750][T16430] Bluetooth: hci0: unsupported parameter 255 [ 242.447762][T16430] Bluetooth: hci0: unsupported parameter 255 [ 242.450511][T16430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2483'. [ 242.505698][T16434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.510920][T16434] batadv_slave_0: entered promiscuous mode [ 242.510936][T16434] batadv_slave_0: entered allmulticast mode [ 242.627531][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.627867][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.722070][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 242.722097][ T65] CPU: 2 UID: 0 PID: 65 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.722124][ T65] Tainted: [L]=SOFTLOCKUP [ 242.722132][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.722145][ T65] Workqueue: hci0 hci_rx_work [ 242.722178][ T65] Call Trace: [ 242.722185][ T65] [ 242.722193][ T65] dump_stack_lvl+0x100/0x190 [ 242.722225][ T65] sysfs_warn_dup.cold+0x1c/0x28 [ 242.722255][ T65] sysfs_create_dir_ns+0x24b/0x2b0 [ 242.722281][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 242.722303][ T65] ? find_held_lock+0x2b/0x80 [ 242.722327][ T65] ? kobject_add_internal+0x25f/0x930 [ 242.722354][ T65] ? kobject_add_internal+0x25f/0x930 [ 242.722385][ T65] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.722409][ T65] kobject_add_internal+0x2c8/0x930 [ 242.722442][ T65] kobject_add+0x16a/0x1e0 [ 242.722458][ T65] ? __pfx_kobject_add+0x10/0x10 [ 242.722475][ T65] ? class_to_subsys+0x10f/0x150 [ 242.722514][ T65] ? kobject_put+0xb9/0x640 [ 242.722540][ T65] ? _raw_spin_unlock+0x28/0x50 [ 242.722568][ T65] device_add+0x294/0x1970 [ 242.722592][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 242.722621][ T65] ? __pfx_device_add+0x10/0x10 [ 242.722645][ T65] ? mgmt_send_event_skb+0x2fb/0x460 [ 242.722674][ T65] hci_conn_add_sysfs+0x1a3/0x260 [ 242.722699][ T65] le_conn_complete_evt+0x122f/0x2130 [ 242.722726][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 242.722744][ T65] ? hci_event_packet+0x186/0xcd0 [ 242.722770][ T65] hci_le_conn_complete_evt+0x23c/0x3a0 [ 242.722791][ T65] ? skb_pull_data+0x15f/0x1e0 [ 242.722819][ T65] hci_le_meta_evt+0x34a/0x5f0 [ 242.722840][ T65] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 242.722864][ T65] hci_event_packet+0x51c/0xcd0 [ 242.722884][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 242.722905][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 242.722930][ T65] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.722957][ T65] hci_rx_work+0x451/0xfc0 [ 242.722981][ T65] process_one_work+0xac7/0x1b10 [ 242.723018][ T65] ? __pfx_process_one_work+0x10/0x10 [ 242.723045][ T65] ? lock_acquire+0x1d1/0x380 [ 242.723071][ T65] ? __pfx_hci_rx_work+0x10/0x10 [ 242.723092][ T65] worker_thread+0x5ef/0xe50 [ 242.723129][ T65] ? kthread+0x13a/0x450 [ 242.723151][ T65] ? __pfx_worker_thread+0x10/0x10 [ 242.723177][ T65] kthread+0x373/0x450 [ 242.723200][ T65] ? __pfx_kthread+0x10/0x10 [ 242.723225][ T65] ret_from_fork+0x730/0xd60 [ 242.723248][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 242.723268][ T65] ? __switch_to+0x800/0x10f0 [ 242.723290][ T65] ? __pfx_kthread+0x10/0x10 [ 242.723311][ T65] ret_from_fork_asm+0x1a/0x30 [ 242.723344][ T65] [ 242.723369][ T65] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.723396][ T65] Bluetooth: hci0: failed to register connection device [ 242.736460][ T5731] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 242.784777][T11291] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 242.906637][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 242.908276][ T5731] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 242.911587][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.911609][ T5731] usb 6-1: Product: syz [ 242.911621][ T5731] usb 6-1: Manufacturer: 㹕⺋먴鿾粒駑럿र〴멶䳝솝䴁䷄樦ꀍꖷ汵첳䞔钫䎹氾흆ᗌ짆㥓倠㵳檠躚泓淞㢁᜚恮淜㯳Ζ숽湹힘ꟺ๏쎮鶧냘拤肨롩莟캭⽀訴嗎뵆ﮏ䤂ص鈈知䪴ꑫ槷媱祎뱮솨隸頺礛⫗⫤Ḑ쟳ɪս㶞ᛴ홝뚑쎳ⵚ໚ᅋᾛ [ 242.911646][ T5731] usb 6-1: SerialNumber: syz [ 242.930005][T11291] usb 7-1: device descriptor read/64, error -71 [ 243.136445][ T5731] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 243.175596][T11291] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 243.202063][ T5731] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.209487][ T5731] usb 6-1: USB disconnect, device number 23 [ 243.237564][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.325026][T11291] usb 7-1: device descriptor read/64, error -71 [ 243.435937][T11291] usb usb7-port1: attempt power cycle [ 243.795042][T11291] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 243.816003][T11291] usb 7-1: device descriptor read/8, error -71 [ 243.846723][T16583] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 244.038922][T16605] hugetlbfs: Bad value '?G' for mount option 'size' [ 244.038922][T16605] [ 244.074912][T11291] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 244.106912][T11291] usb 7-1: device descriptor read/8, error -71 [ 244.159933][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 244.159946][ T44] audit: type=1400 audit(1789103381.326:2850): avc: denied { ioctl } for pid=16608 comm="syz.1.2506" path="/50/mnt_nfsd/portlist" dev="nfsd" ino=13 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 244.218175][T11291] usb usb7-port1: unable to enumerate USB device [ 244.440373][T16627] /dev/sr0: Can't open blockdev [ 244.541727][T16635] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 244.649093][ T44] audit: type=1400 audit(1789103381.816:2851): avc: denied { write } for pid=16643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.703888][ T44] audit: type=1400 audit(1789103381.866:2852): avc: denied { write } for pid=16653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.749185][ T9948] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 244.759698][ T44] audit: type=1400 audit(1789103381.926:2853): avc: denied { shutdown } for pid=16657 comm="syz.0.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.812113][T16663] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 245.014093][T16672] pim6reg1: entered promiscuous mode [ 245.014107][T16672] pim6reg1: entered allmulticast mode [ 245.019402][ T44] audit: type=1400 audit(1789103382.186:2854): avc: denied { write } for pid=16669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.025369][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'. [ 245.025399][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2521'. [ 245.034869][T16675] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2521'. [ 245.131815][ T44] audit: type=1400 audit(1789103382.296:2855): avc: denied { write } for pid=16682 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.368740][ T44] audit: type=1400 audit(1789103382.536:2856): avc: denied { write } for pid=16696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.440712][ T44] audit: type=1400 audit(1789103382.606:2857): avc: denied { write } for pid=16702 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.477041][T16708] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 245.652777][ T44] audit: type=1400 audit(1789103382.816:2858): avc: denied { ioctl } for pid=16715 comm="syz.1.2531" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.894847][ T5731] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 245.941253][T16725] fuse: Bad value for 'fd' [ 245.988673][T16727] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.034897][ T5731] usb 6-1: device descriptor read/64, error -71 [ 246.276927][ T5731] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 246.334030][ T44] audit: type=1400 audit(1789103383.496:2859): avc: denied { write } for pid=16757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.404640][ T5731] usb 6-1: device descriptor read/64, error -71 [ 246.515840][ T5731] usb usb6-port1: attempt power cycle [ 246.517707][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 246.518894][T16779] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.526561][T16782] pim6reg: entered allmulticast mode [ 246.526710][T16784] pim6reg: left allmulticast mode [ 246.623112][T16796] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 246.673802][T16802] netlink: 'syz.2.2550': attribute type 11 has an invalid length. [ 246.703276][T16802] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 246.719631][T16802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.736547][T16802] bond2: (slave geneve2): making interface the new active one [ 246.737273][T16802] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 246.746371][T11247] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.746407][T11247] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.746435][T11247] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.746467][T11247] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.808679][T16815] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.845303][T16820] FAULT_INJECTION: forcing a failure. [ 246.845303][T16820] name failslab, interval 1, probability 0, space 0, times 0 [ 246.845335][T16820] CPU: 2 UID: 0 PID: 16820 Comm: syz.0.2553 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.845360][T16820] Tainted: [L]=SOFTLOCKUP [ 246.845367][T16820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.845378][T16820] Call Trace: [ 246.845385][T16820] [ 246.845393][T16820] dump_stack_lvl+0x100/0x190 [ 246.845425][T16820] should_fail_ex.cold+0x5/0xa [ 246.845454][T16820] should_failslab+0xc2/0x120 [ 246.845479][T16820] __kvmalloc_node_noprof+0x113/0x9b0 [ 246.845502][T16820] ? lockdep_init_map_type+0x5c/0x250 [ 246.845523][T16820] ? __v4l2_subdev_state_alloc+0x2c4/0x410 [ 246.845548][T16820] __v4l2_subdev_state_alloc+0x2c4/0x410 [ 246.845568][T16820] subdev_open+0xa6/0x510 [ 246.845592][T16820] v4l2_open+0x1d2/0x490 [ 246.845619][T16820] ? __pfx_v4l2_open+0x10/0x10 [ 246.845643][T16820] chrdev_open+0x234/0x6a0 [ 246.845666][T16820] ? __pfx_chrdev_open+0x10/0x10 [ 246.845691][T16820] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 246.845723][T16820] do_dentry_open+0x6ab/0x14d0 [ 246.845744][T16820] ? __pfx_chrdev_open+0x10/0x10 [ 246.845774][T16820] vfs_open+0x82/0x3f0 [ 246.845802][T16820] path_openat+0x19fa/0x2440 [ 246.845829][T16820] ? __pfx_path_openat+0x10/0x10 [ 246.845859][T16820] do_file_open+0x20e/0x430 [ 246.845884][T16820] ? __pfx_do_file_open+0x10/0x10 [ 246.845927][T16820] ? _raw_spin_unlock+0x28/0x50 [ 246.845956][T16820] ? alloc_fd+0x471/0x7a0 [ 246.845987][T16820] do_sys_openat2+0x10f/0x1e0 [ 246.846012][T16820] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.846046][T16820] __x64_sys_openat+0x12d/0x210 [ 246.846074][T16820] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.846111][T16820] do_syscall_64+0x123/0x790 [ 246.846139][T16820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.846158][T16820] RIP: 0033:0x7fba7035e98e [ 246.846176][T16820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.846195][T16820] RSP: 002b:00007fba71230b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.846215][T16820] RAX: ffffffffffffffda RBX: 00007fba712316c0 RCX: 00007fba7035e98e [ 246.846230][T16820] RDX: 0000000000000000 RSI: 00007fba71230c00 RDI: ffffffffffffff9c [ 246.846241][T16820] RBP: 00007fba71230c00 R08: 0000000000000000 R09: 0000000000000000 [ 246.846254][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 246.846266][T16820] R13: 00007fba70626038 R14: 00007fba70625fa0 R15: 00007ffe3bcca378 [ 246.846293][T16820] [ 246.874651][ T5731] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 246.895329][ T5731] usb 6-1: device descriptor read/8, error -71 [ 246.919349][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 246.984919][ T1039] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 247.145871][ T5731] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 247.147180][ T1039] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 247.154684][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 247.154775][ T1039] usb 7-1: Product: syz [ 247.154790][ T1039] usb 7-1: Manufacturer: syz [ 247.154802][ T1039] usb 7-1: SerialNumber: syz [ 247.170988][ T1039] usb 7-1: config 0 descriptor?? [ 247.178418][ T5731] usb 6-1: device descriptor read/8, error -71 [ 247.296886][ T5731] usb usb6-port1: unable to enumerate USB device [ 247.390461][ T5809] usb 7-1: USB disconnect, device number 10 [ 247.594730][T12753] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 247.689920][T16852] VFS: Mount too revealing [ 247.754710][T12753] usb 5-1: Using ep0 maxpacket: 32 [ 247.755237][T12753] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.756187][T12753] usb 5-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 32 [ 247.756202][T12753] usb 5-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 64 [ 247.756214][T12753] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.757956][T12753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.757971][T12753] usb 5-1: Product: syz [ 247.757979][T12753] usb 5-1: Manufacturer: syz [ 247.757986][T12753] usb 5-1: SerialNumber: syz [ 247.762528][T16843] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 247.762651][T16843] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 247.923563][T16863] overlayfs: failed to resolve './file0': -2 [ 247.924110][T16861] fuse: fd is not a fuse device [ 247.981745][T12753] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 247.991943][T12753] usb 5-1: USB disconnect, device number 49 [ 248.033056][T16877] fuse: Bad value for 'fd' [ 248.168138][T16881] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 248.197392][T16884] [U] [ 248.197414][T16884] [U] [ 248.197428][T16884] [U] [ 248.197443][T16884] [U] [ 248.197513][T16884] [U] [ 248.197528][T16884] [U] [ 248.197543][T16884] [U] [ 248.197558][T16884] [U] [ 248.197635][T16884] [U] [ 248.197655][T16884] [U] [ 248.197673][T16884] [U] [ 248.197688][T16884] [U] [ 248.197770][T16884] [U] [ 248.197787][T16884] [U] [ 248.197803][T16884] [U] [ 248.197820][T16884] [U] [ 248.198768][T16884] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 248.199508][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 248.217250][T16883] [U] [ 248.511222][T16895] netlink: 'syz.0.2575': attribute type 4 has an invalid length. [ 248.511243][T16895] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2575'. [ 248.738146][T16914] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 248.977896][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 249.017715][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2593'. [ 249.111245][T16950] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 249.164162][T16953] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.378132][T16976] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 249.378319][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 249.378328][ T44] audit: type=1400 audit(1789103386.546:2869): avc: denied { relabelto } for pid=16975 comm="syz.0.2604" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.378494][ T44] audit: type=1400 audit(1789103386.546:2870): avc: denied { associate } for pid=16975 comm="syz.0.2604" name="66" dev="tmpfs" ino=365 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403408][ T44] audit: type=1400 audit(1789103386.566:2871): avc: denied { write } for pid=15387 comm="syz-executor" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403441][ T44] audit: type=1400 audit(1789103386.566:2872): avc: denied { remove_name } for pid=15387 comm="syz-executor" name="binderfs" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403465][ T44] audit: type=1400 audit(1789103386.566:2873): avc: denied { write } for pid=15387 comm="syz-executor" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403487][ T44] audit: type=1400 audit(1789103386.566:2874): avc: denied { write } for pid=15387 comm="syz-executor" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403509][ T44] audit: type=1400 audit(1789103386.566:2875): avc: denied { write } for pid=15387 comm="syz-executor" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.403532][ T44] audit: type=1400 audit(1789103386.566:2876): avc: denied { rmdir } for pid=15387 comm="syz-executor" name="66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 249.421735][T16982] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.563640][T16990] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 249.695574][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 249.703152][ T1131] ata1.00: configured for UDMA/100 [ 249.740724][T16995] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 250.121111][T17024] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 250.312187][T17053] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2628'. [ 250.324005][T17053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17053 comm=syz.2.2628 [ 250.351195][T17058] Context (ID=0x1) not attached to queue pair (handle=0x0:0x0) [ 250.396190][T17062] netlink: 'syz.1.2632': attribute type 13 has an invalid length. [ 250.431602][ T44] audit: type=1400 audit(1789103387.596:2877): avc: denied { write } for pid=17066 comm="syz.2.2633" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.431940][ T44] audit: type=1400 audit(1789103387.596:2878): avc: denied { open } for pid=17066 comm="syz.2.2633" path="/188/file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.577435][T17078] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 250.695100][T17092] SELinux: policydb magic number 0xfdfd8e75 does not match expected magic number 0xf97cff8c [ 250.695128][T17092] SELinux: failed to load policy [ 250.816527][T17103] xt_hashlimit: size too large, truncated to 1048576 [ 250.854659][T12753] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 250.951310][T17114] xt_hashlimit: size too large, truncated to 1048576 [ 251.004643][T12753] usb 5-1: Using ep0 maxpacket: 16 [ 251.009679][T12753] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 251.010682][T12753] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.010702][T12753] usb 5-1: config 0 has no interface number 0 [ 251.010734][T12753] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.010756][T12753] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.014822][T12753] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 251.014844][T12753] usb 5-1: Product: syz [ 251.014857][T12753] usb 5-1: SerialNumber: syz [ 251.020851][T12753] usb 5-1: config 0 descriptor?? [ 251.029737][T12753] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 251.034506][T12753] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input33 [ 251.139845][T17127] netlink: 'syz.3.2651': attribute type 4 has an invalid length. [ 251.367964][T17151] block2mtd: device name too long [ 251.639415][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 251.639744][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 251.639933][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 251.639944][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 251.639957][ T5817] usb 5-1: USB disconnect, device number 50 [ 251.648012][ T5817] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 252.390210][T17201] tracefs: Unknown parameter 'ufstype' [ 252.524812][ T5817] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 252.672238][T17209] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 252.678334][ T5731] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 252.681971][ T5817] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 252.683280][ T5817] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 252.683300][ T5817] usb 5-1: config 1 has no interface number 0 [ 252.685558][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.685578][ T5817] usb 5-1: Product: syz [ 252.685591][ T5817] usb 5-1: Manufacturer: syz [ 252.685606][ T5817] usb 5-1: SerialNumber: syz [ 252.719458][ T5817] usb 5-1: 3:1 : does not exist [ 252.719486][ T5817] usb 5-1: 3:2 : does not exist [ 252.759787][T17214] Invalid source name [ 252.759803][T17214] UBIFS error (pid: 17214): cannot open "/dev/sg0", error -22 [ 252.762795][T17217] Invalid source name [ 252.762812][T17217] UBIFS error (pid: 17217): cannot open "/dev/sg0", error -22 [ 252.835007][ T5731] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.835930][ T5731] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.840454][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.840473][ T5731] usb 7-1: Product: syz [ 252.840481][ T5731] usb 7-1: Manufacturer: syz [ 252.840488][ T5731] usb 7-1: SerialNumber: syz [ 253.061214][ T5731] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.269312][T17241] comedi comedi3: pcm3724: I/O base address or length out of range [ 253.467707][ T5817] usb 5-1: USB disconnect, device number 51 [ 253.612985][T17268] loop7: detected capacity change from 0 to 7 [ 253.697784][T17268] Dev loop7: unable to read RDB block 7 [ 253.697806][T17268] loop7: unable to read partition table [ 253.697895][T17268] loop7: partition table beyond EOD, truncated [ 253.697932][T17268] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 253.706879][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 253.706944][ C0] buffer_io_error: 125 callbacks suppressed [ 253.706957][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 254.092181][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 254.092204][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2689'. [ 254.920440][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 254.920454][ T44] audit: type=1400 audit(1789103392.086:2884): avc: denied { nlmsg_tty_audit } for pid=17322 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 255.061543][T17328] overlayfs: upper fs does not support file handles, falling back to index=off. [ 255.155568][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 255.458587][T15620] usb 7-1: USB disconnect, device number 11 [ 255.473488][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.473538][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.487891][T15620] usblp0: removed [ 255.523248][T17362] cgroup: No subsys list or none specified [ 255.591331][T17373] fuse: Bad value for 'fd' [ 255.882908][T17400] lo speed is unknown, defaulting to 1000 [ 255.902284][T17407] netlink: 692 bytes leftover after parsing attributes in process `syz.0.2722'. [ 255.913135][T17393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2718'. [ 255.914801][T17394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2718'. [ 256.046751][T17419] netlink: 'syz.0.2726': attribute type 12 has an invalid length. [ 256.046796][T17419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2726'. [ 256.093616][T17424] xt_cgroup: invalid path, errno=-2 [ 256.168643][T17433] program syz.2.2732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.221821][T17437] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.255331][T17440] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 256.255343][T17440] overlayfs: missing 'lowerdir' [ 256.255552][T17441] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 256.255560][T17441] overlayfs: missing 'lowerdir' [ 256.565254][T17466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17466 comm=syz.2.2742 [ 256.643076][T17475] FAULT_INJECTION: forcing a failure. [ 256.643076][T17475] name failslab, interval 1, probability 0, space 0, times 0 [ 256.643108][T17475] CPU: 1 UID: 0 PID: 17475 Comm: syz.1.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.643131][T17475] Tainted: [L]=SOFTLOCKUP [ 256.643138][T17475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.643148][T17475] Call Trace: [ 256.643155][T17475] [ 256.643162][T17475] dump_stack_lvl+0x100/0x190 [ 256.643201][T17475] should_fail_ex.cold+0x5/0xa [ 256.643226][T17475] should_failslab+0xc2/0x120 [ 256.643252][T17475] __kmalloc_noprof+0xfc/0x840 [ 256.643269][T17475] ? rcu_is_watching+0x13/0xc0 [ 256.643292][T17475] ? tomoyo_realpath_from_path+0xb6/0x690 [ 256.643318][T17475] tomoyo_realpath_from_path+0xb6/0x690 [ 256.643343][T17475] tomoyo_path_number_perm+0x23c/0x580 [ 256.643369][T17475] ? tomoyo_path_number_perm+0x22e/0x580 [ 256.643396][T17475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.643432][T17475] ? __lock_acquire+0x5c0/0x1f40 [ 256.643460][T17475] ? __fget_files+0x34/0x3d0 [ 256.643481][T17475] ? find_held_lock+0x2b/0x80 [ 256.643503][T17475] ? hook_file_ioctl_common+0x140/0x440 [ 256.643530][T17475] ? __fget_files+0x21f/0x3d0 [ 256.643554][T17475] security_file_ioctl+0xd3/0x230 [ 256.643573][T17475] __x64_sys_ioctl+0xb7/0x210 [ 256.643593][T17475] do_syscall_64+0x123/0x790 [ 256.643623][T17475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.643640][T17475] RIP: 0033:0x7f029099e159 [ 256.643655][T17475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.643670][T17475] RSP: 002b:00007f029188b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.643687][T17475] RAX: ffffffffffffffda RBX: 00007f0290c25fa0 RCX: 00007f029099e159 [ 256.643699][T17475] RDX: 0000200000000380 RSI: 0000000040106f52 RDI: 0000000000000003 [ 256.643710][T17475] RBP: 00007f029188b090 R08: 0000000000000000 R09: 0000000000000000 [ 256.643719][T17475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.643730][T17475] R13: 00007f0290c26038 R14: 00007f0290c25fa0 R15: 00007ffd5ef5f968 [ 256.643753][T17475] [ 256.643761][T17475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.643810][T17475] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.737383][T17482] i2c i2c-0: dtv_property_process_set: SET cmd 0xffffffff undefined [ 256.738625][T17486] raw_sendmsg: syz.0.2748 forgot to set AF_INET. Fix it! [ 256.776552][ T44] audit: type=1400 audit(1789103393.946:2885): avc: denied { write } for pid=17483 comm="syz.2.2749" name="/" dev="9p" ino=73941741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.777422][T17497] random: crng reseeded on system resumption [ 256.788241][T17497] Restarting kernel threads ... [ 256.789081][T17497] Done restarting kernel threads. [ 256.808450][T17485] lo speed is unknown, defaulting to 1000 [ 256.859964][T17509] fuse: fd is not a fuse device [ 256.913315][T17517] FAULT_INJECTION: forcing a failure. [ 256.913315][T17517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.913338][T17517] CPU: 1 UID: 0 PID: 17517 Comm: syz.0.2756 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.913354][T17517] Tainted: [L]=SOFTLOCKUP [ 256.913359][T17517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.913366][T17517] Call Trace: [ 256.913371][T17517] [ 256.913376][T17517] dump_stack_lvl+0x100/0x190 [ 256.913397][T17517] should_fail_ex.cold+0x5/0xa [ 256.913414][T17517] _copy_from_user+0x2e/0xd0 [ 256.913427][T17517] kstrtouint_from_user+0xd6/0x1d0 [ 256.913442][T17517] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 256.913460][T17517] ? lock_acquire+0x1d1/0x380 [ 256.913476][T17517] proc_fail_nth_write+0x83/0x220 [ 256.913512][T17517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.913530][T17517] vfs_write+0x2aa/0x1050 [ 256.913543][T17517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.913556][T17517] ? lock_acquire+0x1d1/0x380 [ 256.913567][T17517] ? __fget_files+0x34/0x3d0 [ 256.913581][T17517] ? __pfx_vfs_write+0x10/0x10 [ 256.913592][T17517] ? find_held_lock+0x2b/0x80 [ 256.913608][T17517] ? __fget_files+0x215/0x3d0 [ 256.913624][T17517] ? __fget_files+0x21f/0x3d0 [ 256.913641][T17517] ksys_write+0x12a/0x250 [ 256.913652][T17517] ? __pfx_ksys_write+0x10/0x10 [ 256.913667][T17517] do_syscall_64+0x123/0x790 [ 256.913685][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.913697][T17517] RIP: 0033:0x7fba7035e98e [ 256.913707][T17517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.913718][T17517] RSP: 002b:00007fba71230fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.913730][T17517] RAX: ffffffffffffffda RBX: 00007fba712316c0 RCX: 00007fba7035e98e [ 256.913737][T17517] RDX: 0000000000000001 RSI: 00007fba712310a0 RDI: 0000000000000003 [ 256.913744][T17517] RBP: 00007fba71231090 R08: 0000000000000000 R09: 0000000000000000 [ 256.913750][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.913757][T17517] R13: 00007fba70626038 R14: 00007fba70625fa0 R15: 00007ffe3bcca378 [ 256.913772][T17517] [ 256.951281][T17519] overlayfs: missing 'lowerdir' [ 256.994054][T17523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2759'. [ 256.994471][T17523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2759'. [ 257.063620][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 257.068784][T17534] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 257.068802][T17534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.094713][ T35] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 257.109945][T17542] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 257.123119][T17542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.155317][T17542] bond2: (slave geneve2): making interface the new active one [ 257.156138][T17542] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 257.230615][T17545] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 257.230635][T17545] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 257.230652][T17545] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 257.230663][T17545] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 257.230670][T17545] page dumped because: unmovable page [ 257.230676][T17545] page_owner info is not present (never set?) [ 257.254787][ T35] usb 7-1: Invalid ep0 maxpacket: 16 [ 257.364105][T17549] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 257.394773][ T35] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 257.412665][ T44] audit: type=1400 audit(1789103394.576:2886): avc: denied { setopt } for pid=17551 comm="syz.1.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 257.544861][ T35] usb 7-1: Invalid ep0 maxpacket: 16 [ 257.545212][ T35] usb usb7-port1: attempt power cycle [ 257.695091][ T5817] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 257.712460][T17565] xt_recent: Unsupported userspace flags (000000b2) [ 257.753915][T17565] jffs2: notice: (17565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 257.765255][ T44] audit: type=1400 audit(1789103394.936:2887): avc: denied { write } for pid=17564 comm="syz.0.2771" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.854759][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 257.855515][ T5817] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.856466][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.856503][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.858877][ T5817] usb 6-1: config 0 descriptor?? [ 257.894759][ T35] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 257.915245][ T35] usb 7-1: Invalid ep0 maxpacket: 16 [ 257.968356][T17581] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 257.993243][T17581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.000565][T17581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=351 sclass=netlink_route_socket pid=17581 comm=syz.0.2775 [ 258.000912][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 258.000927][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 258.000949][T17581] netlink: 'syz.0.2775': attribute type 19 has an invalid length. [ 258.044741][ T35] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 258.065348][ T5817] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.077108][ T35] usb 7-1: Invalid ep0 maxpacket: 16 [ 258.077284][ T35] usb usb7-port1: unable to enumerate USB device [ 258.102483][T17585] netlink: 'syz.0.2776': attribute type 3 has an invalid length. [ 258.102497][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 258.105568][T17584] ALSA: mixer_oss: invalid OSS volume ';' [ 258.182849][T17595] netlink: 'syz.0.2779': attribute type 4 has an invalid length. [ 258.192942][T17595] lo: Caught tx_queue_len zero misconfig [ 258.234127][T17597] fuse: Unknown parameter '00000000000000000000' ** replaying previous printk message ** [ 258.234127][T17597] fuse: Unknown parameter '00000000000000000000' [ 258.237168][ T65] [ 258.241163][ T65] ====================================================== [ 258.243452][ T65] WARNING: possible circular locking dependency detected [ 258.245783][ T65] syzkaller #0 Tainted: G L [ 258.247781][ T65] ------------------------------------------------------ [ 258.249989][ T65] kworker/u34:0/65 is trying to acquire lock: [ 258.251887][ T65] ffffffff90f80900 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x3f/0x4b0 [ 258.255539][ T65] [ 258.255539][ T65] but task is already holding lock: [ 258.258159][ T65] ffffffff90f53d00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 258.261272][ T65] [ 258.261272][ T65] which lock already depends on the new lock. [ 258.261272][ T65] [ 258.264665][ T65] [ 258.264665][ T65] the existing dependency chain (in reverse order) is: [ 258.267541][ T65] [ 258.267541][ T65] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 258.270182][ T65] lock_acquire+0x1d1/0x380 [ 258.271845][ T65] __mutex_lock+0x1a4/0x1bd0 [ 258.273849][ T65] hci_remote_features_evt+0x485/0x9b0 [ 258.276365][ T65] hci_event_packet+0x8e9/0xcd0 [ 258.278533][ T65] hci_rx_work+0x451/0xfc0 [ 258.280077][ T65] process_one_work+0xac7/0x1b10 [ 258.281795][ T65] worker_thread+0x5ef/0xe50 [ 258.283445][ T65] kthread+0x373/0x450 [ 258.284900][ T65] ret_from_fork+0x730/0xd60 [ 258.286507][ T65] ret_from_fork_asm+0x1a/0x30 [ 258.288164][ T65] [ 258.288164][ T65] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 258.290686][ T65] lock_acquire+0x1d1/0x380 [ 258.292301][ T65] __mutex_lock+0x1a4/0x1bd0 [ 258.294017][ T65] l2cap_chan_connect+0xac/0x2110 [ 258.295757][ T65] l2cap_sock_connect+0x37a/0x770 [ 258.297558][ T65] kernel_connect+0x107/0x160 [ 258.299248][ T65] rfcomm_dlc_open+0x838/0xac0 [ 258.301193][ T65] rfcomm_sock_connect+0x42c/0x690 [ 258.302995][ T65] __sys_connect_file+0x146/0x1a0 [ 258.304798][ T65] __sys_connect+0x141/0x170 [ 258.306437][ T65] __x64_sys_connect+0x72/0xb0 [ 258.308096][ T65] do_syscall_64+0x123/0x790 [ 258.309783][ T65] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.311807][ T65] [ 258.311807][ T65] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 258.314816][ T65] check_prev_add+0xeb/0xe60 [ 258.317037][ T65] __lock_acquire+0x1528/0x1f40 [ 258.318857][ T65] lock_acquire+0x1d1/0x380 [ 258.320332][ T65] __mutex_lock+0x1a4/0x1bd0 [ 258.321853][ T65] rfcomm_security_cfm+0x3f/0x4b0 [ 258.323871][ T65] hci_auth_complete_evt+0x811/0x1180 [ 258.325835][ T65] hci_event_packet+0x8e9/0xcd0 [ 258.327533][ T65] hci_rx_work+0x451/0xfc0 [ 258.329139][ T65] process_one_work+0xac7/0x1b10 [ 258.330873][ T65] worker_thread+0x5ef/0xe50 [ 258.332996][ T65] kthread+0x373/0x450 [ 258.334483][ T65] ret_from_fork+0x730/0xd60 [ 258.336121][ T65] ret_from_fork_asm+0x1a/0x30 [ 258.337818][ T65] [ 258.337818][ T65] other info that might help us debug this: [ 258.337818][ T65] [ 258.340886][ T65] Chain exists of: [ 258.340886][ T65] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 258.340886][ T65] [ 258.344854][ T65] Possible unsafe locking scenario: [ 258.344854][ T65] [ 258.347212][ T65] CPU0 CPU1 [ 258.348973][ T65] ---- ---- [ 258.350945][ T65] lock(hci_cb_list_lock); [ 258.352478][ T65] lock(&hdev->lock); [ 258.354601][ T65] lock(hci_cb_list_lock); [ 258.356991][ T65] lock(rfcomm_mutex); [ 258.358334][ T65] [ 258.358334][ T65] *** DEADLOCK *** [ 258.358334][ T65] [ 258.360908][ T65] locks held by kworker/u34:0/65: 4, last CPU#3: [ 258.363125][ T65] #0: ffff8880544de140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 258.367434][ T65] #1: ffffc90000b2fd08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 258.371016][ T65] #2: ffff88803a07c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x99/0x1180 [ 258.374155][ T65] #3: ffffffff90f53d00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 258.377331][ T65] [ 258.377331][ T65] stack backtrace: [ 258.379161][ T65] CPU: 3 UID: 0 PID: 65 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.382604][ T65] Tainted: [L]=SOFTLOCKUP [ 258.384355][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.388028][ T65] Workqueue: hci0 hci_rx_work [ 258.389512][ T65] Call Trace: [ 258.390584][ T65] [ 258.391529][ T65] dump_stack_lvl+0x100/0x190 [ 258.393320][ T65] print_circular_bug.cold+0x178/0x1be [ 258.395615][ T65] check_noncircular+0x146/0x160 [ 258.397204][ T65] ? mgmt_send_event_skb+0x2f4/0x460 [ 258.398864][ T65] ? lock_acquire+0x1d1/0x380 [ 258.400348][ T65] check_prev_add+0xeb/0xe60 [ 258.401911][ T65] __lock_acquire+0x1528/0x1f40 [ 258.403762][ T65] ? l2cap_security_cfm+0x90b/0x1240 [ 258.405484][ T65] lock_acquire+0x1d1/0x380 [ 258.406968][ T65] ? rfcomm_security_cfm+0x3f/0x4b0 [ 258.408629][ T65] ? __pfx___might_resched+0x10/0x10 [ 258.410364][ T65] __mutex_lock+0x1a4/0x1bd0 [ 258.411842][ T65] ? rfcomm_security_cfm+0x3f/0x4b0 [ 258.413630][ T65] ? rfcomm_security_cfm+0x3f/0x4b0 [ 258.415287][ T65] ? __pfx___mutex_lock+0x10/0x10 [ 258.417412][ T65] ? __pfx___mutex_lock+0x10/0x10 [ 258.419617][ T65] ? mgmt_send_event+0x13b/0x180 [ 258.421735][ T65] ? rfcomm_security_cfm+0x3f/0x4b0 [ 258.423943][ T65] rfcomm_security_cfm+0x3f/0x4b0 [ 258.426085][ T65] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 258.428451][ T65] hci_auth_complete_evt+0x811/0x1180 [ 258.430741][ T65] ? __asan_memcpy+0x5/0x60 [ 258.432686][ T65] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 258.435169][ T65] ? __skb_clone+0x570/0x760 [ 258.437218][ T65] ? skb_pull_data+0x15f/0x1e0 [ 258.439397][ T65] hci_event_packet+0x8e9/0xcd0 [ 258.441577][ T65] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 258.444059][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 258.446336][ T65] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.448518][ T65] hci_rx_work+0x451/0xfc0 [ 258.450450][ T65] process_one_work+0xac7/0x1b10 [ 258.452547][ T65] ? __pfx_process_one_work+0x10/0x10 [ 258.454670][ T65] ? lock_acquire+0x1d1/0x380 [ 258.456610][ T65] ? __pfx_hci_rx_work+0x10/0x10 [ 258.458910][ T65] worker_thread+0x5ef/0xe50 [ 258.460831][ T65] ? kthread+0x13a/0x450 [ 258.462600][ T65] ? __pfx_worker_thread+0x10/0x10 [ 258.464903][ T65] kthread+0x373/0x450 [ 258.466649][ T65] ? __pfx_kthread+0x10/0x10 [ 258.468569][ T65] ret_from_fork+0x730/0xd60 [ 258.470525][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 258.472584][ T65] ? __switch_to+0x800/0x10f0 [ 258.474342][ T65] ? __pfx_kthread+0x10/0x10 [ 258.476082][ T65] ret_from_fork_asm+0x1a/0x30 [ 258.477890][ T65] [ 258.640540][ T5817] usb 6-1: USB disconnect, device number 28 [ 264.584695][ T5730] Bluetooth: hci0: command 0x0406 tx timeout