last executing test programs: 1m36.571149119s ago: executing program 1 (id=938): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) recvmmsg(r8, 0x0, 0x0, 0x0, 0x0) close_range(r6, r7, 0x2) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x1, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xfd, 0xb0, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x6}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x5}, {0x0, 0x28, 0x4, '\x00', 0x5}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x4, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xe, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc6}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0xa}]}}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0x3}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) r9 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000800)={"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"}) 1m36.262241764s ago: executing program 1 (id=941): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) 1m36.257420149s ago: executing program 1 (id=942): r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x16f, 0x4000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000240)={0x80000001, 0x0, 0xd, 0x1, 0x800}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000080), 0x1) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000080), 0x1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002180)) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x3, 0x9, 0x8}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x3, 0x9, 0x8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x8000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) r9 = accept4$x25(r1, 0x0, &(0x7f0000000280), 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r9, 0x89e8) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "bd3477bcd0fc636b", "0aad493bc513a8768e6917ea79c5de042217979390b1b9e729d17743f2dede96", "fdc4e7fa", "5a9ffb9342587272"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f00000000c0)=0xfffffff9) (async) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f00000000c0)=0xfffffff9) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 1m36.089819485s ago: executing program 1 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) unshare(0x6020400) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m36.030571533s ago: executing program 1 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)="945a3c3c4484e21e9d31", 0x0, 0x7fff}, 0x38) syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x82500) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40046307, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m35.632528746s ago: executing program 1 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x4800040066], 0x0, 0x40110}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.601096685s ago: executing program 32 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x4800040066], 0x0, 0x40110}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.628871454s ago: executing program 3 (id=1234): r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000840)) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff0000000000000007ed370000", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, &(0x7f0000000140)="582e3ecf253d", 0x6, 0x40001, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @mcast2, 0x4d}, 0x1c) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)) 1m12.730967335s ago: executing program 3 (id=1243): r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}], 0x18}, 0x40000) 1m12.658412116s ago: executing program 3 (id=1246): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000160001f500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20004010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) listen(r2, 0x100004) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000280)={{@hyper, 0x40d9}, {@host, 0x3ff}, 0x400, "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"}, 0x418, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000aafe8000000000000000000000000000aa00004e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m12.602581419s ago: executing program 3 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x53f7, 0x883) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) close(0x3) close(0x4) r5 = syz_open_dev$rtc(&(0x7f0000000240), 0x81, 0x30400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) chdir(&(0x7f0000000140)='./file1\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0300000000e04a00000000000400fdffffff0200042c0400000004000400cb0abb0cf63ea90ef867a5a4ed452a29eae231dd67", @ANYBLOB="4fe7c8cffaf8e0f7305ce9e816d26ece5fa2b61a46fb5fc43ed17ee63d965a88fd873dd1a6b668fa5a394f6f2fd92cce240740c9b4949f651dabafe846e4856715abec9053f0787644888b7210ce428ebb698300520167cceea47b93c2e520f9448b73e1c40eb459a1aa5622489a458f9b3dee4fa962e1be9bd7807e29f03e6f8c62a46c9d81badd07ddd5879745e97a0badb3c156be7fcc2f8af15fb2a8831984c0ce413a1bed86a80ead10a3c791e91067ff5690185ddcc019c1c9094453fff2a462b233f9952a5106ff10eab4a8a20ff027081873d18aca86b39f0edbf0ba56d562d3d56fb7352ce8"], 0x1c}}, 0x54) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x35, {0x9, 0x3, 0x2040000, 0x203, 0xfffffffe, 0x400002}}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r9, 0x1, 0x7, 0x0, &(0x7f0000000980)) 1m12.511635504s ago: executing program 3 (id=1249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0xc020660b, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000ac0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m12.182738432s ago: executing program 3 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f00000ad000/0x3000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r2, 0xb) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) shmctl$SHM_UNLOCK(r2, 0xc) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="140000000000000029000000000000000000140000000000000029000300000000000000000000000000180000000000000029000000360000005e00000000000000dff6c54fbdc762f4635b3cd217876e9927bb7b9d0dfd5dbc15eb1ed4969103e22642bb6e8c964c833bcb2fd508709c5173ab7929fb3ae69343588509e293f44d955981cc746ba50da8ff5b30250d"], 0x60}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000500)="3a46a92dee9a46e2e2bcc43191a642ed4a66803856e512ca08ba1a2b0c4ed8abe8f7be4a50904a5ea83941e554898fadc1a41019755ab44f6a0dbd54d81fcaf0a6877e3e3f6b9ef195ea27967b", 0x4d}, {&(0x7f0000000600)="2fa859cecb935bc2f4c49743446a0053241fd2b647b4b6fb46c8c5dee77fc0a6da7f79d31fd128ce22732be882054fe4142e387fdef83f042ed41b41f0fe1d42f3c024b368acd9cd7d830f04b05ba1059e14ef2b6b275ae930ac5ee76507d693f7d7257f6ddab29e", 0x68}, {&(0x7f0000000680)="0711bc7df7ddfe606116", 0xa}, {&(0x7f0000000880)="9cb74f1fd6c9c17d01106e3d55cf6881a78c1d4c4434c8d7af85ba01ef194c2186badf9ad69656c1c50557b37980c67b7c38d3780cd41ddc3d1a44edd0371e2d04e40ca679e7810ccc9b4570e9419eaa7a0a1d6f5bbd8f2a16d96cb43c8470e17b369889fee0368d74308b2ff8add229c5f8590c26e627bb20fc5caf3d9078f8aea72237006fa96e8b2e03a0c42ab06deb3b560e99af2e84a50cac17c0ed0c21a20c450b1bf5cc38a5a97f4f16b6e374295136c049449e841f639396276f707a4438f57d2c004d08c8ae84a764f82dd5731b659dff95b743d94c23b9982f61d08e109e83c438094a065922db533a9b", 0xef}], 0x7, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000040)=""/36, 0xfffffdd9, 0x720, 0x0, 0x0) 1m12.126490179s ago: executing program 33 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f00000ad000/0x3000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r2, 0xb) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) shmctl$SHM_UNLOCK(r2, 0xc) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="140000000000000029000000000000000000140000000000000029000300000000000000000000000000180000000000000029000000360000005e00000000000000dff6c54fbdc762f4635b3cd217876e9927bb7b9d0dfd5dbc15eb1ed4969103e22642bb6e8c964c833bcb2fd508709c5173ab7929fb3ae69343588509e293f44d955981cc746ba50da8ff5b30250d"], 0x60}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000500)="3a46a92dee9a46e2e2bcc43191a642ed4a66803856e512ca08ba1a2b0c4ed8abe8f7be4a50904a5ea83941e554898fadc1a41019755ab44f6a0dbd54d81fcaf0a6877e3e3f6b9ef195ea27967b", 0x4d}, {&(0x7f0000000600)="2fa859cecb935bc2f4c49743446a0053241fd2b647b4b6fb46c8c5dee77fc0a6da7f79d31fd128ce22732be882054fe4142e387fdef83f042ed41b41f0fe1d42f3c024b368acd9cd7d830f04b05ba1059e14ef2b6b275ae930ac5ee76507d693f7d7257f6ddab29e", 0x68}, {&(0x7f0000000680)="0711bc7df7ddfe606116", 0xa}, {&(0x7f0000000880)="9cb74f1fd6c9c17d01106e3d55cf6881a78c1d4c4434c8d7af85ba01ef194c2186badf9ad69656c1c50557b37980c67b7c38d3780cd41ddc3d1a44edd0371e2d04e40ca679e7810ccc9b4570e9419eaa7a0a1d6f5bbd8f2a16d96cb43c8470e17b369889fee0368d74308b2ff8add229c5f8590c26e627bb20fc5caf3d9078f8aea72237006fa96e8b2e03a0c42ab06deb3b560e99af2e84a50cac17c0ed0c21a20c450b1bf5cc38a5a97f4f16b6e374295136c049449e841f639396276f707a4438f57d2c004d08c8ae84a764f82dd5731b659dff95b743d94c23b9982f61d08e109e83c438094a065922db533a9b", 0xef}], 0x7, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000040)=""/36, 0xfffffdd9, 0x720, 0x0, 0x0) 42.990944333s ago: executing program 5 (id=1676): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182}) io_uring_enter(r5, 0x5480, 0xe672, 0x44, &(0x7f0000000080)={[0x6]}, 0x8) 42.910677528s ago: executing program 5 (id=1679): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000040}], 0x1, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x7105c0666a9ede65, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x843b13958eac562d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x4201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x2006004) 42.659909306s ago: executing program 5 (id=1681): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000680)={0x3, 0x0, 0x98, &(0x7f00000005c0)={0x6, 0x15c0000000, 0x1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r4, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x48}], 0x1}, 0x142) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) clock_settime(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@mpls_newroute={0x174, 0x18, 0x400, 0x70bd28, 0x25dfdbfb, {0x1c, 0x10, 0x14, 0x8, 0xfe, 0x1, 0xfd, 0x5, 0x1b00}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x72}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_VIA={0x14, 0x12, {0x25, "168ab66ec8e93ebb4b8455d14f3b"}}, @RTA_NEWDST={0x84, 0x13, [{0x81}, {0x6d1f1}, {0x5}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x986a}, {0x101}, {0x1}, {0xa, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3}, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x798}, {}, {0x2, 0x0, 0x1}, {0x800}, {0x1}, {0x5, 0x0, 0x1}, {0x10}, {0x200, 0x0, 0x1}, {0xff}, {0x470, 0x0, 0x1}, {0x87}, {0xf24}, {0x2}, {0x6, 0x0, 0x1}, {0x20000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0xc4}]}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {0x9}, {0x9}, {0x101, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6}, {0xd85e, 0x0, 0x1}, {0xfd}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x4}, {0x4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8001}, {0x5}, {0x6, 0x0, 0x1}, {0xffffb}, {0x4}, {0x6, 0x0, 0x1}, {0x2d1c}, {0x7, 0x0, 0x1}, {0x200}, {0x7f}, {0x6}, {0x3, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x8}, {0x4080, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_VIA={0x14, 0x12, {0x26, "e43aafd4c7cc4a712b27597e55e2"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 42.40207092s ago: executing program 5 (id=1683): creat(&(0x7f00000000c0)='./file0\x00', 0x10a) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000"], 0x48) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000300)={0x2, "134c4092b0389292017cc6c63ab926b1b73591a170e6b48aefc8a77ade5efc8e", 0x0, 0x20, 0x2, 0x81, 0x1, 0x2, 0xc, 0x6}) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000002c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x3c}], 0x1, 0x7d, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 42.238135493s ago: executing program 5 (id=1684): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) 41.997308948s ago: executing program 5 (id=1687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000004c0)=0xffffff81) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000880)={{}, r5, 0x0, @inherit={0x88, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000d01679e20000000000ff0000000000000009000000000000002400000000000000ff070000000000000700000000000000e24e5e7a0000000001000100000000000500000000000000000000000000000007000000000000000193384a5146137500000000000000300000000000000001f8ffffffffffff00000000300000005e"]}, @name="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"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xae3116edcf46f6d4}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x2, 0x8}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r8, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 41.881541822s ago: executing program 34 (id=1687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000004c0)=0xffffff81) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000880)={{}, r5, 0x0, @inherit={0x88, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000d01679e20000000000ff0000000000000009000000000000002400000000000000ff070000000000000700000000000000e24e5e7a0000000001000100000000000500000000000000000000000000000007000000000000000193384a5146137500000000000000300000000000000001f8ffffffffffff00000000300000005e"]}, @name="e9e7755a821f9aa492f38dcf4131e5e1df45fa3992236db44a835321cc4c87e0c07c6e7797538a7ed8bd69874c13113f542510bfc60ae244216cd3a1cb1a485d095abc96e09e7f455849572478ef69734393873f18c07a4a0e12d6fb8459af276fec504260a8ea44c70500845a86cc5d4e2082dff28410305bfc57961d920a06946b8f6ec1a1b63fd485d8d743be038381052d7b11ce7d8677b452e27b8da9af17181d4984be98f669c87a75c66f0a28e83c747c4a6f956b42962ae2a895fbb17685f5532b70a6c80d415a02f87793cc28b6c2e85654c1364afd9275c217157466d5b8a21488fd9658f816701ebaa94952a538270e66d3fa54f3e64c37b847baaf0d13c1080c356fe9fcb2f090f25f1bb39f743d64de8ee36863b9c5f9aa18307d7d620a6cc863655aa1e5ff8b58ed48f84d296930d8621a8ee8b7ae66635aaac980d8ad012942dcac2a5434e11debe3a98598379cb623be192f369e274617d38126bc9aac2bfb55f8c924103b303cae01c0917a1eec038cece9a0cabdc82ed518e4c90eec3ca2d4449924466ebb4f2079bdcf57ba38d80ed4061a97b210be235b76037ad34c07e59f622e4a46e4c16a3ac5b5706f092d07de8d1461e3d03fe1628094d2c573b8c75885ecd26e7a0c7d4a3036ce567bc6fa9f828816f5e21481e3b86e2591c0022a6962dbdc13402b3cae326c40c5be37e94415ef0046ef353ce108bd7d67be81689767449149a66574282eaffd6818483080a5f3776ee394423e01fd08a805793b42808eb3fdae52d606594fae6f86d6020ed5534b4bbc661842c2ffc2b23781709d0e63b37ddecdb988e4b296d15941ac44d16cd291a8a4d4cb1fe01b56375ab6b2a6fe78cf0d28f7197c5f4fbe1ae045d84bebf15cc310fc2a703728cea96adc495671ecddcf0782fa29a48f19ce81c441173aef60b619587a3553aff53a7e31572b2b92871b8302b6e2b61c3b4d9616f8765eb2a3f60c30568a081518594ef50cdf126fe7b02e8d02e5608757d5a313c3af1b09657880a0e9da9ef86f0cba9b807759cbd5f8669586113380f30f467adfbc455669bcef4354cb7bf0fe5db4a0b1be8bb67050181d78568507edfd2ac3fec24aed274558dbfa1d81db6d0ee15671dba8ecef01b0bdf900ea535c693bc438d4f551cb1323b9abbffc63366d1d2efa24457205f405b8bd7be90e298532d563835b9b6bc5987dc79ba5baa307c82aa8f6c1fcc4f0c357743f5c44fae51ac31a6b6cf723e83da5757c86cc17217f3be6be4b76494a0c094a53d9670130c3f9c40104d750387ad003d2d6a5b95caa2dee954b1b0d4c99c3de136cf06618f997608eca52d99eef0528727d624836a28edf1d8699e3e0a40df1e80526021be63bdeaca9cf3716854772cbf34cc3f9aae8ade7f68ac5b499f95eb8315930481a8fa19b0f0cdb931bc20c8a8b06ccfaf5e6dc0d078b3b2a262a09093ceafa2c64932ec6206e87af317a9e0d294a7ba5c48348eb95b86733c2a20b30ecd857330980d9f9f19dce0383947568257c135e94a52613b10992f74fd1eb18ffc2226d566144ea258c613a31e7c17bf950ccaaeeca3da814a542d13ac0ab76980ed2ec3748cf9b6d30df593302597248044974205c44a91e6aa575be44ffc42af653ed238e1039099632b0624ecb4a168c9f83a1600827b482b61df102b4b569a8fffa08efff5a68ddc4b12165e2be2fc227c1cfab3e5e0699600296098188c13b7c287b7bdacb0ee35df4ddcf7e2911d3d06cf730925098879f3f988071165a0d1a45bdecffe7d65740de0d132fb2682693af7a72bbcc2e96275f95d1a4c2a7c7546210ee5c3ac0ab81475b7db4111e5444492271724036071eb53d3360ff9480201fb9883264f4fa31e8d3ab7caa295be412cf8af833c4c795359909a5a8e8198c5ad973626b6a1bc5823ba39d6709fe1fd70e0720cfa096dc7a58a93d4783e74ef76ded8c87963bea9aac34de2d52061db342a82477875c3190162c0343c5a56e853859313afbea7dc82f6a03fc286063701c1eb356ab0f8b386920cab4583f12d25905e463c220484e9ab89e5a6f0dafc724b0e5c1562dce870996a53e0329a84285ea16aa562a819ea80b850854d95cfc64623a2541582d69fd2723589012049466bb319627e9bf1a0f9c5348bc1469c572ac824b03e4a4daa1eb279ba2cf3f8d46da00851f08351764be432125effdf6f1f00be2d4a38b26554c66ba3820702a84011e1c106e1da3fcaffe534b5879cb07666f29eebaafcae23264ad035aa4ffa27025073fa05bb0f7a69431afb4148140b58169f6a545ecac44add951042b846b3cce403d27450ef4f7b76691fe8c137ab6d8213ffe6ead3cb865cb05aa3a26341ca215145660b4248c9529c0d904022b5f6de2438de1cc9a1b8302bf4bcebad26008d8e20d4abc1f2a9cc30525ea009c96aef80904f1820f452f376942f9e610f44b53f13686018a6208ed434d9ec89ec9933514fb9f40e2a8d0afffa8c7808a759c44bb740890b8c8713ae43095a5f56ee3e619dd06b11dc451bcf0bb0e71b47107ea29c795c53f83a9565eca910e388439071f7f0acb20e647055da2187971cbbb19c6319768f5d375778e088d685a1651b7a4b0adb6246ec65960659e37b7074e46802f98bcde11e4cdd496091e725d3c539d67fff0819b693bf80317256f9cf0411478eda16a6156cb2e954d4ef5dd7d04485cdd834254f64ce7b21d469bad1bcd1c71e64259b9628e27eabc09b12c4f67ddaa8bfabeca357d424c33dd768ecad7fd080f1d7037828c01de22dcc2f230a96fbf87a2665c721faa531c58ee291d4433f49f9eb6ee73823d86f53c8f346bd3b022c79d2e8da6ce92b1d3d622d0048e2091c4cfabe5a5f80f6318e39e3dcb475347ad71b1827dc979f603eeaad9d2a607612ca16abb1ec1ca9f8333229a325e17f74f9e5ce4c2ac80060c16f94f2e8f31a11eb3d7a5ef9cdfba9e7cdbabf0fd71f39a9590182b0689929df3238cad79a063cabc5277b6826eca2b11e43a53522b24093aa706ac879c13244ff972e35b5cd27e64afc5bd8e2bf6fa08167a7fc4e5a09e42eed01b8eec9ec0d24f13f98d726600da3241a841a5617e24ad0bd60987cb3cc974be6766e9cbea5f79d6348e07385a82a053fce43157cd7392f7f7c17d43f5bb621d11d4902c638d1890336dd0b5cd7c9a1dc3041d3767960ec74a5d43a2a1db571cb9782c77ad2958324a802a11d7ec29c3b666a797b4fe3590b3471c025e5eea2ee86444dd1deb44a616ae559d03cc9c4d4682ee64f7a08458d1dbaaf8e33ce799f38703c38694276eed24959ef9d90064d205fa1ecfabe08c85438ad1e2015ca755ef44a63a28f277efac727a83525d01520f371f3792610773c757a615e780a434a63e7c3cdf83eb247c19c0ea49be505d0b512d225cd4327a03db669e9f4bf6cb1b31436f6cd3d19445f67d0993166447a9977a061be9a1ca9d3d1f1d2448f99b09a74399362cfc52573820871bda598b3bfdf2ea5cbdb62ad1f50729dc1e098ef4e8497c3d1083390c396ae55f1db8e93f6ade7a596b96947bcaae3810d19069aab63b7e02442a9567ce29e5fb94baabe063e9805e56a799272ab50b96b65e41f9b2db742b8c0068b1502b1fce966dbbe94367bae0dd7450856ddd4069290e6cf0d60bbce5c9a29d05cf4a979a2a5a1b300ef90016c893419e465c3c2867a63365b7cdf4f17ce41ba5d44fa18de601a065525d8ad866bdbf43f31feb35d5dbcbcc063a0de26c34ad7a2883487fa39f65fe46c1af5e79b64a3c74685e462e80fddd115e441bac03c1aca4fa1a75453b92aad5cfc04b18c4cf0639901299ac416bd03c346e2aa8961a6b0108dc709bfe7b09d4d2547d707f4e7d7b425a2e2187e0274e2142e3cfa01286a4746bd8a2dc98b9eae35192b890471fadd8acd32f3846d6dd2ab0ca6d652307e2cb886b527ad20f0b345f2c0d1a331d320bf35ab9fc2094ac4d48fa358a36a1608538ace9b2437350804f072384c1e5f445e781eca8414c16a6f5d27011e2213a3b59da87ed138a283da2cbac14ffe0a87125eeb7e4d348a8bb22584913136baf1e4966ec1d0ddafc6ccb2a822f2b37a733ae8bbccf66e4427048cf7f7c6b15e1f6ec88821b5eba31fddb923a3e0f58730cc02f18962669c2cd55d7cc67dadfda6e425fab0086f8fbe10a24a731464c7e86fb761c9a2ad6510ff8b2c308714280bde3709bff51a3f073c7d0311b5d711217ef5c14cfa4ba8610b2d76994fc673d668c187f7e923254707e171549a3eded4213b7ce6df7c9fd5a4f25644cd53d9cb66cc23877e2de50e446996b38036127ffefd064ed837a52a56b8c285f726c3db926cdb344371d8696a906b05f5c2ba8896157b678a72cbccdbd5f8a5c91fb50daa50439d6e7ab2a90006068058dadcf724c2b6af098c9c5a740e6f5427bce0a8d6cbaa862c5363129197900e23b3e21bbb5ffc42d17bfb67197582aeae07c63c70145f877b8a94bfd512644cf01d9f221601697ef0c34c5ede3a434d843dea20aa7ea8934c63462c2e41e6a0e06203c1796a906de653ec5f0d38609c3d71b9c1f13e278bdff7d33dce75e70834b64626cf2b94b66cc57defe553304df9586f55a9693fc7aceeb7b356e2c8db3d070d09cacba997d5ca491998b2a1ad7f648e807b859f26118cc98bda668e934520fceaf501804a3481e12be0eee3086a30569036f8bcee0f6584ca622db0b76ddedaf98e84855946b853ec97978a6c2e500a0146103334e32920f0d6075f0d27c3ed4fcaed43d80acc5d6da5b6dc58c0d6f7857de9ea53dffa4fe25d34d01295faed9fde825b6c8f671837a234f0336839bc35a689eb208a0683f0578badceccfd5c14b49eeed3ac4ce5040cfc13727f03c144cfbe703aa79357267b88fb934b8ec50c8f95ecf5c7c6ff0851a2d317e7ab53f857d82c713b962aa911b55b634fb7f4e4aaad0b1dea142ee7bab67dbdb982d5b4ff575d4a920fd55b991907113370893b589af2922e390b8d10d3b936793abde13fc57ba1f7557859cbd335b612374cee37ed4f31c376adc917069705a77d3ccb220eb1856463892da8e40098ef7b51c5960845b739a7c68ff7d8c6f07de1a543bb167c6e7c7c0f6bce08fc24ab0d343b4cb30712b172fed5f32c5c2c50f18f540bfe64c1f5efdaa1c74c7a5c9ee346f6827428b29b7524969b1fbad73969c67ffcb9b69ede67d072d80d4ae5f612c2425b11e175a345d35fd6503176ee81faf664f83c4d5e5ef5f50a138c7c4d4bfaf607766d89c743edcb34daed13502c27abc82a1c19493ae980afe1a0f6dbc9c71f48541b0ded36fd341e9463f96b05e464f8fa3486987ed3f3fa2f036dcb58b4ebc658c64e1dee5ea385ec568b5f2d9133ba013e4f05746529cf0774a9988cfc275bc0336205d3a485822c6f6337cbf93e2c5f692f39a6b46c4f0e0edbcbfd93fbe6b6b51e4ae2536e80e921f9e14ed0fb3ed5cff295e16b2d72b0b404078aeb700f64ae4238c585982e7fb66b99298dbfb0dbd9189f8b0ed93c71cfa14d4dec84558c48a943e71bbb80aa44d49ce5837dff4f622828103f86c45bc718a6146354f472030d573244781a62796946001408629e56c49ed446a967255d593acbc1c5d3b8d04709bbbcabbbe67c5d4344d178dff1da3d8407363af014ed831"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xae3116edcf46f6d4}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x2, 0x8}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r8, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 29.621941034s ago: executing program 0 (id=1879): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) 29.618777948s ago: executing program 0 (id=1881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xef65, 0x4e1d, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0xfc, 0x32}, @in6=@loopback, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x5, 0x743}, {0x4, 0x7fffffffffffffff, 0x0, 0x4000000000000000}, {0x2}, 0x70bd29, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffc, 0x4e20, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x30}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x80200) sendto$inet6(r1, &(0x7f0000000140)="0ed8ba0b9364beaab24de51cfa0a7bca04402b", 0x13, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r3, 0x0, 0xc, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x80049370, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) 29.559871775s ago: executing program 0 (id=1883): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x77c4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0bc4c17d9939f3593f2ec3bc5ddfa557"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x120}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x4004) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000004c0)={0x3, 0x0, 0x3, 0x4080, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r6) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r6) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x887}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x120000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x91c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fe000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x100}}, 0x8881) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x887}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x120000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x91c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fe000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x100}}, 0x8881) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r5) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x57, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xd0}, 0x4040010) close_range(r6, r6, 0x2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x28000002}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000b00)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000b00)) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xe4, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xb8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x99c}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000e40)={0x9, 0x8, 0x1, 0x8, 0x6, 0x22, 0x2}) r11 = accept4(r5, &(0x7f0000000e80)=@ax25={{0x3, @null}, [@rose, @remote, @netrom, @bcast, @rose, @remote, @netrom]}, &(0x7f0000000f00)=0x80, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r11, &(0x7f0000001100)={&(0x7f0000000f40), 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x124, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcac}, {0x6, 0x11, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4800) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r11, &(0x7f0000001100)={&(0x7f0000000f40), 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x124, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcac}, {0x6, 0x11, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x11, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4800) write$vhost_msg_v2(r5, &(0x7f00000012c0)={0x2, 0x0, {&(0x7f0000001140)=""/136, 0x88, &(0x7f0000001200)=""/174, 0x3, 0x4}}, 0x48) (async) write$vhost_msg_v2(r5, &(0x7f00000012c0)={0x2, 0x0, {&(0x7f0000001140)=""/136, 0x88, &(0x7f0000001200)=""/174, 0x3, 0x4}}, 0x48) r12 = open$dir(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) execveat(r12, &(0x7f0000001380)='./file0\x00', &(0x7f0000001640)={[&(0x7f00000013c0)='NET_DM\x00', &(0x7f0000001400)='pci\x00', &(0x7f0000001440)='0000:00:10.0\x00', &(0x7f0000001480)='netdevsim\x00', &(0x7f00000014c0)='veth0_to_team\x00', &(0x7f0000001500)='\x00', &(0x7f0000001540)='netdevsim\x00', &(0x7f0000001580)='NET_DM\x00', &(0x7f00000015c0)='0000:00:10.0\x00', &(0x7f0000001600)='+&j-\x00']}, &(0x7f0000001700)={[&(0x7f00000016c0)='\x00']}, 0x7efc7571f0fec709) (async) execveat(r12, &(0x7f0000001380)='./file0\x00', &(0x7f0000001640)={[&(0x7f00000013c0)='NET_DM\x00', &(0x7f0000001400)='pci\x00', &(0x7f0000001440)='0000:00:10.0\x00', &(0x7f0000001480)='netdevsim\x00', &(0x7f00000014c0)='veth0_to_team\x00', &(0x7f0000001500)='\x00', &(0x7f0000001540)='netdevsim\x00', &(0x7f0000001580)='NET_DM\x00', &(0x7f00000015c0)='0000:00:10.0\x00', &(0x7f0000001600)='+&j-\x00']}, &(0x7f0000001700)={[&(0x7f00000016c0)='\x00']}, 0x7efc7571f0fec709) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000001d80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x190, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000001d80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x190, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) 29.491994068s ago: executing program 0 (id=1884): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d146e0d149c83b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d146e0d149c83b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (async) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') (async) 29.429451983s ago: executing program 0 (id=1887): r0 = io_uring_setup(0x4cbc, &(0x7f0000000000)={0x0, 0xef50, 0x4000, 0x0, 0xa}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000008d00)=[{0x2, 0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/125, 0x7d}], &(0x7f0000000300)=[0x1, 0x7586, 0x4, 0x4, 0x1, 0x0]}, {0x4, 0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/182, 0xb6}], &(0x7f0000000700)=[0x296]}, {0x6, 0x1, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/227, 0xe3}, {&(0x7f0000001900)=""/142, 0x8e}, {&(0x7f00000019c0)=""/205, 0xcd}, {&(0x7f0000001ac0)=""/109, 0x6d}], &(0x7f0000001bc0)=[0x66, 0x100000001, 0xfffffffffffffffd, 0x0, 0x4, 0x1b, 0x3, 0x6, 0x1, 0xfffffffffffff8bb]}, {0x5, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/11, 0xb}, {&(0x7f0000001c80)=""/5, 0x5}, {&(0x7f0000001cc0)=""/4, 0x4}, {&(0x7f0000001d00)=""/47, 0x2f}, {&(0x7f0000001d40)=""/14, 0xe}], &(0x7f0000001e00)=[0x1, 0x6, 0x6]}, {0x6, 0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/249, 0xf9}, {&(0x7f0000001f40)=""/55, 0x37}, {&(0x7f0000001f80)=""/104, 0x68}, {&(0x7f0000002000)=""/16, 0x10}, {&(0x7f0000002040)=""/106, 0x6a}, {&(0x7f00000020c0)=""/8, 0x8}], &(0x7f0000002180)=[0x9a22, 0x63c, 0xfffffffffffffff9]}, {0x3, 0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000021c0)=""/198, 0xc6}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/4096, 0x1000}], &(0x7f0000004300)=[0x7ff, 0x3, 0x6ed6, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000006380)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/52, 0x34}], &(0x7f00000063c0)=[0x1, 0x0, 0x4, 0x3, 0x100000001, 0xfff]}, {0x1, 0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006400)=""/116, 0x74}], &(0x7f00000064c0)=[0xffffffffffffffff, 0x80000001, 0x7]}, {0x7, 0x1, 0x0, &(0x7f0000007880)=[{&(0x7f0000006500)=""/154, 0x9a}, {&(0x7f00000065c0)=""/98, 0x62}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/13, 0xd}, {&(0x7f0000007680)=""/111, 0x6f}, {&(0x7f0000007700)=""/225, 0xe1}, {&(0x7f0000007800)=""/97, 0x61}], &(0x7f0000007900)=[0x2]}, {0x6, 0x0, 0x0, &(0x7f0000008c40)=[{&(0x7f0000007940)=""/174, 0xae}, {&(0x7f0000007a00)=""/161, 0xa1}, {&(0x7f0000007ac0)=""/107, 0x6b}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/76, 0x4c}, {&(0x7f0000008bc0)=""/69, 0x45}], &(0x7f0000008cc0)=[0x80000000, 0xda]}], 0xa) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 28.951931917s ago: executing program 0 (id=1893): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) (async) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg/2:0:0:0\x00', 0x400000, 0x0) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg/2:0:0:0\x00', 0x400000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000006c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="080008000001060004000700480045170020006600004090780a010102ac1414124e264e20000c90782108000000"], 0x2e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x37}, 0x20) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_WAIT_FOR_RESUME(r9, 0x5523) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'veth0_macvtap\x00', 0x800}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'veth0_macvtap\x00', 0x800}) 28.93429929s ago: executing program 35 (id=1893): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) (async) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg/2:0:0:0\x00', 0x400000, 0x0) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg/2:0:0:0\x00', 0x400000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000006c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="080008000001060004000700480045170020006600004090780a010102ac1414124e264e20000c90782108000000"], 0x2e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x37}, 0x20) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_WAIT_FOR_RESUME(r9, 0x5523) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'veth0_macvtap\x00', 0x800}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'veth0_macvtap\x00', 0x800}) 6.78116924s ago: executing program 7 (id=2174): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x44080) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000300)={@local}, &(0x7f0000000380)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r14, 0x80585882, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r16, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000000000000080b2a201000000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c0002800600010002000000100003800c000100040000000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000054}, 0x20008004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d00)={&(0x7f0000001680)=@newtaction={0x680, 0x30, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{0x3ec, 0x1, [@m_connmark={0x1f0, 0xd, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd6d, 0x90, 0x1, 0x800, 0xa0f}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x9, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x47cfd106, 0x0, 0x2, 0x56}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x3, 0x1, 0x1}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7bf1, 0x80000001, 0x20000000, 0x9, 0x100}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x7, 0x7, 0x4}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd0c00, 0x2, 0x2, 0x8}, 0x2}}]}, {0xfb, 0x6, "e9189a4cefd29cc1c8e0616ce4e8673c769e83742dad2e75f346081f3823fb5a35ba3abb4ac33cf53aeb8042dd6a2a65b3ab810642f702faa33e35de06bc3a230c6bafda8a1af78817a0b06388c59b0346fb12b154923203cbb156afc71e09a3926dc045689528509c61e9c2c1eb14ad640003df02efd7667a3e6ede133766c3aefc5f9c7e6d073f95240fb2db0bd648afc565f8df35100c64f0e968ec21ba92601c4cd760680674f5002f13535f8aad0da599908c2378f4819669404215bffc4b73b02b9cf935fc48162baa7e3eb8d49bd49bc22b39af4a5d0a34da138a917cf808fee7823021c0baa53cb6bf23b5596b12d3457bb8db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xd4, 0x1f, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x400}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x3ff, 0x10000000, 0x8, 0x101}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x6be, 0x4, 0x6df1cc50, 0x4}}]}, {0x6e, 0x6, "7102658d27bf694de8083bf180c43706f2b373c2998589965bbc79ae42ed95ceaf67bd9943ccda08d191f2eca78371d7918388e45a62b839adb2dea1b8fc2b748f3667e9bcc1762f285c356bd63cd05a09228a8cf13dec3cb1947bbc45b76f05a7028e427c1eb0d3b2cd"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x124, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc6, 0x7, 0x8, 0x2, 0xfffffff9}, 0x2, r7}}]}, {0xd7, 0x6, "4f348e0e752d6a9033e812b944aa7e9d47bb5b28246b3e4af6b300ad2f06f96665ef249da067219a3e4c27cef879861e5d78154412a2f6f2c9075d8226d614b47a6ba736b87dad3f4b67788fb962254d3ad055ab91cbc8ffb01f4c7e8fe59cad746b30b0753a597fb30916cccdfb869062fa926a1dc25b8806a293d18e308817d402bc697dde0fb0632d26325b279cf9d43db13a7103d4462bbe0bb20db0914941815c00567398343e683b3d5c9253295f4a19e3142ec4cf989f58a6e1d3b6574adb3dd7b50bc91b15f64bc814c16b3c54aa71"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0x280, 0x1, [@m_mpls={0xe4, 0x14, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0xa5, 0x6, "57df67461ad78af16cc7534809f232344f65ceba2f5717895646d44aa95994576c461063a2145191d62b31beb0276ca9612fe19b03a11f5954d9ce8ca5acae0523d76301cbd65b5cdc70277eb77c3342a1eb5123d0eac55b6a6aafe0b95a62d3aa12c3397aa9207f68a1ee6a36b6fa921e0a5773660ab8955343f0c8667ba9df208bad3f7c485d21d73d2b44b58f67f6c2e6fe80da919d332ccd96c04bb789c2bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x198, 0x17, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x10001, 0x20000000, 0x6, 0x800}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x4, 0x4, 0xac74, 0x3ff}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x6, 0x4, 0x2, 0xffffffff}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe15, 0x6, 0x80, 0xffffd781}, 0x2, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x37, 0x5, 0x6, 0xff}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x8, 0x4, 0x4, 0x9}, 0x4}}]}, {0xaa, 0x6, "05a4ff8715cc5543588b713939e4702ff5f372f5ddd40df6388a54733bb5903de6e973e3cbbe3e3b40612eab28a826b56c669cffab87b7a122314b1c73ec94b75c597112f58a982737c113ebf4064775f201c1b824e1a7cba3acd034a9c9612067a1acf5ecafde098ec1263b37e578580324c688f328f82491161ac4101391fc6aa248c1a2c2d389c3fbe42092ef7d95a1bc6a4bd458d23f8df1e587deb6c5aeab5378d37eb9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x680}, 0x1, 0x0, 0x0, 0x90}, 0x20000054) ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x81}, 0x4c880) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a4da8c809214e20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r17, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f089066000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 5.820069929s ago: executing program 7 (id=2178): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x2, 0x0, 0x2}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000580)=[{0x1b, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x0, @svalue=0xc32}, {0x1, @svalue=0x40000000000000}, {0x0, @svalue=0x1}]}, 0x5}, {0x14, '\x00', @st={0x4, [{0x3, @uvalue=0x3a}, {0x3, @uvalue=0x1}, {0x1, @svalue=0xfffffffffffffff6}, {0x1, @uvalue=0x9}]}, 0xd}, {0x2f, '\x00', @st={0x4, [{0x0, @uvalue=0x7}, {0x0, @uvalue=0x6bb02165}, {0x0, @svalue=0x2000000001}, {0x2, @svalue=0x400}]}, 0x8}, {0x25, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x3, @svalue=0x55}, {0x2, @svalue=0x800}, {0x2, @svalue=0x1}]}, 0x4}]}) 5.815570077s ago: executing program 7 (id=2179): syz_usb_connect$hid(0x3, 0x7, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc51b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x69, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xfd) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) fchdir(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40095505, 0x0) 5.249614895s ago: executing program 7 (id=2182): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = fanotify_init(0xf01, 0x8000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x164) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) 4.190734457s ago: executing program 4 (id=2201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ffffffffffd) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000480)={0x9f63422128930805, 0x0, {[0x6, 0xffffffffffffff00, 0x4, 0x5, 0xc, 0x6, 0x7, 0x100000008000]}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2400}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200400c4) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000380)={[0xe000, 0x2, 0x1, 0x7000], 0x3, 0x40, 0x4}) 3.82049995s ago: executing program 4 (id=2206): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0xd, @win={{0xd, 0x7f, 0x9c3, 0x5}, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)) 3.731486348s ago: executing program 4 (id=2207): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf251900000008000300f656f6ce2ff246871da077ee6dfcad4d104a318ea869c4f3a99d8d565ebd74680c61c4b2855baf519e4c63670bc9118c67661c1cafe112bc7db01f9b0390153b12b550b2416d427fed5012dab2f7975019b13547", @ANYRES32=r3, @ANYBLOB="05001e000d000000"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4000884) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r5, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x1b, 0x9, "4b8b3ea40100dfed0b48e5094d1a00dd5a1f25cecfe0f4fcdf997dd52115fac256cf0000000000000400000000000000000000000000000000edff00", "eaabbd496e090000e3000000060025de30ad375f240500", [0x1000000000000911, 0xe]}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x66, 0x7c}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x24000004) (async) ioctl$LOOP_CLR_FD(r5, 0x4c01) 3.670223089s ago: executing program 6 (id=2208): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003a00290200000000fadbdf250200000004"], 0x18}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000080)=0x20002, 0x4) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) recvmmsg(r8, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x58}], 0x1, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(r7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000009060003000000000000000007000001800008800c000780060004404e2300000c0007800800084000000001100007800c00028008000140e00000020c00078008000adf073e2608100007800c0018400000000000000027100007800900120073797a31000000000c00078008000a4000000002100007804c00194000000000000000080c00078008001c4000000009"], 0x94}, 0x1, 0x0, 0x0, 0x24000091}, 0x8004) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a141000001100010000000000000082000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0xfeb1}}, 0x48) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.669626656s ago: executing program 4 (id=2209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pI4 \x00'}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="b62e0000020600000000000000000000000000070500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000380)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000740)=ANY=[@ANYBLOB="6e004017002c00822679ba21afbe5868b55f6c787b3792bf11709da518055fed"]) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="440e06e920d7c30900"], 0x9) connect$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7041, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000005c0), 0x4) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.419379324s ago: executing program 6 (id=2213): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @address_request}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r4, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000240)='%', 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000000c0)={'veth0_to_bridge\x00', @multicast}) 3.31011388s ago: executing program 2 (id=2215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="e58e2508a29b0a6cc66888dd8866c147ffd70157e7dd", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44010) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00121100631177fbac141416e000030a44079f03fe8000000000000000000000000000222f050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r5, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7ff, 0x20}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)={0x8040, 0x102, 0x3}, 0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 3.220605559s ago: executing program 2 (id=2216): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3.219977219s ago: executing program 2 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xc8, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "16e1d5e39b8a1a28a0388be1f5919c0d723bf195e61780eebf06694cba43"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8050}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x30, r3, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c4}, 0x40) 3.150768048s ago: executing program 2 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3fffff) sendmmsg$alg(r1, &(0x7f0000002140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)="23b2e400b0c009ff4072914d2ab8bfc407337cf30b92ed40eb329004d287ad86976a559b29ab23dcb42d91d477ba80607b29d9687c35460c36ec575290ac7736162fe415063cee5560c8c8d3c8e01bbaec4d4fa74e95e9a8ec48fe6e1c0a6b732c6881e16635f84a1a596f52ca8bc2801b26d5e222dc0dee30f482c8633c5f1fca89a8baac74eb879f4b7f61c4df8ea9624694bbce924154f04c3f24da78ef2589866aa979252a01565883cde8e8999b9069732c2fa71598b4ddb02fde93bf93188f3250555a2184154c14a18382762a20e2dfb13a51b59d99f597d119697db6", 0xe0}], 0x2, &(0x7f0000001540)=[@op={0x18}, @assoc={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "8cfe3d606a2cfbe9894db331733835528c43d063fe"}, @assoc={0x18, 0x117, 0x4, 0xdc}, @iv={0x18}, @iv={0xd8, 0x117, 0x2, 0xbe, "94a3034317521a1897b4c5044f7e64b075e3e1c8c6559e871f2da75202c2cb20ec3b72691b331e31f573f3fa931f04f53a81837abcffb7f49d2fc48048bc4988b44ad2efd53b7a50de719ae5ef890745376234601ba287ccaa77524e27cb8a3a151eee664d0561a12f90599f149b87dbd8e209c8ee6c6618c02a8636db0d3a6a18ab65c8d90f9953503e978fa2c91049a330f0b05028106d6d6c97564d46c28699939874af449f1501725f307bb51ded667e4ff3576c7743c9b03a37d2dc"}, @iv={0x70, 0x117, 0x2, 0x56, "7ffcd11dee369765e2b1fe91c143169685cf9e4126ed227c5161f4b0a501a703015bcf5f996f0de3f4c9001b318fae95fe018671344764315877292bd0165fac5fa6dcf802f7ec90c41146924c09bb2f45e60958b840"}, @assoc={0x18, 0x117, 0x4, 0xc1a6}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}], 0x220, 0x24000005}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="22ba8d9bf3439984ba82d2b66d5a606b6e2e89640bdcef16ad0b9d092a59aaf7bd833842f522a006d517d17dffffd5be36e0d63eca11420132f275a74ad9ff90c5604355174fd52458bd6a50d7fe6df13c1e7f1fe7531d3ad76126181fb34a8f175ff1f2c5da583d700fdb897702c979ae436800c891beca9e0e68ccfd22", 0x7e}, {&(0x7f0000001880)="f3cf885b5ce18760f90c2ced99569c66020303f4e759bd3ab6f929c23fa7f407d8d2651811f332732c4756ca511a392c6c507d2686d0b5f2f3dacbdd639cac9b03dbc5a5161f2512f7930fec37bc446049b002b9c8610d4e0b8e13478870b32fe86d6a979ba6f2aed890715f1c177e913de4887fc2daa1a1757910d5549424617719d6db31cee842c94c79964c29dcc1f21d8b25ecbc5dd9a291f3f432ec5e2a03d28da7222f0a2e45bf630d7ad80ea73366190bbc783f8df44578cf01c2a0df221b48a8e5456133276569a1def80485ffe1c6cfd34f8d19f6ec2e", 0xdb}, {&(0x7f0000001a40)="b67af069520fbc8f978ab5d3c0fd0e3c51d44ec22652e07de0091b862dd89ece54b4c462566615961f6bce9fc16b12be3872b4d6d9514ac948a020249362c9a791077eae69cbcdf7f2108af490b96409b83daa08c3166939049fe099deac1797dcc0c5ffe9f1d6ca70caf3653afc5918ba9a01822ab8fd829669dba8ce46be14168db6c9acd4d7b798a5b4ed4012d849b3c9c66d3c09d8c293142a29f2660fc21825953e3f58de5b4aae846a4311f08524d3f7751a5d4c66154d", 0xba}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="268d48df775073ded7b3800e47f76764fc5a4bd1522c07da5b7c38857c40f15d1bbe129ad50a6858090febad5989318b29e50455742efed23da328bffe1aa805fad40c91b849", 0x46}, {&(0x7f0000001bc0)="f7da98852dad5c04348a022c68a817c812e175ea9b6ba28399b60aed29266e22050a71fb91cfbbe3b0879e95bde908ce5437a3134304f420172f9dce9e6ea6aa137b6a11e17691462029c5c77ab0a0687e33", 0x52}, {&(0x7f0000001c40)="aef1f4ad6a89de879a84e390750896689d5a7a1991b9bd942d95f14e9edeb07fbacc508b9c2c864dfd0b36c05b81f3438049ee84761265c528934d3d895048a7ad9d2028aebc1b317c72790de0820efb5f057d8aec700c8cc92c3dbf", 0x5c}], 0x3, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="4859f89a7bdc8cd86371d15e392b157f4d2c91e49b8c8cc6737321ac84faef1c25c9b11cc969ce1f0ddc9ebfc2c6c631aca1dfa28c7690b52cb791fd965e080182638bcd78f2b7ad2d3b269c74c13274473d536887ef4e3c2750d2ab11ad0a4af0784b17c8947027827b7cd9c179b38818f139421b4c8635d419d9ad524c81928428f8a1228056c86f", 0x89}], 0x1, 0x0, 0x0, 0x4004080}, {0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001e00)="2bdd11cf0c361ef52b751be664a98343da2850e22404b5086b5f0f2f61f9c7fa858b8b20a67c422f981489720afb945f42ef8701aa165a3a2e0bdb5d09b38460033b90985e41a3c34da1c0673722abd87518b313db54b6aec9cc10769334539944e34362d1f2ac198f86745e03764bc4ceb917d006b4714b5faa3df5b26ea2", 0x7f}, {&(0x7f0000001e80)="9476c404b770a2d521b05fbde98e7ff9eb103c90478d54dde6aa0a8d60a006ddb17a109b134419290c6baa10757028fd72ced188bdc24fdabe1844f60c", 0x3d}, {&(0x7f0000001ec0)="5398e5f556854bd0eceba887f9a2feb2", 0x10}, {&(0x7f0000001f00)="8275f58b0926af2f3a1c5086421a83c374c64bc374a7756c3a298e08ab258924ba44261249287a2bd500929ee2966e478b5e1fd5f00cb4ffcf0dafe7d4f4dae2edac089096179e7f1ab3716d019772e82f75b19a3b1af2dfe8975db76e935a74dd1f55729c09aa8a3a9863fdb195321425816b1ba49c217e32794bdab4dbf81791000620fb93b5", 0x87}, {&(0x7f0000001fc0)="895f0f9d96a4515d4c1667278a8f24ee102d717935b06fd05c984953c4eaa0a2d112cbc44d906236658edff32b7a2880077652d1e2b44d55ff17507242d80d7904bffb6b641d1d135689b3e36434f7fd6c2cd00aee39e918c16fc462bc4932d555c564effb162a81583d2c67977cb6c76beca326d2e512863a20d75cb25f1ca9a627f9a2092e503491bef5d845bd0bd8dc134d084b2f645368d839045da224cc272466b4270c8845119f05", 0xab}], 0x5, &(0x7f0000002100)=[@assoc={0x18, 0x117, 0x4, 0xba5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40000}], 0x5, 0x90) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x34, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000007fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@fd={0x6, 0x1, 0x4, 0x800, 0xc, {}, {0x4, 0x1, 0xc, 0x3, 0xfb, 0x2}, 0x1, 0x4, {}, 0xfffffffb}) recvmmsg$unix(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000023, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) ppoll(&(0x7f00000004c0)=[{r6, 0x6049}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404a0d0}, 0x10000) 3.051423739s ago: executing program 2 (id=2219): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000720000/0x2000)=nil, 0x2000, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000200)=""/144, 0x90}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) pread64(r4, &(0x7f0000000240)=""/164, 0x131, 0x131) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000080)) r7 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000380), &(0x7f00000002c0)=r7}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x8, &(0x7f0000000180)=[{0xbe3, 0xb, 0x6a, 0x800000}, {0x5, 0xc, 0x6, 0x9}, {0x3fd9, 0x7f, 0x4, 0xb}, {0x7ff, 0x3, 0x3, 0x4}, {0x8, 0x3, 0xb, 0x7fff}, {0x8, 0x4f, 0x1, 0x57}, {0x7fff, 0x8, 0x5, 0x5}, {0xbc8, 0x7, 0x3, 0x58}]}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f50014068720010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="328c50c24784039e"], 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) 2.760974527s ago: executing program 4 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r4 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r7 = mq_open(&(0x7f0000000000)=']\x00', 0xc1, 0x62, &(0x7f0000000080)={0x8001, 0x5, 0x3, 0x9}) ppoll(&(0x7f00000000c0)=[{r7, 0x24}, {r6, 0x2220}, {r6, 0x8180}, {r6, 0x31}], 0x4, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x49]}, 0x8) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x106, 0x3}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0x1, 0x1, 0x7}}) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0x4}) 2.550311674s ago: executing program 6 (id=2221): syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000e40)={0xa, 0x4e22, 0x6, @empty}, 0x1c, 0x0}}], 0x1f, 0x4008840) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 2.350947002s ago: executing program 6 (id=2222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.349943231s ago: executing program 6 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000000"], 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) readahead(r9, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0425bd7000ffdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="06006d009c050000102448cda5a4dc45f64b716eeb71edb40b4204973562448fcad59c3950b9546b1218f57d524f8d2c334f552d74b84b10f85ba29e404af4e93dd8e795da4f9153b203bcc1a2d077097a3bc1b5cb61f641d61c74edb79e55c374da2045913c738a5315bc6189edaf705328ed85acc3ad4b6415ab54b824033677463889ae1cf752a124b47cd48f7aadeea769c7e0a7e8994f858982130dbb58239701eaf3206646206f9ee03267627fb46dec654e907029594d24b593bfaee73c40ae97fcfd401160e16878735dea6fe7"], 0x24}, 0x1, 0x0, 0x0, 0x28080800}, 0x4004000) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f238e0f017b0d0f090f01c9baf80c66b808da738966efbafc0cec0f01cb0f20e035200000000f22e0260f01c5dc2e008066b97a0b00000f32", 0x39}], 0xaaaab65, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) r15 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r15) (async) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000040)=0x7}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000"], 0x248}}, 0x0) 2.05146051s ago: executing program 7 (id=2224): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x32000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c"], 0x11) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x15e) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 1.981534045s ago: executing program 7 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc00e}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 776.131µs ago: executing program 4 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x30, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r1, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) 311.636µs ago: executing program 6 (id=2227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xd, 0x200000100, 0xffffffffffffffff, 0x70000000, 0x4a, 0x5, 0x100, 0xe, 0xdd, 0x5, 0x1, 0x10000002a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x13, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x405, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x500, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=2228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x75a9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x9c}}, 0x8008006) 0s ago: executing program 2 (id=2229): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x4000000040003e4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x1}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xa2000, 0x0) lseek(r4, 0xca, 0x3) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x2}, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000340)={0x28, 0x0, r5, 0xcc, &(0x7f0000000500)=""/204}) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): h result -19 [ 180.015470][ T5751] Bluetooth: unknown link type 64 [ 180.017308][ T5751] Bluetooth: hci2: connection err: -111 [ 180.174178][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.177292][T11029] program syz.5.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.179068][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.195383][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.210134][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.215062][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.230137][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.241608][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.246398][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.250895][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.255520][T11024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 180.257390][T11036] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 180.263271][T11036] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.268061][T11036] vhci_hcd vhci_hcd.0: Device attached [ 180.288591][T11037] vhci_hcd: connection closed [ 180.299596][ T3552] vhci_hcd vhci_hcd.5: stop threads [ 180.306391][ T3552] vhci_hcd vhci_hcd.5: release socket [ 180.309117][ T3552] vhci_hcd vhci_hcd.5: disconnect device [ 180.316049][T11044] syz_tun: entered allmulticast mode [ 180.384528][T11048] pim6reg: entered allmulticast mode [ 180.404029][T11048] syz_tun (unregistering): left allmulticast mode [ 180.426940][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.434076][T11046] mtd: partition "" is out of reach -- disabled [ 180.477741][T11046] ftl_cs: FTL header not found. [ 180.545901][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.549444][T11046] mtd: partition "" is out of reach -- disabled [ 180.565230][T11046] ftl_cs: FTL header not found. [ 180.614642][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.618240][T11046] mtd: partition "" is out of reach -- disabled [ 180.651026][T11046] ftl_cs: FTL header not found. [ 180.697005][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.713846][T11046] mtd: partition "" is out of reach -- disabled [ 180.727681][T11046] ftl_cs: FTL header not found. [ 180.762588][T11064] binder: 11063:11064 unknown command 0 [ 180.770766][T11064] binder: 11063:11064 ioctl c0306201 200000000480 returned -22 [ 180.813539][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.816061][T11046] mtd: partition "" is out of reach -- disabled [ 180.832743][T11046] ftl_cs: FTL header not found. [ 180.858738][T11067] xfrm1: entered promiscuous mode [ 180.861245][T11067] xfrm1: entered allmulticast mode [ 180.867219][T11069] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 180.869487][T11067] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.870722][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.870751][T11046] mtd: partition "" is out of reach -- disabled [ 180.884262][T11067] use the actual size instead. [ 180.886746][T11046] ftl_cs: FTL header not found. [ 180.944750][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.949587][T11046] mtd: partition "" is out of reach -- disabled [ 180.962235][T11046] ftl_cs: FTL header not found. [ 180.989875][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 180.992258][T11046] mtd: partition "" is out of reach -- disabled [ 180.999647][T11046] ftl_cs: FTL header not found. [ 181.023749][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 181.027798][T11046] mtd: partition "" is out of reach -- disabled [ 181.037654][T11046] ftl_cs: FTL header not found. [ 181.084379][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 181.089071][T11046] mtd: partition "" is out of reach -- disabled [ 181.103960][T11046] ftl_cs: FTL header not found. [ 181.135023][T11046] 0xfffffffffffffffd-0x000000020000 : "" [ 181.139920][T11046] mtd: partition "" is out of reach -- disabled [ 181.166224][T11046] ftl_cs: FTL header not found. [ 181.327602][T11102] __nla_validate_parse: 5 callbacks suppressed [ 181.327626][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 181.336327][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 181.345810][T11102] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 181.400807][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 181.400830][ T40] audit: type=1400 audit(1779081655.415:1364): avc: denied { getattr } for pid=11108 comm="syz.2.1450" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=43545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.444129][T11114] netlink: 'syz.2.1451': attribute type 12 has an invalid length. [ 181.547885][T11126] binder: 11125:11126 ioctl 800454e1 200000000580 returned -22 [ 181.840610][ T39] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 181.992235][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.997192][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.001355][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.007174][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.011533][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.017353][ T39] usb 9-1: config 0 descriptor?? [ 182.063571][T11136] fuse: Bad value for 'fd' [ 182.152440][T11150] fuse: Bad value for 'fd' [ 182.154847][T11151] random: crng reseeded on system resumption [ 182.252639][T11156] syzkaller0: entered promiscuous mode [ 182.254725][T11156] syzkaller0: entered allmulticast mode [ 182.260606][ T1164] 0: reclassify loop, rule prio 0, protocol 800 [ 182.464999][ T39] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.611486][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=11182 comm=syz.0.1470 [ 182.663156][T11187] tmpfs: Unknown parameter 'usrquotaß' [ 182.682211][T11191] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 182.691562][T11191] netlink: 'syz.2.1473': attribute type 33 has an invalid length. [ 182.695655][T11191] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1473'. [ 182.716554][T11128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 182.788147][ T40] audit: type=1400 audit(1779081656.805:1365): avc: denied { map } for pid=11201 comm="syz.2.1477" path="pipe:[45377]" dev="pipefs" ino=45377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 182.913005][T11204] autofs4:pid:11204:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 182.918149][T11204] autofs4:pid:11204:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 182.982525][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 183.116462][ T40] audit: type=1400 audit(1779081657.135:1366): avc: denied { read write } for pid=11220 comm="syz.5.1482" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.130777][ T40] audit: type=1400 audit(1779081657.135:1367): avc: denied { open } for pid=11220 comm="syz.5.1482" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.140102][ T40] audit: type=1400 audit(1779081657.145:1368): avc: denied { ioctl } for pid=11220 comm="syz.5.1482" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.264827][ T40] audit: type=1400 audit(1779081657.285:1369): avc: denied { ioctl } for pid=11212 comm="syz.0.1481" path="socket:[46092]" dev="sockfs" ino=46092 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.340391][T11231] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1485'. [ 183.601793][ T5751] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 183.633289][ T5751] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 183.642417][ T5751] Bluetooth: hci0: Injecting HCI hardware error event [ 183.646772][ T5751] Bluetooth: hci0: hardware error 0x00 [ 183.703362][T11242] loop5: detected capacity change from 0 to 7 [ 183.713845][T11242] Dev loop5: unable to read RDB block 7 [ 183.719498][T11242] loop5: unable to read partition table [ 183.722980][T11242] loop5: partition table beyond EOD, truncated [ 183.727823][T11242] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.754074][T11250] 9pnet_virtio: no channels available for device 127.0.0.1 [ 183.788194][T11242] Dev loop5: unable to read RDB block 7 [ 183.792779][T11242] loop5: unable to read partition table [ 183.800717][T11242] loop5: partition table beyond EOD, truncated [ 183.803541][T11242] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.088388][ T40] audit: type=1400 audit(1779081658.105:1370): avc: denied { create } for pid=11261 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 184.110494][ T39] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.260620][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 184.266263][ T39] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.275993][ T39] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.279762][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.283633][ T39] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.287151][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.291716][ T39] usb 5-1: config 0 descriptor?? [ 184.483051][ T5519] usb 9-1: USB disconnect, device number 3 [ 184.709357][ T39] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 184.715067][ T39] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 184.717902][ T39] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 184.720706][ T39] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 184.723354][ T39] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 184.726053][ T39] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 184.729970][T11282] ref_ctr increment failed for inode: 0x83d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880378324c0 [ 184.910891][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 184.915975][ T5843] usb 5-1: USB disconnect, device number 18 [ 185.472437][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1503'. [ 185.509168][T11291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11291 comm=syz.0.1503 [ 185.718097][ T5751] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 187.196814][T11267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.362469][ T40] audit: type=1400 audit(1779081661.375:1371): avc: denied { listen } for pid=11319 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.380665][ T40] audit: type=1400 audit(1779081661.375:1372): avc: denied { accept } for pid=11319 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.477279][ T40] audit: type=1400 audit(1779081661.495:1373): avc: denied { getopt } for pid=11319 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.622169][T11336] cgroup: noprefix used incorrectly [ 187.685101][T11344] xt_hashlimit: size too large, truncated to 1048576 [ 187.821163][T11352] mmap: syz.5.1520 (11352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.895091][T11357] openvswitch: netlink: Invalid VLAN frame [ 187.968293][T11359] bond2: (slave bond_slave_1): Device is not our slave [ 187.971575][T11359] bond2: option active_slave: invalid value (bond_slave_1) [ 187.977272][T11359] bond2 (unregistering): Released all slaves [ 188.098151][T11362] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 188.103561][T11362] SELinux: failed to load policy [ 188.496002][T11384] loop2: detected capacity change from 0 to 7 [ 188.505797][T11384] Dev loop2: unable to read RDB block 7 [ 188.510870][T11384] loop2: unable to read partition table [ 188.513182][T11384] loop2: partition table beyond EOD, truncated [ 188.515652][T11384] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 188.632694][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 188.640020][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 188.643445][ T40] audit: type=1400 audit(1779081662.665:1374): avc: denied { getopt } for pid=11385 comm="syz.5.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 188.652485][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 188.655598][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 188.746601][ T40] audit: type=1400 audit(1779081662.765:1375): avc: denied { setopt } for pid=11397 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.791304][ T40] audit: type=1400 audit(1779081662.805:1376): avc: denied { listen } for pid=11397 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.860462][ T846] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 188.915100][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 188.917613][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 188.936064][T11413] fuse: Bad value for 'fd' [ 188.983738][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 188.985731][ T40] audit: type=1400 audit(1779081663.005:1377): avc: denied { mounton } for pid=11410 comm="syz.4.1538" path="/103/file0" dev="gadgetfs" ino=7439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 188.989150][T11417] netlink: 'syz.4.1538': attribute type 8 has an invalid length. [ 188.999634][T11416] fuse: Bad value for 'fd' [ 189.024532][ T846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.030379][ T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.038168][ T846] usb 5-1: Product: syz [ 189.039644][ T846] usb 5-1: Manufacturer: syz [ 189.041200][ T846] usb 5-1: SerialNumber: syz [ 189.064139][ T846] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 189.080941][ T5519] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.285312][ T5843] usb 5-1: USB disconnect, device number 20 [ 189.407595][T11386] ceph: No mds server is up or the cluster is laggy [ 189.431000][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 189.433588][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 189.789484][T11435] SELinux: ebitmap: start bit 0 comes after start bit 768 [ 189.797388][T11435] SELinux: failed to load policy [ 189.909589][T11442] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 190.120430][ T5519] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 190.126779][ T5519] ath9k_htc: Failed to initialize the device [ 190.134919][ T5843] usb 5-1: ath9k_htc: USB layer deinitialized [ 190.416560][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.436916][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.456506][ T40] audit: type=1400 audit(1779081664.475:1378): avc: denied { write } for pid=11463 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.491432][ T40] audit: type=1400 audit(1779081664.515:1379): avc: denied { read } for pid=11463 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.650807][ T5843] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 190.812341][ T5843] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.821464][ T5843] usb 9-1: config 0 has no interface number 0 [ 190.828005][ T5843] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 190.837556][ T5843] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 190.846986][ T5843] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.851102][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.855773][ T5843] usb 9-1: config 0 descriptor?? [ 190.860438][T11464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.887714][ T5843] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.888899][ T40] audit: type=1400 audit(1779081664.905:1380): avc: denied { map } for pid=11474 comm="syz.5.1559" path="socket:[44566]" dev="sockfs" ino=44566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 191.136104][ T5843] usb 9-1: USB disconnect, device number 4 [ 191.247585][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 191.256693][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 191.256793][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 191.805738][T11494] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 191.921303][T11496] kvm: kvm [11495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 191.926087][T11496] kvm: kvm [11495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 192.158207][T11500] netlink: 'syz.5.1566': attribute type 1 has an invalid length. [ 192.193689][T11504] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1567'. [ 192.217246][T11500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.268053][T11506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.273506][T11506] bond2: (slave xfrm2): The slave device specified does not support setting the MAC address [ 192.279309][T11506] bond2: (slave xfrm2): Error -95 calling set_mac_address [ 192.295790][T11504] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 192.314001][T11451] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1552'. [ 192.496260][ T40] audit: type=1400 audit(1779081666.505:1381): avc: denied { lock } for pid=11512 comm="syz.5.1570" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.522197][T11511] syzkaller0: left promiscuous mode [ 192.524677][T11511] syzkaller0: left allmulticast mode [ 192.541710][T11511] syzkaller0: create flow: hash 736707434 index 2 [ 192.654290][T11510] syzkaller0: delete flow: hash 736707434 index 2 [ 192.722323][ T46] syzkaller0: tun_net_xmit 76 [ 192.727420][ T46] syzkaller0: tun_net_xmit 48 [ 192.752602][ T5813] syzkaller0: tun_net_xmit 76 [ 192.770882][ T5813] syzkaller0: tun_net_xmit 76 [ 193.006537][T11534] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1577'. [ 193.104950][T11536] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1578'. [ 193.180184][T11543] 0: reclassify loop, rule prio 0, protocol 800 [ 193.222404][ T5813] syzkaller0: tun_net_xmit 76 [ 193.342358][T11556] 9pnet_virtio: no channels available for device 127.0.0.1 [ 193.417697][T11563] Bluetooth: MGMT ver 1.23 [ 193.568483][T11575] dvmrp1: entered allmulticast mode [ 193.719474][T11586] overlayfs: failed to clone upperpath [ 193.720037][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'. [ 193.758284][T11589] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 193.782144][T11589] bond10: entered promiscuous mode [ 193.784489][T11589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 193.857965][T11598] xt_hashlimit: invalid interval [ 193.866447][T11600] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 193.951293][T11597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.422871][ T231] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.426125][ T231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.535919][T11634] xt_l2tp: v2 doesn't support IP mode [ 194.549310][T11635] fuse: Bad value for 'fd' [ 194.620398][ T40] audit: type=1400 audit(1779081668.635:1382): avc: denied { watch } for pid=11641 comm="syz.5.1608" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 194.639677][T11642] random: crng reseeded on system resumption [ 194.640482][ T40] audit: type=1400 audit(1779081668.645:1383): avc: denied { watch_sb watch_reads } for pid=11641 comm="syz.5.1608" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 194.661112][ T40] audit: type=1400 audit(1779081668.675:1384): avc: denied { read write } for pid=11645 comm="syz.0.1609" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.680483][ T40] audit: type=1400 audit(1779081668.685:1385): avc: denied { open } for pid=11645 comm="syz.0.1609" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.700394][ T40] audit: type=1400 audit(1779081668.695:1386): avc: denied { ioctl } for pid=11645 comm="syz.0.1609" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.721356][T11648] openvswitch: netlink: VLAN attribute unexpected. [ 194.745004][T11650] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.1611'. [ 194.790963][ T46] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.796684][ T46] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.805239][ T46] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.809875][ T46] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.941188][T11656] lo speed is unknown, defaulting to 1000 [ 194.963449][ T40] audit: type=1400 audit(1779081668.985:1387): avc: denied { write } for pid=11657 comm="syz.5.1613" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 194.964848][T11658] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 194.980583][ T40] audit: type=1400 audit(1779081668.985:1388): avc: denied { ioctl } for pid=11657 comm="syz.5.1613" path="/78/file0/file0" dev="fuse" ino=3 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 195.047738][ T846] IPVS: starting estimator thread 0... [ 195.051101][T11664] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 195.059790][T11664] CIFS: VFS: Malformed UNC in devname [ 195.115675][T11670] __nla_validate_parse: 2 callbacks suppressed [ 195.115699][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1617'. [ 195.155013][T11665] IPVS: using max 42 ests per chain, 100800 per kthread [ 195.437569][T11697] 9p: Bad value for 'rfdno' [ 195.521542][T11706] overlayfs: overlapping lowerdir path [ 195.598435][T11718] netlink: 888 bytes leftover after parsing attributes in process `syz.0.1630'. [ 195.605805][T11718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1630'. [ 195.990457][ T5843] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.049098][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 196.053015][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 196.150843][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 196.154048][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.158281][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.162012][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.166167][ T5843] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 196.169226][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.175159][ T5843] usb 5-1: config 0 descriptor?? [ 196.382715][T11761] netlink: 'syz.5.1643': attribute type 1 has an invalid length. [ 196.408774][T11761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.478194][T11761] bond3: (slave veth3): Enslaving as an active interface with a down link [ 196.578070][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 196.625282][T11769] sctp: [Deprecated]: syz.5.1645 (pid 11769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.625282][T11769] Use struct sctp_sack_info instead [ 196.647432][T11774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11774 comm=syz.2.1646 [ 196.696176][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1647'. [ 196.752347][T11782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11782 comm=syz.5.1648 [ 196.762962][T11784] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.764384][T11784] @0Ù: renamed from bond_slave_1 [ 196.821790][T11786] loop9: detected capacity change from 0 to 7 [ 196.846102][T11733] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1635'. [ 196.847934][ C0] blk_print_req_error: 26 callbacks suppressed [ 196.847961][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.856661][ C0] buffer_io_error: 25 callbacks suppressed [ 196.856679][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.863361][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.867704][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.871476][ T5843] usbhid 5-1:0.0: can't add hid device: -71 [ 196.876598][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.879029][ T5843] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.881057][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.885238][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.891302][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.895819][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.898887][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.899892][ T5843] usb 5-1: USB disconnect, device number 21 [ 196.901687][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.907204][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.910186][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.913266][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.918605][T11786] ldm_validate_partition_table(): Disk read failed. [ 196.921990][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.925143][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.928115][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.931943][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.935669][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.936907][T11793] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.938860][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.946572][T11786] Dev loop9: unable to read RDB block 0 [ 196.951431][T11786] loop9: unable to read partition table [ 196.954300][T11786] loop9: partition table beyond EOD, truncated [ 196.959955][T11786] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 196.984765][ T40] audit: type=1400 audit(1779081671.005:1389): avc: denied { map } for pid=11799 comm="syz.4.1655" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 197.071019][ C3] syzkaller0: tun_net_xmit 48 [ 197.164841][T11817] overlayfs: failed to clone upperpath [ 197.247704][T11827] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 197.259709][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.265893][T11827] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 197.324917][T11833] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 197.526713][T11838] program syz.0.1669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.714682][T11848] lo speed is unknown, defaulting to 1000 [ 197.735727][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.741903][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.745014][ T40] audit: type=1400 audit(1779081671.765:1390): avc: denied { mounton } for pid=11847 comm="syz.5.1672" path="/bus" dev="bpf" ino=46788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 197.748231][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.751567][T11857] overlayfs: upper fs does not support tmpfile. [ 197.762485][T11857] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1672'. [ 197.765659][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.765735][T11857] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1672'. [ 197.776946][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.780824][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.785790][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.829666][ T40] audit: type=1400 audit(1779081671.845:1391): avc: denied { checkpoint_restore } for pid=11861 comm="syz.5.1675" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.997479][T11874] team0: Device gtp0 is up. Set it down before adding it as a team port [ 198.200496][ T7756] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 198.370756][ T7756] usb 5-1: Using ep0 maxpacket: 8 [ 198.377264][ T7756] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 198.383892][ T7756] usb 5-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 198.387084][ T7756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.391265][ T7756] usb 5-1: Product: î›¹ì¢¥ç„­ì¾‡ä®æ¨¬é·¨â¼­æ’•ւ彿±ä­•æ¥í—Šï†™ä¼½ä™£ï¶±ì‹Šé³¿ç‰ˆá„´åŽ›ì™ºç†¢â¼»ê®œä¶…å’£â“†åª¾á‹’è¬™å­¬ï£¨ç·—ç©„á½…ç”«ã—®ï ‹î¹¾í…Žç¾žæƒá¥ì²’î™ï´ƒé·»è‘‡ï‘获ꞻᔣỨ섖༘蚕楴 [ 198.397885][ T7756] usb 5-1: Manufacturer: 鯮鴅塎絧⟄労æ¯ì­‰å¿…ã°ï´„枔Ⲷ瓭瞈âŸâ£’鷒䘭ഴ豷å‰î”›ê‰¤ê¼¨è«˜æ³¤íŸ­â›˜æ‡Œïµ”ꖰ䓜ḿ䮰䨎â†ä¡³ÃŽâ½œî¡›à»„㙳쮓쌔ᵞ﫵ᲅ䀯ᔬủ뽷ë’宜ä‚─ⳕ矒⋋ë¬ê²«ê¡ªä…”摠楡Ƛ仢濨ᓮæºå”±â˜“厵뿑뇢‱♻쑮䔫ﻮ〇ȅå¾ã¨¢ëºœê¯›èŠ Ø  [ 198.408933][ T7756] usb 5-1: SerialNumber: ⇺뫾粰랺íŠè¤²ãŽ²ä¬šï¬¶è–¼ë½Œè‡µâ ´è­‘â—Œì§€ë‘©ç“ºë¯‘ê®¯ç®©ë™¬ê뫪⥸쩹é§è”§êŽ¥åµ·à ¿ê´˜ç—·èº³Ç™é³á°¼æ‰—똶쪔㠨ꪡ喨꣥é¬ì•¶ä•㬉ꪅ軦絶êµè¹¾åŸ¨êœ—㲺⚄ⱇ튭êµã‡ƒê™£ê¼•ഽﴟ椙඀鰧뵓ᾟ꿽喌鬮䑦ệ颟çžä‡„ç§ÜŠì¸˜ã¾§è’‰è‹«æ°¢áŒ±ê‰»h殺龳ꜻ㼢 [ 198.681430][ T7756] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 198.686405][ T7756] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 198.722297][ T7756] usb 5-1: USB disconnect, device number 22 [ 198.745645][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.783842][T11893] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 198.786376][T11893] binder: 11892:11893 ioctl 4018620d 200000004a80 returned -1 [ 198.835350][T11897] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 199.085126][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.097302][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.101031][T11911] tc_dump_action: action bad kind [ 199.109197][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.113585][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.117440][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.150269][ T40] audit: type=1400 audit(1779081673.165:1392): avc: denied { append } for pid=11906 comm="syz.4.1690" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 199.424927][T11905] lo speed is unknown, defaulting to 1000 [ 199.560515][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.564246][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.605554][T11941] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 199.796947][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.800616][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.803683][T11905] bridge_slave_0: entered allmulticast mode [ 199.807119][T11905] bridge_slave_0: entered promiscuous mode [ 199.811072][T11954] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.814231][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.818916][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.822983][T11905] bridge_slave_1: entered allmulticast mode [ 199.827160][T11905] bridge_slave_1: entered promiscuous mode [ 199.843932][T11954] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 199.856452][T11954] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.859477][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.865061][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.870495][T11954] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 199.892200][T11905] team0: Port device team_slave_0 added [ 199.895911][T11905] team0: Port device team_slave_1 added [ 199.911017][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.914575][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.924386][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.929212][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.931690][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.940883][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.978672][T11905] hsr_slave_0: entered promiscuous mode [ 199.981476][T11905] hsr_slave_1: entered promiscuous mode [ 199.983812][T11905] debugfs: 'hsr0' already exists in 'hsr' [ 199.985809][T11905] Cannot create hsr debugfs directory [ 200.125458][T11905] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.132774][T11905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.136441][T11905] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.143833][T11905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.148395][T11905] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.153386][T11905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.156707][T11905] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.165209][T11905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.190569][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.193130][T11905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.195839][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.198223][T11905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.244306][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.252419][ T1205] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.255800][ T1205] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.267622][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.276498][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.278910][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.286509][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.289747][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.405429][T11980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.482221][ T40] audit: type=1400 audit(1779081674.505:1393): avc: denied { name_bind } for pid=11987 comm="syz.2.1706" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 200.622072][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.903299][T11905] veth0_vlan: entered promiscuous mode [ 200.914604][T11905] veth1_vlan: entered promiscuous mode [ 200.938861][T11905] veth0_macvtap: entered promiscuous mode [ 200.947033][T11905] veth1_macvtap: entered promiscuous mode [ 200.962049][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.970084][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.994512][ T172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.994607][ T172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.994643][ T172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.994671][ T172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.048305][ T40] audit: type=1326 audit(1779081675.065:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.0.1716" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f479399ce59 code=0x0 [ 201.102131][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.114216][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.157292][T12035] ipvlan3: entered allmulticast mode [ 201.159425][T12035] batadv_slave_1: entered allmulticast mode [ 201.163396][T12035] batman_adv: batadv0: Adding interface: ipvlan3 [ 201.165586][T12035] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.174665][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.178632][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.183207][T12035] batman_adv: batadv0: Interface activated: ipvlan3 [ 201.188666][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.191794][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.632011][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 201.790565][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 201.797274][ T39] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 201.801121][ T39] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.804877][ T39] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.804899][ T39] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.806772][ T39] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 201.818497][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.821201][ T39] usb 9-1: Product: syz [ 201.822559][ T39] usb 9-1: Manufacturer: syz [ 201.824127][ T39] usb 9-1: SerialNumber: syz [ 201.846134][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 201.849645][ T39] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input39 [ 201.886142][ T40] audit: type=1400 audit(1779081675.905:1395): avc: denied { write } for pid=12070 comm="syz.0.1727" name="/" dev="9p" ino=71828009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.894435][ T40] audit: type=1400 audit(1779081675.915:1396): avc: denied { watch watch_reads } for pid=12070 comm="syz.0.1727" path="/467/file0/file0" dev="9p" ino=71828139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.910661][ T40] audit: type=1400 audit(1779081675.915:1397): avc: denied { write } for pid=12070 comm="syz.0.1727" name="/" dev="9p" ino=71828009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.035625][T12075] __nla_validate_parse: 10 callbacks suppressed [ 202.035669][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1730'. [ 202.045227][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1730'. [ 202.061289][ T39] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.065327][ T39] (id 0x00) [ 202.066286][T12075] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 202.073230][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.087175][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.120951][ T39] rc_core: IR keymap rc-imon-pad not found [ 202.123704][ T39] Registered IR keymap rc-empty [ 202.126721][ T39] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 202.131349][ T39] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.267812][ T39] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 202.276599][ T39] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input40 [ 202.285873][ T39] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:5> initialized [ 202.321481][ T5827] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 202.438976][ T39] usb 9-1: USB disconnect, device number 5 [ 202.448139][T12054] imon:display_open: could not find interface for minor 0 [ 202.480798][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 202.487616][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.493883][ T5827] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.498507][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.507980][ T5827] usb 5-1: config 0 descriptor?? [ 202.721361][ T5827] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.998448][T12091] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 203.006866][T12091] Bluetooth: MGMT ver 1.23 [ 203.140854][ T40] audit: type=1400 audit(1779081677.165:1398): avc: denied { audit_write } for pid=12046 comm="syz.2.1722" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 203.187672][T12097] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 203.188883][ T40] audit: type=1400 audit(1779081677.205:1399): avc: denied { create } for pid=12096 comm="syz.4.1734" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 203.228184][ T40] audit: type=1400 audit(1779081677.205:1400): avc: denied { associate } for pid=12096 comm="syz.4.1734" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 203.273176][T12097] syzkaller0: entered promiscuous mode [ 203.306170][T12097] syzkaller0: entered allmulticast mode [ 203.410715][T12099] 9p: Bad value for 'port' [ 203.410761][T12100] 9p: Bad value for 'port' [ 203.478417][ T40] audit: type=1400 audit(1779081677.495:1401): avc: denied { rmdir } for pid=9337 comm="syz-executor" name="file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 203.587827][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1738'. [ 203.640889][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1738'. [ 203.730088][T12120] netlink: 'syz.2.1741': attribute type 5 has an invalid length. [ 204.065301][ T40] audit: type=1400 audit(1779081678.085:1402): avc: denied { block_suspend } for pid=12133 comm="syz.4.1745" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.097929][T12134] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 204.133742][T12134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.241744][T12148] binder: 12147:12148 ioctl c0306201 200000000080 returned -14 [ 204.246105][T12149] binder: BINDER_SET_CONTEXT_MGR already set [ 204.254935][T12149] binder: 12147:12149 ioctl 4018620d 200000000040 returned -16 [ 204.337668][ T34] IPVS: starting estimator thread 0... [ 204.371660][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 204.375618][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1753'. [ 204.377353][ T40] audit: type=1400 audit(1779081678.395:1403): avc: denied { ioctl } for pid=12160 comm="syz.4.1752" path="/148/file0" dev="tmpfs" ino=826 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.440482][T12159] IPVS: using max 41 ests per chain, 98400 per kthread [ 204.447254][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 204.528023][T12179] bond11 (unregistering): Released all slaves [ 204.593224][T12187] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 204.595400][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.598785][T12187] vhci_hcd vhci_hcd.0: Device attached [ 204.611709][T12190] netlink: 'syz.6.1762': attribute type 1 has an invalid length. [ 204.614395][T12191] vhci_hcd: connection closed [ 204.615651][ T172] vhci_hcd vhci_hcd.4: stop threads [ 204.621142][ T172] vhci_hcd vhci_hcd.4: release socket [ 204.623429][ T172] vhci_hcd vhci_hcd.4: disconnect device [ 204.668610][T12195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12195 comm=syz.6.1762 [ 204.736052][T12199] overlay: ./file1 is not a directory [ 205.067016][ T5843] usb 5-1: USB disconnect, device number 23 [ 205.116648][T12213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1771'. [ 205.132681][T12213] unsupported nlmsg_type 40 [ 205.440878][ T34] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 205.581031][ T34] usb 11-1: device descriptor read/64, error -71 [ 205.766384][T12251] 9p: Bad value for 'wfdno' [ 205.830745][ T34] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 205.939270][T12262] fuse: Bad value for 'fd' [ 205.939270][ T40] audit: type=1400 audit(1779081679.955:1404): avc: denied { mounton } for pid=12261 comm="syz.2.1786" path="/481/file0" dev="tmpfs" ino=2590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 205.970793][ T34] usb 11-1: device descriptor read/64, error -71 [ 206.081173][ T34] usb usb11-port1: attempt power cycle [ 206.235769][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 206.322461][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1796'. [ 206.326254][T12287] Unknown options in mask b7f2 [ 206.333049][T12283] bond11: entered promiscuous mode [ 206.340917][T12287] lo: MTU too low for tipc bearer [ 206.351554][T12287] tipc: Enabling of bearer rejected, failed to enable media [ 206.358936][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12287 comm=syz.0.1796 [ 206.420765][ T34] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 206.441448][ T34] usb 11-1: device descriptor read/8, error -71 [ 206.548158][T12302] loop7: detected capacity change from 0 to 16384 [ 206.691490][ T34] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 206.711454][ T34] usb 11-1: device descriptor read/8, error -71 [ 206.721771][T12304] loop7: detected capacity change from 16384 to 0 [ 206.725523][ C2] blk_print_req_error: 10 callbacks suppressed [ 206.725604][ C2] I/O error, dev loop7, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.831600][ T34] usb usb11-port1: unable to enumerate USB device [ 206.899913][T12312] fuse: Bad value for 'fd' [ 207.196333][T12328] netlink: 3160 bytes leftover after parsing attributes in process `syz.0.1808'. [ 207.258378][ T40] audit: type=1400 audit(1779081681.275:1405): avc: denied { write } for pid=12330 comm="syz.0.1809" name="/" dev="9p" ino=71828009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.412058][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1811'. [ 207.438217][T12336] bond2: invalid ARP target 0.0.0.0 specified for addition [ 207.442468][T12336] bond2: option arp_ip_target: invalid value (0) [ 207.447617][T12336] bond2 (unregistering): Released all slaves [ 207.711870][T12350] nbd: must specify a device to reconfigure [ 207.878556][T12359] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 207.888731][T12359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=12359 comm=syz.4.1817 [ 208.110265][T12372] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 208.113509][T12372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.121282][T12378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1820'. [ 208.144037][T12372] vhci_hcd vhci_hcd.0: Device attached [ 208.146064][T12365] ªªªªªª: renamed from hsr0 (while UP) [ 208.165179][T12374] vhci_hcd: connection closed [ 208.166015][ T1205] vhci_hcd vhci_hcd.4: stop threads [ 208.170991][ T1205] vhci_hcd vhci_hcd.4: release socket [ 208.175534][ T1205] vhci_hcd vhci_hcd.4: disconnect device [ 208.195699][T12382] overlay: ./bus is not a directory [ 208.443876][ T40] audit: type=1400 audit(1779081682.465:1406): avc: denied { ioctl } for pid=12405 comm="syz.0.1831" path="socket:[50993]" dev="sockfs" ino=50993 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 208.448054][T12399] pim6reg1: entered promiscuous mode [ 208.456779][T12399] pim6reg1: entered allmulticast mode [ 208.482011][T12406] lo speed is unknown, defaulting to 1000 [ 208.532250][T12408] lo speed is unknown, defaulting to 1000 [ 208.646860][ T40] audit: type=1400 audit(1779081682.665:1407): avc: denied { getopt } for pid=12405 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.677733][ T5751] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 208.684580][T12416] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.838710][T12430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1838'. [ 208.868623][ T40] audit: type=1400 audit(1779081682.885:1408): avc: denied { mount } for pid=12436 comm="syz.6.1839" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 208.872371][T12438] fuse: Invalid rootmode [ 208.876601][ T40] audit: type=1400 audit(1779081682.895:1409): avc: denied { mounton } for pid=12436 comm="syz.6.1839" path="/28/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 208.958653][ T40] audit: type=1400 audit(1779081682.975:1410): avc: denied { unmount } for pid=11905 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.093005][T12459] xt_hashlimit: size too large, truncated to 1048576 [ 209.368572][ T40] audit: type=1400 audit(1779081683.385:1411): avc: denied { write } for pid=12466 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.568503][T12485] macvtap1: entered promiscuous mode [ 209.575463][T12485] macvtap1: entered allmulticast mode [ 209.659007][T12494] xt_hashlimit: size too large, truncated to 1048576 [ 209.824962][T12502] overlayfs: failed to resolve './file0': -2 [ 209.920578][T12512] xt_hashlimit: size too large, truncated to 1048576 [ 210.085740][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1862'. [ 210.177130][ T40] audit: type=1400 audit(1779081684.195:1412): avc: denied { ioctl } for pid=12552 comm="syz.2.1865" path="socket:[50097]" dev="sockfs" ino=50097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.321802][T12558] netlink: 'syz.4.1867': attribute type 8 has an invalid length. [ 210.371384][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 210.526279][T12566] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.532845][ T34] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.536531][ T34] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 210.539821][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.543677][ T34] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.548523][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 210.553274][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.559443][ T34] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.562620][ T34] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.565219][ T34] usb 11-1: Product: syz [ 210.566823][ T34] usb 11-1: Manufacturer: syz [ 210.578156][T12551] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 210.586700][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 210.588670][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 210.594981][ T34] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 210.597209][ T34] cdc_wdm 11-1:1.0: Unknown control protocol [ 210.787931][ T40] audit: type=1400 audit(1779081684.805:1413): avc: denied { read write } for pid=12550 comm="syz.6.1864" name="cdc-wdm0" dev="devtmpfs" ino=3506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 210.796612][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.798235][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.801183][ T40] audit: type=1400 audit(1779081684.805:1414): avc: denied { open } for pid=12550 comm="syz.6.1864" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 210.804385][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.813012][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.815320][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.817724][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.820006][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.822288][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.824561][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.826740][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.828874][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.831035][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.833854][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.836184][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.838360][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.838739][ T40] audit: type=1400 audit(1779081684.855:1415): avc: denied { ioctl } for pid=12550 comm="syz.6.1864" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3506 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 210.840490][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.840887][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.853361][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.855643][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 210.857888][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 210.953169][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 210.957311][ T5519] usb 11-1: USB disconnect, device number 6 [ 211.016839][T12587] tmpfs: Unknown parameter 'usrquota' [ 211.080386][T12590] netlink: get zone limit has 4 unknown bytes [ 211.087273][T12593] fuse: fd is not a fuse device [ 211.130927][T12598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1877'. [ 211.200211][T12603] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 211.230180][T12605] xt_socket: unknown flags 0xc [ 211.267826][T12610] xt_hashlimit: size too large, truncated to 1048576 [ 211.564412][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 211.601345][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 211.790652][ T5519] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 211.960446][ T5519] usb 11-1: Using ep0 maxpacket: 8 [ 211.966814][ T5519] usb 11-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.972838][ T5519] usb 11-1: config 1 interface 0 has no altsetting 0 [ 211.979386][ T5519] usb 11-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.40 [ 211.982781][ T5519] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.985546][ T5519] usb 11-1: Product: Ѓ [ 211.987207][ T5519] usb 11-1: Manufacturer: 䪡떪뤢粊阽曻⵲彗㔡íœä°§ïŸ‰êµá¯žë–·çœ€ë–¬æ¿¿ì„á„˜áŒŽì¾’æ«‘ê”®ßºé¬³ä—¿ï¾°ïµ¤á‘–È—ç§¯ïšžï˜²åŒŠíŠ»áŽ‹ç¨³í˜‘á…°â”æ³Ÿèª¹ç€†å¾ŒïµŸæ’ºè»¦å¯®íŠ¦ê¦¯á¡¨ç”¥î¶¶à½Ÿï¹·à¹á•㊙篂囩脲 [ 211.997316][ T5519] usb 11-1: SerialNumber: syz [ 212.027970][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.041072][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.045750][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.049823][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.053168][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.297200][T12649] lo speed is unknown, defaulting to 1000 [ 212.549455][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.552844][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.556330][T12649] bridge_slave_0: entered allmulticast mode [ 212.560705][T12649] bridge_slave_0: entered promiscuous mode [ 212.567514][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.570456][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.573502][T12649] bridge_slave_1: entered allmulticast mode [ 212.578076][T12649] bridge_slave_1: entered promiscuous mode [ 212.608563][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.615802][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.647988][T12649] team0: Port device team_slave_0 added [ 212.653597][T12649] team0: Port device team_slave_1 added [ 212.683673][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.686556][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.696305][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.701184][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.703406][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.712046][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.730577][T12666] xfrm1: entered allmulticast mode [ 212.765661][T12649] hsr_slave_0: entered promiscuous mode [ 212.768331][T12649] hsr_slave_1: entered promiscuous mode [ 212.771154][T12649] debugfs: 'hsr0' already exists in 'hsr' [ 212.773243][T12649] Cannot create hsr debugfs directory [ 212.873235][T12679] ipvlan2: entered allmulticast mode [ 212.875155][T12679] veth0_to_bridge: entered allmulticast mode [ 212.917711][T12649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 212.927116][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.930563][T12649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 212.939936][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.943729][T12649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 212.948582][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.951808][T12649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 212.958049][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.978115][T12684] netlink: 'syz.4.1898': attribute type 7 has an invalid length. [ 212.986706][T12684] netlink: 'syz.4.1898': attribute type 7 has an invalid length. [ 213.051175][T12649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.078792][T12649] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.087976][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.090563][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.099736][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.102128][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.274245][T12704] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 213.340705][T12713] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1903'. [ 213.343120][T12712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.349101][T12712] overlayfs: failed to set xattr on upper [ 213.351661][T12712] overlayfs: ...falling back to redirect_dir=nofollow. [ 213.354406][T12712] overlayfs: ...falling back to index=off. [ 213.356815][T12712] overlayfs: ...falling back to uuid=null. [ 213.359182][T12712] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 213.363397][T12712] overlayfs: maximum fs stacking depth exceeded [ 213.384169][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1905'. [ 213.403028][T12724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12724 comm=syz.4.1906 [ 213.405119][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.575724][T12649] veth0_vlan: entered promiscuous mode [ 213.588589][T12649] veth1_vlan: entered promiscuous mode [ 213.619970][T12649] veth0_macvtap: entered promiscuous mode [ 213.627064][T12649] veth1_macvtap: entered promiscuous mode [ 213.636629][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.646198][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.655039][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.659502][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.667308][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.675966][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.780479][T12745] overlayfs: workdir and upperdir must reside under the same mount [ 213.802494][T12536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.805162][T12536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.835489][T12749] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20004 [ 213.841938][T12536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.844575][T12536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.891543][T12751] netlink: 'syz.2.1912': attribute type 13 has an invalid length. [ 213.895731][T12753] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 213.967622][T12753] bond2: entered promiscuous mode [ 213.969721][T12753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.016432][T12768] 9p: Invalid uid '0x00000000ffffffff' [ 214.110429][ T5751] Bluetooth: hci1: command tx timeout [ 214.545313][ T5519] usbhid 11-1:1.0: can't add hid device: -71 [ 214.547311][ T5519] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 214.555171][ T5519] usb 11-1: USB disconnect, device number 7 [ 214.580960][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 214.580976][ T40] audit: type=1400 audit(1779081688.605:1420): avc: denied { setopt } for pid=12807 comm="syz.6.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.708045][T12819] Bluetooth: (null): Invalid header checksum [ 214.740689][ T1044] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 214.749887][T12822] overlayfs: failed to clone upperpath [ 214.890669][ T1044] usb 12-1: Using ep0 maxpacket: 8 [ 214.899298][ T1044] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 214.904233][ T1044] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.907868][T12846] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 214.942503][T12846] geneve1: entered promiscuous mode [ 214.951277][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.964849][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.968510][T12846] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 214.980928][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.984905][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.989326][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.995886][ T1044] usb 12-1: config 168 interface 0 has no altsetting 0 [ 214.999564][ T1044] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 215.003247][ T1044] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.007243][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.013370][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.017753][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.022558][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.026440][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.031770][ T1044] usb 12-1: config 168 interface 0 has no altsetting 0 [ 215.036108][ T1044] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 215.039761][ T1044] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.045833][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.050448][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.054414][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.058230][ T1044] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.064100][ T1044] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.070662][ T1044] usb 12-1: config 168 interface 0 has no altsetting 0 [ 215.075937][ T1044] usb 12-1: string descriptor 0 read error: -22 [ 215.078949][ T1044] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 215.083564][ T1044] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.099429][ T1044] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 215.257093][T12877] 8021q: adding VLAN 0 to HW filter on device bond12 [ 215.296307][T12883] fuse: fd is not a fuse device [ 215.317463][T12883] 9p: Could not find request transport: vdrti¦´å3óo [ 215.323722][ T40] audit: type=1400 audit(1779081689.345:1421): avc: denied { module_load } for pid=12882 comm="syz.2.1943" path="/538/bus" dev="tmpfs" ino=2891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 215.331679][T12883] Invalid ELF header magic: != ELF [ 215.359495][ T40] audit: type=1400 audit(1779081689.375:1422): avc: denied { write } for pid=12887 comm="syz.6.1944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 215.654445][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 215.678837][ T39] usb 12-1: USB disconnect, device number 2 [ 215.682465][T12931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12931 comm=syz.2.1953 [ 215.743832][T12932] sd 0:0:0:0: PR command failed: 1026 [ 215.748313][T12932] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 215.756315][T12932] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 215.995898][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 216.043859][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 216.110971][T12958] sctp: [Deprecated]: syz.2.1960 (pid 12958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.110971][T12958] Use struct sctp_sack_info instead [ 216.160551][ T39] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 216.190744][ T5751] Bluetooth: hci1: command tx timeout [ 216.281069][T12964] ip6gre1: entered allmulticast mode [ 216.285347][T12964] team0: Device ip6gre1 is of different type [ 216.310439][ T39] usb 12-1: Using ep0 maxpacket: 16 [ 216.313586][ T39] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.317084][ T39] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.320752][ T39] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.324168][ T39] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.327710][ T39] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.333860][ T39] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.337497][ T39] usb 12-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.341368][ T39] usb 12-1: Manufacturer: syz [ 216.345768][ T39] usb 12-1: config 0 descriptor?? [ 216.376938][T12967] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 216.493906][T12980] xt_hashlimit: size too large, truncated to 1048576 [ 216.553732][T12987] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 216.588286][T12986] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1969'. [ 216.610521][ T39] rc_core: IR keymap rc-hauppauge not found [ 216.618922][ T39] Registered IR keymap rc-empty [ 216.624159][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.642050][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.659982][T12993] ip6t_REJECT: ECHOREPLY is not supported [ 216.663025][ T39] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 216.665564][ T39] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input44 [ 216.675352][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.691331][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.710748][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.730609][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.731985][T12997] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 216.736381][T12997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.740019][T12997] vhci_hcd vhci_hcd.0: Device attached [ 216.749725][T12998] vhci_hcd: connection closed [ 216.750110][T12538] vhci_hcd vhci_hcd.4: stop threads [ 216.752059][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.759486][T12538] vhci_hcd vhci_hcd.4: release socket [ 216.761632][T12538] vhci_hcd vhci_hcd.4: disconnect device [ 216.770513][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.790986][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.810526][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.834541][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.850506][ T39] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 216.872345][ T39] mceusb 12-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.875861][ T39] mceusb 12-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.883864][ T39] usb 12-1: USB disconnect, device number 3 [ 217.366952][T13012] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 217.371294][T13016] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1979'. [ 217.375453][ T40] audit: type=1400 audit(1779081691.395:1423): avc: denied { watch } for pid=13010 comm="syz.6.1977" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 217.423527][T13023] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 217.476843][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'. [ 217.736228][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 217.741305][T13061] netlink: 'syz.7.1994': attribute type 63 has an invalid length. [ 217.904571][ T40] audit: type=1400 audit(1779081691.925:1424): avc: denied { bind } for pid=13076 comm="syz.7.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.944579][T13083] fuse: fd is not a fuse device [ 217.951572][ T40] audit: type=1800 audit(1779081691.965:1425): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1999" name="nullb0" dev="tmpfs" ino=2808 res=0 errno=0 [ 218.059309][T13089] netlink: 'syz.2.2002': attribute type 1 has an invalid length. [ 218.282447][ T5751] Bluetooth: hci1: command tx timeout [ 218.311351][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2009'. [ 218.480980][ T40] audit: type=1400 audit(1779081692.495:1426): avc: denied { getopt } for pid=13119 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 218.548831][T13127] /dev/sg0: Can't lookup blockdev [ 218.714314][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 218.800587][T13138] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 218.808762][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.814707][T13138] team0: Port device netdevsim1 added [ 218.885568][T13140] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 219.184841][T13146] tmpfs: Bad value for 'mpol' [ 219.185066][ T40] audit: type=1400 audit(1779081693.205:1427): avc: denied { mounton } for pid=13145 comm="syz.6.2022" path="/67/file0" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.420434][ T5519] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 219.572289][ T5519] usb 11-1: Using ep0 maxpacket: 8 [ 219.575947][ T5519] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 219.578884][ T5519] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.584047][ T5519] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.590384][ T5519] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 47648, setting to 1024 [ 219.595367][ T5519] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 219.601230][ T5519] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.608788][ T5519] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.614675][ T5519] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.823051][ T5519] usb 11-1: usb_control_msg returned -32 [ 219.825975][ T5519] usbtmc 11-1:16.0: can't read capabilities [ 220.000409][ T39] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 220.160455][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 220.164434][ T39] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 220.169081][ T39] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 220.174905][ T39] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 220.182787][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.187141][T13152] usbtmc 11-1:16.0: control status returned 0 [ 220.190417][ T39] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.190448][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.190482][ T39] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 220.190496][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.212093][ T39] usb 9-1: config 0 descriptor?? [ 220.361455][ T5751] Bluetooth: hci1: command tx timeout [ 220.385228][ T10] usb 11-1: USB disconnect, device number 8 [ 220.428970][ T39] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 220.628976][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.635533][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.641919][ T39] usb 9-1: USB disconnect, device number 6 [ 220.648799][ T39] usblp0: removed [ 220.815986][T13093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13093 comm=syz.7.2004 [ 221.160025][T13173] dummy0: Caught tx_queue_len zero misconfig [ 221.237252][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2031'. [ 221.243352][T13181] netem: invalid attributes len -17 [ 221.245010][T13181] netem: change failed [ 221.248918][ T40] audit: type=1400 audit(1779081695.265:1428): avc: denied { write } for pid=13174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.263903][T13181] netlink: 'syz.6.2031': attribute type 1 has an invalid length. [ 221.336100][ T40] audit: type=1400 audit(1779081695.355:1429): avc: denied { write } for pid=13188 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.451100][T13197] netlink: 'syz.2.2035': attribute type 5 has an invalid length. [ 221.578041][T13203] binder: BINDER_SET_CONTEXT_MGR already set [ 221.581119][T13203] binder: 13202:13203 ioctl 4018620d 200000004a80 returned -16 [ 221.589461][ T40] audit: type=1400 audit(1779081695.605:1430): avc: denied { mounton } for pid=13199 comm="syz.6.2037" path="/proc/224/cgroup" dev="proc" ino=54863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 221.652973][ T5751] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 221.691797][ T40] audit: type=1400 audit(1779081695.705:1431): avc: denied { create } for pid=13213 comm="syz.7.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.705905][T13209] lo speed is unknown, defaulting to 1000 [ 221.743083][T13212] geneve1: Caught tx_queue_len zero misconfig [ 221.833165][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2042'. [ 221.844743][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 222.025791][T13235] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2047'. [ 222.029459][T13236] IPVS: Unknown mcast interface: syz_tun [ 222.071438][T13241] xt_hashlimit: overflow, rate too high: 0 [ 222.187936][T13246] program syz.4.2050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.346526][T13255] vcan1: entered allmulticast mode [ 222.640519][ T40] audit: type=1400 audit(1779081696.655:1432): avc: denied { name_connect } for pid=13272 comm="syz.6.2057" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 222.722864][ T40] audit: type=1400 audit(1779081696.735:1433): avc: denied { write } for pid=13272 comm="syz.6.2057" path="socket:[54104]" dev="sockfs" ino=54104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.803345][ T40] audit: type=1326 audit(1779081696.825:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.7.2058" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c2c99ce59 code=0x0 [ 223.019359][T13283] binder: 13282:13283 ioctl c0306201 2000000003c0 returned -14 [ 223.023292][T13283] binder: 13282:13283 ioctl c0306201 200000000480 returned -14 [ 223.148737][T13286] netlink: 'syz.6.2060': attribute type 3 has an invalid length. [ 223.153845][T13286] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2060'. [ 223.255951][ T40] audit: type=1400 audit(1779081697.275:1435): avc: denied { connect } for pid=13290 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.353640][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 223.363078][T13296] batman_adv: batadv0: Adding interface: dummy0 [ 223.365896][T13296] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.376533][T13296] batman_adv: batadv0: Interface activated: dummy0 [ 223.550658][ T5751] Bluetooth: hci1: command tx timeout [ 223.688496][T13301] kAFS: unparsable volume name [ 223.689912][T13302] syz.7.2065: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.721067][T13302] CPU: 3 UID: 0 PID: 13302 Comm: syz.7.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.721103][T13302] Tainted: [L]=SOFTLOCKUP [ 223.721109][T13302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.721151][T13302] Call Trace: [ 223.721158][T13302] [ 223.721165][T13302] dump_stack_lvl+0x100/0x190 [ 223.721448][T13302] warn_alloc.cold+0x95/0x1c1 [ 223.721504][T13302] ? __pfx_warn_alloc+0x10/0x10 [ 223.721554][T13302] ? stack_depot_save_flags+0x27/0x9d0 [ 223.721606][T13302] ? __lock_acquire+0x4a5/0x2630 [ 223.721672][T13302] ? xskq_create+0xfb/0x1d0 [ 223.721774][T13302] __vmalloc_node_range_noprof+0x136c/0x1630 [ 223.721797][T13302] ? xskq_create+0xfb/0x1d0 [ 223.721814][T13302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.721835][T13302] ? xskq_create+0xfb/0x1d0 [ 223.721848][T13302] vmalloc_user_noprof+0x9e/0xe0 [ 223.721862][T13302] ? xskq_create+0xfb/0x1d0 [ 223.721876][T13302] xskq_create+0xfb/0x1d0 [ 223.721889][T13302] xsk_setsockopt+0x743/0xab0 [ 223.721903][T13302] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.721915][T13302] ? find_held_lock+0x2b/0x80 [ 223.721926][T13302] ? __fget_files+0x215/0x3d0 [ 223.721943][T13302] ? selinux_socket_setsockopt+0x6a/0x80 [ 223.721986][T13302] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.721999][T13302] do_sock_setsockopt+0xf3/0x1d0 [ 223.722074][T13302] __sys_setsockopt+0x195/0x220 [ 223.722091][T13302] __x64_sys_setsockopt+0xbd/0x160 [ 223.722101][T13302] ? do_syscall_64+0x90/0xf80 [ 223.722118][T13302] ? lockdep_hardirqs_on+0x78/0x100 [ 223.722135][T13302] do_syscall_64+0x10b/0xf80 [ 223.722151][T13302] ? clear_bhb_loop+0x40/0x90 [ 223.722166][T13302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.722178][T13302] RIP: 0033:0x7f8c2c99ce59 [ 223.722192][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.722203][T13302] RSP: 002b:00007f8c2d7d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.722239][T13302] RAX: ffffffffffffffda RBX: 00007f8c2cc16090 RCX: 00007f8c2c99ce59 [ 223.722247][T13302] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000086 [ 223.722253][T13302] RBP: 00007f8c2ca32d6f R08: 0000000000000004 R09: 0000000000000000 [ 223.722260][T13302] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.722267][T13302] R13: 00007f8c2cc16128 R14: 00007f8c2cc16090 R15: 00007ffddf8481a8 [ 223.722281][T13302] [ 223.722386][T13302] Mem-Info: [ 223.827689][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 223.831814][T13302] active_anon:6581 inactive_anon:17901 isolated_anon:0 [ 223.831814][T13302] active_file:4577 inactive_file:13544 isolated_file:0 [ 223.831814][T13302] unevictable:1768 dirty:31 writeback:0 [ 223.831814][T13302] slab_reclaimable:8733 slab_unreclaimable:93412 [ 223.831814][T13302] mapped:24260 shmem:18243 pagetables:6125 [ 223.831814][T13302] sec_pagetables:310 bounce:0 [ 223.831814][T13302] kernel_misc_reclaimable:0 [ 223.831814][T13302] free:342249 free_pcp:20356 free_cma:0 [ 223.849095][T13302] Node 0 active_anon:24248kB inactive_anon:71604kB active_file:14556kB inactive_file:49744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:72388kB dirty:124kB writeback:0kB shmem:68224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16384kB pagetables:14324kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.863475][T13302] Node 1 active_anon:2076kB inactive_anon:0kB active_file:3752kB inactive_file:4432kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24652kB dirty:0kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:10176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.875769][T13302] Node 0 DMA free:14472kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:96kB free_cma:0kB [ 223.886219][T13302] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 223.888688][T13302] Node 0 DMA32 free:201044kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24248kB inactive_anon:71604kB active_file:14556kB inactive_file:49744kB unevictable:3536kB writepending:124kB zspages:0kB present:2080628kB managed:1260816kB mlocked:0kB bounce:0kB free_pcp:43524kB local_pcp:3476kB free_cma:0kB [ 223.901513][T13302] lowmem_reserve[]: 0 0 0 0 0 [ 223.903423][T13302] Node 1 Normal free:1184952kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2076kB inactive_anon:0kB active_file:3752kB inactive_file:4432kB unevictable:3536kB writepending:0kB zspages:9332kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:36568kB local_pcp:5312kB free_cma:0kB [ 223.917527][T13302] lowmem_reserve[]: 0 0 0 0 0 [ 223.919863][T13302] Node 0 DMA: 15*4kB (UM) 17*8kB (UM) 15*16kB (UM) 11*32kB (UM) 12*64kB (UM) 9*128kB (UM) 6*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 14484kB [ 223.928540][T13302] Node 0 DMA32: 2856*4kB (UME) 750*8kB (UM) 1371*16kB (UM) 380*32kB (UME) 244*64kB (UME) 197*128kB (UME) 145*256kB (UME) 80*512kB (UM) 20*1024kB (U) 5*2048kB (U) 0*4096kB = 201152kB [ 223.946370][T13302] Node 1 Normal: 769*4kB (UME) 692*8kB (UME) 774*16kB (UME) 688*32kB (UME) 650*64kB (UME) 514*128kB (UME) 438*256kB (UME) 323*512kB (UME) 129*1024kB (UME) 9*2048kB (M) 154*4096kB (UM) = 1209220kB [ 223.966005][T13302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.969261][T13302] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 223.973924][T13302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.978205][T13302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.982312][T13302] 36726 total pagecache pages [ 223.984095][T13302] 366 pages in swap cache [ 223.986165][T13302] Free swap = 91864kB [ 223.987647][T13302] Total swap = 124996kB [ 223.989136][T13302] 1048443 pages RAM [ 223.991384][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 223.995846][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.000107][T13302] 0 pages HighMem/MovableOnly [ 224.003263][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.006977][T13302] 283928 pages reserved [ 224.008656][T13302] 0 pages cma reserved [ 224.010165][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.030546][ T34] usb 9-1: config 0 descriptor?? [ 224.236170][ T34] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 224.394264][T13313] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2070'. [ 224.400625][ T5519] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 224.535899][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.554308][ T5519] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.555724][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.562602][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.562901][ T5519] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 224.565742][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.570052][ T5519] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.572875][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.578351][ T5519] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 224.579467][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.585268][ T5519] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 224.587856][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.595425][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.596405][ T5519] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.598613][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 224.602841][ T5519] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.609367][ T5519] usb 11-1: Product: syz [ 224.611845][ T5519] usb 11-1: Manufacturer: syz [ 224.620515][ T5519] cdc_wdm 11-1:1.0: skipping garbage [ 224.623248][ T5519] cdc_wdm 11-1:1.0: skipping garbage [ 224.630017][ T5519] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 224.632705][ T5519] cdc_wdm 11-1:1.0: Unknown control protocol [ 224.644304][ T40] audit: type=1326 audit(1779081698.665:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 224.670427][ T40] audit: type=1326 audit(1779081698.665:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f716fd59b51 code=0x50000 [ 224.833160][ T34] usb 11-1: USB disconnect, device number 9 [ 225.097965][T13339] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 225.108509][T13339] syzkaller0: entered promiscuous mode [ 225.111041][T13339] syzkaller0: entered allmulticast mode [ 225.490510][ T34] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 225.637581][T13341] trusted_key: syz.7.2079 sent an empty control message without MSG_MORE. [ 225.686349][ T34] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.690852][ T34] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.695029][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.698627][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 225.706181][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 225.717804][ T34] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.727691][ T34] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.731811][ T34] usb 11-1: Product: syz [ 225.733758][ T34] usb 11-1: Manufacturer: syz [ 225.754186][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 225.757726][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 225.774959][ T34] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 225.779029][ T34] cdc_wdm 11-1:1.0: Unknown control protocol [ 225.949874][T12538] bridge_slave_0: left allmulticast mode [ 225.960563][T12538] bridge_slave_0: left promiscuous mode [ 225.969360][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.001993][T12538] pimreg: left allmulticast mode [ 226.251851][ T40] kauditd_printk_skb: 14448 callbacks suppressed [ 226.251868][ T40] audit: type=1326 audit(1779081700.265:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.262515][ T40] audit: type=1326 audit(1779081700.275:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.270160][ T40] audit: type=1326 audit(1779081700.275:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.278108][ T40] audit: type=1326 audit(1779081700.275:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.286074][ T40] audit: type=1326 audit(1779081700.275:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.293673][ T40] audit: type=1326 audit(1779081700.275:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.301211][ T40] audit: type=1326 audit(1779081700.275:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.309032][ T40] audit: type=1326 audit(1779081700.275:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.316489][ T40] audit: type=1326 audit(1779081700.275:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.324289][ T40] audit: type=1326 audit(1779081700.275:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.2074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716fd9ce59 code=0x50000 [ 226.445113][ T39] usb 9-1: USB disconnect, device number 7 [ 226.545537][T13349] program syz.4.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.553093][T13349] ata1.00: non-matching transfer count (32/0) [ 226.704648][T12538] bond1 (unregistering): Released all slaves [ 226.723660][T13353] input: syz1 as /devices/virtual/input/input46 [ 226.730786][T12538] bond0 (unregistering): (slave bridge_slave_1): Releasing active interface [ 226.741827][T12538] bond0 (unregistering): Released all slaves [ 226.762710][T12538] bond2 (unregistering): Released all slaves [ 226.817831][T13357] xt_connbytes: Forcing CT accounting to be enabled [ 226.955936][ T9] usb 11-1: USB disconnect, device number 10 [ 227.114391][T12538] IPVS: stopping master sync thread 9421 ... [ 227.131730][T12538] IPVS: stopping backup sync thread 8112 ... [ 227.417062][T13381] fuse: Unknown parameter '' [ 227.469800][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 227.705945][T13399] fuse: fd is not a fuse device [ 227.754507][T13405] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.816957][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.822742][T13405] wg1: entered promiscuous mode [ 227.824486][T13405] wg1: entered allmulticast mode [ 227.854105][T13410] ip6tnl0: Caught tx_queue_len zero misconfig [ 227.882585][T13411] batman_adv: batadv0: Adding interface: dummy0 [ 227.885014][T13411] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.899626][T13411] batman_adv: batadv0: Interface activated: dummy0 [ 227.930682][T13417] afs: Unknown parameter 'ˆ' [ 227.953053][T13418] afs: Unknown parameter 'ˆ' [ 227.978057][T13421] netlink: 'syz.2.2097': attribute type 11 has an invalid length. [ 228.110410][T12538] hsr_slave_0: left promiscuous mode [ 228.115962][T12538] hsr_slave_1: left promiscuous mode [ 228.121444][T13437] netlink: 'syz.6.2101': attribute type 63 has an invalid length. [ 228.333579][T13442] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 228.566444][T13437] gretap0: entered allmulticast mode [ 228.568658][T13437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.582501][ T1044] lo speed is unknown, defaulting to 1000 [ 228.587151][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 228.588487][ T1044] syz0: Port: 1 Link DOWN [ 228.623667][T12536] smbdirect: ib_dev[syz0] removed [ 229.019180][T13487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13487 comm=syz.4.2111 [ 229.035124][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 229.095001][T13498] netlink: 'syz.6.2114': attribute type 322 has an invalid length. [ 229.154241][ T61] Process accounting resumed [ 229.184861][T12538] IPVS: stop unused estimator thread 0... [ 229.308697][T13506] batman_adv: batadv0: Interface deactivated: dummy0 [ 229.312125][T13506] batman_adv: batadv0: Removing interface: dummy0 [ 229.323777][T13506] bridge_slave_0: left allmulticast mode [ 229.326221][T13506] bridge_slave_0: left promiscuous mode [ 229.328871][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.344514][T13506] bridge_slave_1: left allmulticast mode [ 229.347095][T13506] bridge_slave_1: left promiscuous mode [ 229.349673][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.362846][T13495] fuse: fd is not a fuse device [ 229.365646][T13506] bond0: (slave bond_slave_0): Releasing backup interface [ 229.379104][T13506] bond0: (slave bond_slave_1): Releasing backup interface [ 229.408424][T13506] team0: Port device team_slave_0 removed [ 229.415380][T13506] team0: Port device team_slave_1 removed [ 229.418009][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.421700][T13506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.426417][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.429563][T13506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.442062][T13506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.517103][T13530] support for cryptoloop has been removed. Use dm-crypt instead. [ 229.600440][T13533] __nla_validate_parse: 26 callbacks suppressed [ 229.600489][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'. [ 229.847056][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.859634][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.863854][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.041506][T13564] new mount options do not match the existing superblock, will be ignored [ 230.114943][T13561] binder: 13559:13561 ioctl c0306201 200000000040 returned -22 [ 230.119307][T13561] binder: 13559:13561 ioctl c0306201 200000000640 returned -22 [ 230.128642][T13576] overlayfs: failed to resolve '/ÉÔ$mÑJû÷š"ƒ »~': -2 [ 230.369249][T13601] netlink: 'syz.2.2136': attribute type 10 has an invalid length. [ 230.376687][T13602] netlink: 'syz.2.2136': attribute type 10 has an invalid length. [ 230.391317][T13602] bond0: (slave netdevsim1): Releasing backup interface [ 230.397865][T13602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.401423][T13602] team0: Port device netdevsim1 added [ 230.644734][T13615] binder: 13612:13615 ioctl c0306201 200000000480 returned -14 [ 231.542951][T13630] comedi comedi3: unsupported base address 0x2000 [ 231.570228][ T40] kauditd_printk_skb: 12268 callbacks suppressed [ 231.570243][ T40] audit: type=1400 audit(1779081705.585:28164): avc: denied { map } for pid=13629 comm="syz.7.2143" path="socket:[58304]" dev="sockfs" ino=58304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.594099][ T40] audit: type=1400 audit(1779081705.605:28165): avc: denied { accept } for pid=13629 comm="syz.7.2143" path="socket:[58304]" dev="sockfs" ino=58304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.613275][ T40] audit: type=1400 audit(1779081705.605:28166): avc: denied { write } for pid=13625 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.648290][ T40] audit: type=1400 audit(1779081705.665:28167): avc: denied { create } for pid=13632 comm="syz.6.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.666756][ T40] audit: type=1400 audit(1779081705.685:28168): avc: denied { read write } for pid=11905 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.687733][ T40] audit: type=1400 audit(1779081705.705:28169): avc: denied { open } for pid=11905 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.698324][ T40] audit: type=1400 audit(1779081705.705:28170): avc: denied { ioctl } for pid=11905 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.717346][ T40] audit: type=1400 audit(1779081705.705:28171): avc: denied { read write } for pid=13634 comm="syz.7.2146" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.728255][ T40] audit: type=1400 audit(1779081705.705:28172): avc: denied { open } for pid=13634 comm="syz.7.2146" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.736813][ T40] audit: type=1400 audit(1779081705.705:28173): avc: denied { ioctl } for pid=13634 comm="syz.7.2146" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.858180][T13650] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2151'. [ 231.894971][T13650] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 231.905770][T13650] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2151'. [ 231.906614][T13653] xt_hashlimit: size too large, truncated to 1048576 [ 231.915855][T13650] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 231.957702][T13662] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 231.962582][T13662] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 231.993653][T13664] batman_adv: batadv0: Adding interface: gretap1 [ 231.995947][T13664] batman_adv: batadv0: Interface activated: gretap1 [ 232.030905][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 232.074007][T13676] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 232.088196][T13676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.405722][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.413403][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.427060][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.435433][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.438273][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.826213][T13705] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.828694][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.832528][T13705] bridge_slave_0: entered allmulticast mode [ 232.835385][T13705] bridge_slave_0: entered promiscuous mode [ 232.838990][T13705] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.841928][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.844751][T13705] bridge_slave_1: entered allmulticast mode [ 232.848225][T13705] bridge_slave_1: entered promiscuous mode [ 232.884823][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.891122][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.914319][T13705] team0: Port device team_slave_0 added [ 232.917881][T13705] team0: Port device team_slave_1 added [ 232.945841][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.950483][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.958910][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.967106][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2167'. [ 232.973197][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.978495][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.983562][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2168'. [ 232.991872][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2168'. [ 232.995954][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2168'. [ 232.997776][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.000001][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2168'. [ 233.017121][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2168'. [ 233.048755][T13705] hsr_slave_0: entered promiscuous mode [ 233.052479][T13705] hsr_slave_1: entered promiscuous mode [ 233.056495][T13705] debugfs: 'hsr0' already exists in 'hsr' [ 233.060011][T13705] Cannot create hsr debugfs directory [ 233.226625][T13705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.237068][T13705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.364265][T13705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.380398][T13705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.380417][ T5519] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 233.488347][T13705] team0: Port device netdevsim1 removed [ 233.491667][T13705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.495396][T13705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.520525][ T5519] usb 11-1: device descriptor read/64, error -71 [ 233.755263][T13705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.764328][T13705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.768503][T13705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.771812][ T5519] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 233.781207][T13705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.785279][T13705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.794895][T13705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.800971][T13705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.808096][T13705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.879912][T13705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.899915][T13705] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.924380][ T5519] usb 11-1: device descriptor read/64, error -71 [ 233.932980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.936302][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.942264][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.945325][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.047862][ T5519] usb usb11-port1: attempt power cycle [ 234.140014][T13763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13763 comm=syz.7.2174 [ 234.328905][T13774] 9pnet_virtio: no channels available for device ./file0 [ 234.339300][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.385815][T13705] veth0_vlan: entered promiscuous mode [ 234.395272][T13705] veth1_vlan: entered promiscuous mode [ 234.404001][ T5519] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 234.427797][T13705] veth0_macvtap: entered promiscuous mode [ 234.430983][ T5519] usb 11-1: device descriptor read/8, error -71 [ 234.434699][T13705] veth1_macvtap: entered promiscuous mode [ 234.450241][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.464616][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.474942][T12538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.478222][T12538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.482898][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.486207][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.520821][ T5746] Bluetooth: hci4: command tx timeout [ 234.553616][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.556689][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.644343][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.647445][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.680538][ T5519] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.701464][ T5519] usb 11-1: device descriptor read/8, error -71 [ 234.716474][T13780] overlay: ./bus is not a directory [ 234.722686][T13780] dlm: no local IP address has been set [ 234.731354][T13780] dlm: cannot start dlm midcomms -107 [ 234.812689][ T5519] usb usb11-port1: unable to enumerate USB device [ 235.000516][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 235.154463][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.162798][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.168060][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 235.172338][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.177966][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.182103][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.190033][ T9] usb 7-1: config 0 descriptor?? [ 235.624582][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 235.889881][T13806] kvm: emulating exchange as write [ 236.118695][T13818] __nla_validate_parse: 3 callbacks suppressed [ 236.118720][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 236.126356][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 236.299947][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2193'. [ 236.343964][T13782] xt_hashlimit: size too large, truncated to 1048576 [ 236.573287][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 236.573437][ T40] audit: type=1400 audit(1779081710.595:28378): avc: denied { create } for pid=13853 comm="syz.4.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.601042][ T5746] Bluetooth: hci4: command tx timeout [ 236.610362][ T40] audit: type=1400 audit(1779081710.605:28379): avc: denied { write } for pid=13781 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.614388][ T39] usb 7-1: USB disconnect, device number 19 [ 236.637643][ T40] audit: type=1400 audit(1779081710.655:28380): avc: denied { append } for pid=13855 comm="syz.4.2201" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 236.656155][T13840] kvm: kvm [13839]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcb0000ffeb [ 236.708721][ T40] audit: type=1400 audit(1779081710.725:28381): avc: denied { create } for pid=13855 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.803889][ T40] audit: type=1400 audit(1779081710.825:28382): avc: denied { mounton } for pid=13858 comm="syz.2.2202" path="/2/file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 236.803916][T13859] fuse: Bad value for 'fd' [ 236.854962][ T40] audit: type=1400 audit(1779081710.875:28383): avc: denied { write } for pid=13855 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.863585][T13860] trusted_key: encrypted_key: insufficient parameters specified [ 236.867460][ T40] audit: type=1400 audit(1779081710.885:28384): avc: denied { execmem } for pid=13861 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.919209][ T40] audit: type=1400 audit(1779081710.935:28385): avc: denied { read write } for pid=13705 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.926671][T13840] kvm: kvm [13839]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfffffdff0000040a [ 236.933405][ T40] audit: type=1400 audit(1779081710.955:28386): avc: denied { open } for pid=13705 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.946011][ T40] audit: type=1400 audit(1779081710.955:28387): avc: denied { ioctl } for pid=13705 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.969493][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2204'. [ 237.142648][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 237.220960][T13885] bond4: entered promiscuous mode [ 237.233652][T13885] nfs: Unknown parameter 'n' [ 237.325093][T13894] overlay: ./file1 is not a directory [ 237.477650][T13907] overlayfs: overlapping lowerdir path [ 238.078937][T13928] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 238.670971][ T5746] Bluetooth: hci4: command tx timeout [ 238.795755][ T5746] Bluetooth: Frame is too long (len 12, expected len 4) [ 238.920871][T13943] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2225'. [ 240.750901][ T5746] Bluetooth: hci4: command tx timeout [ 240.786967][T13923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.915927][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 240.922413][T13960] ------------[ cut here ]------------ [ 240.924186][T13960] 1 [ 240.924195][T13960] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#2: syz.2.2229/13960 [ 240.929082][T13960] Modules linked in: [ 240.931306][T13960] CPU: 2 UID: 0 PID: 13960 Comm: syz.2.2229 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.935267][T13960] Tainted: [L]=SOFTLOCKUP [ 240.937364][T13960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.941307][T13960] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 240.943889][T13960] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 f3 54 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 240.950617][T13960] RSP: 0018:ffffc90003b477a0 EFLAGS: 00010246 [ 240.952841][T13960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 240.955641][T13960] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 240.958240][T13960] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 240.960919][T13960] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 240.963526][T13960] R13: 1ffff92000768f43 R14: 0000000000000015 R15: 1ffff92000768f0d [ 240.966416][T13960] FS: 00007f8cdc5d56c0(0000) GS:ffff8880d656d000(0000) knlGS:0000000000000000 [ 240.969933][T13960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.972398][T13960] CR2: 00007f8fe204f0d7 CR3: 000000004532e000 CR4: 0000000000352ef0 [ 240.974853][T13960] Call Trace: [ 240.975989][T13960] [ 240.976946][T13960] ? bpf_ksym_find+0x128/0x1c0 [ 240.978756][T13960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 240.981022][T13960] ? is_bpf_text_address+0x94/0x1a0 [ 240.982702][T13960] ? kernel_text_address+0x8d/0x100 [ 240.984243][T13960] ? __pfx_widen_string+0x10/0x10 [ 240.986194][T13960] ? __kernel_text_address+0xd/0x30 [ 240.988563][T13960] ? unwind_get_return_address+0x59/0xa0 [ 240.990814][T13960] ? arch_stack_walk+0xa6/0xf0 [ 240.992271][T13960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.994249][T13960] ? tomoyo_path_number_perm+0x46d/0x580 [ 240.996087][T13960] ? stack_trace_save+0x8e/0xc0 [ 240.997657][T13960] ? stack_depot_save_flags+0x27/0x9d0 [ 240.999336][T13960] ? __lock_acquire+0x4a5/0x2630 [ 241.001009][T13960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.002921][T13960] ? policy_nodemask+0xed/0x4f0 [ 241.004812][T13960] alloc_pages_mpol+0x1fb/0x540 [ 241.006841][T13960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.009107][T13960] ? find_held_lock+0x2b/0x80 [ 241.011165][T13960] ? avc_has_extended_perms+0x33a/0x1080 [ 241.013120][T13960] ? avc_has_extended_perms+0x33a/0x1080 [ 241.015092][T13960] ? drm_syncobj_array_find+0x34/0x3b0 [ 241.017213][T13960] ___kmalloc_large_node+0xe5/0x120 [ 241.019193][T13960] __kmalloc_large_node_noprof+0x1c/0x70 [ 241.021661][T13960] __kmalloc_noprof+0x5be/0x850 [ 241.023468][T13960] drm_syncobj_array_find+0x34/0x3b0 [ 241.025212][T13960] drm_syncobj_signal_ioctl+0x20b/0x460 [ 241.027397][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.029964][T13960] ? drm_dev_exit+0x41/0x60 [ 241.032000][T13960] ? drm_dev_exit+0x41/0x60 [ 241.034245][T13960] drm_ioctl_kernel+0x1f3/0x3e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.035892][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.038461][T13960] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 241.040512][T13960] drm_ioctl+0x5e6/0xc60 [ 241.042022][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.044256][T13960] ? __pfx_drm_ioctl+0x10/0x10 [ 241.045882][T13960] ? selinux_file_ioctl+0x13b/0x290 [ 241.047571][T13960] ? selinux_file_ioctl+0xb6/0x290 [ 241.049422][T13960] ? __pfx_drm_ioctl+0x10/0x10 [ 241.051349][T13960] __x64_sys_ioctl+0x18e/0x210 [ 241.053212][T13960] do_syscall_64+0x10b/0xf80 [ 241.054914][T13960] ? clear_bhb_loop+0x40/0x90 [ 241.056564][T13960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.058501][T13960] RIP: 0033:0x7f8cde39ce59 [ 241.059935][T13960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.065958][T13960] RSP: 002b:00007f8cdc5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.068778][T13960] RAX: ffffffffffffffda RBX: 00007f8cde616090 RCX: 00007f8cde39ce59 [ 241.072456][T13960] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 241.075877][T13960] RBP: 00007f8cde432d6f R08: 0000000000000000 R09: 0000000000000000 [ 241.078399][T13960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.080897][T13960] R13: 00007f8cde616128 R14: 00007f8cde616090 R15: 00007ffd5f27bff8 [ 241.083786][T13960] [ 241.084813][T13960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.087398][T13960] CPU: 2 UID: 0 PID: 13960 Comm: syz.2.2229 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.092305][T13960] Tainted: [L]=SOFTLOCKUP [ 241.094209][T13960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.098320][T13960] Call Trace: [ 241.099449][T13960] [ 241.100507][T13960] dump_stack_lvl+0x100/0x190 [ 241.102565][T13960] vpanic+0x552/0x970 [ 241.104526][T13960] ? __pfx_vpanic+0x10/0x10 [ 241.106831][T13960] panic+0xd1/0xe0 [ 241.108657][T13960] ? __pfx_panic+0x10/0x10 [ 241.110598][T13960] ? check_panic_on_warn+0x1f/0x90 [ 241.112329][T13960] check_panic_on_warn.cold+0x19/0x34 [ 241.114575][T13960] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 241.117347][T13960] __warn.cold+0x191/0x328 [ 241.119030][T13960] __report_bug+0x296/0x3d0 [ 241.121075][T13960] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 241.123997][T13960] ? __pfx___report_bug+0x10/0x10 [ 241.126360][T13960] ? __lock_acquire+0x4a5/0x2630 [ 241.128597][T13960] ? __lock_acquire+0x4a5/0x2630 [ 241.130840][T13960] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 241.133618][T13960] report_bug+0xb2/0x220 [ 241.135599][T13960] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 241.137967][T13960] handle_bug+0x16a/0x2a0 [ 241.139413][T13960] exc_invalid_op+0x17/0x50 [ 241.141029][T13960] asm_exc_invalid_op+0x1a/0x20 [ 241.142978][T13960] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 241.145079][T13960] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 f3 54 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 241.152753][T13960] RSP: 0018:ffffc90003b477a0 EFLAGS: 00010246 [ 241.155209][T13960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 241.157731][T13960] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 241.160145][T13960] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 241.163161][T13960] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 241.166931][T13960] R13: 1ffff92000768f43 R14: 0000000000000015 R15: 1ffff92000768f0d [ 241.169838][T13960] ? bpf_ksym_find+0x128/0x1c0 [ 241.171371][T13960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.173332][T13960] ? is_bpf_text_address+0x94/0x1a0 [ 241.174993][T13960] ? kernel_text_address+0x8d/0x100 [ 241.176673][T13960] ? __pfx_widen_string+0x10/0x10 [ 241.178393][T13960] ? __kernel_text_address+0xd/0x30 [ 241.180250][T13960] ? unwind_get_return_address+0x59/0xa0 [ 241.182285][T13960] ? arch_stack_walk+0xa6/0xf0 [ 241.183997][T13960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 241.186443][T13960] ? tomoyo_path_number_perm+0x46d/0x580 [ 241.188783][T13960] ? stack_trace_save+0x8e/0xc0 [ 241.190853][T13960] ? stack_depot_save_flags+0x27/0x9d0 [ 241.193214][T13960] ? __lock_acquire+0x4a5/0x2630 [ 241.195341][T13960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.198209][T13960] ? policy_nodemask+0xed/0x4f0 [ 241.200430][T13960] alloc_pages_mpol+0x1fb/0x540 [ 241.202471][T13960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.204725][T13960] ? find_held_lock+0x2b/0x80 [ 241.206529][T13960] ? avc_has_extended_perms+0x33a/0x1080 [ 241.208616][T13960] ? avc_has_extended_perms+0x33a/0x1080 [ 241.211026][T13960] ? drm_syncobj_array_find+0x34/0x3b0 [ 241.213505][T13960] ___kmalloc_large_node+0xe5/0x120 [ 241.215845][T13960] __kmalloc_large_node_noprof+0x1c/0x70 [ 241.218230][T13960] __kmalloc_noprof+0x5be/0x850 [ 241.220267][T13960] drm_syncobj_array_find+0x34/0x3b0 [ 241.222435][T13960] drm_syncobj_signal_ioctl+0x20b/0x460 [ 241.224722][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.227547][T13960] ? drm_dev_exit+0x41/0x60 [ 241.229723][T13960] ? drm_dev_exit+0x41/0x60 [ 241.231801][T13960] drm_ioctl_kernel+0x1f3/0x3e0 [ 241.233930][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.236425][T13960] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 241.238707][T13960] drm_ioctl+0x5e6/0xc60 [ 241.240690][T13960] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 241.243594][T13960] ? __pfx_drm_ioctl+0x10/0x10 [ 241.245824][T13960] ? selinux_file_ioctl+0x13b/0x290 [ 241.247960][T13960] ? selinux_file_ioctl+0xb6/0x290 [ 241.250107][T13960] ? __pfx_drm_ioctl+0x10/0x10 [ 241.252104][T13960] __x64_sys_ioctl+0x18e/0x210 [ 241.254121][T13960] do_syscall_64+0x10b/0xf80 [ 241.256135][T13960] ? clear_bhb_loop+0x40/0x90 [ 241.258064][T13960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.260673][T13960] RIP: 0033:0x7f8cde39ce59 [ 241.262741][T13960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.270402][T13960] RSP: 002b:00007f8cdc5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.274014][T13960] RAX: ffffffffffffffda RBX: 00007f8cde616090 RCX: 00007f8cde39ce59 [ 241.277433][T13960] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 241.280433][T13960] RBP: 00007f8cde432d6f R08: 0000000000000000 R09: 0000000000000000 [ 241.283554][T13960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.286561][T13960] R13: 00007f8cde616128 R14: 00007f8cde616090 R15: 00007ffd5f27bff8 [ 241.289540][T13960] [ 241.291389][T13960] Kernel Offset: disabled [ 241.293132][T13960] Rebooting in 86400 seconds..