last executing test programs: 2m3.136207652s ago: executing program 2 (id=1044): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000400)=[@enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @cpuid={0x64, 0x18, {0x0, 0x8}}, @code={0xa, 0x0, {"f30f51520d66baf80cb8595c7c80ef66bafc0cecc401f9da5d07f2f30f01f826410f01d10f01d10f01c4407a0eb9800000c00f3235001000000f30670f01c8"}}, @nested_load_code={0x12e, 0x70, {0x2, "66450f72d3abc74424000d010000c7442402b6aacdfcff2c2467debe49879736c441f5577e0226420f01c8c4417d517100660f3881b1b1ba7b0f66360f001ac744240071000000c744240200000000ff1c24c442c1286d04"}}, @wr_drn={0x68, 0x0, {0x5, 0x4}}, @wrmsr={0x65, 0x18, {0x640, 0xeaa}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x188}) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="660f388221440f20c03503000000440f22c0ddba7c0000002e0fc77554b9360b0000b8b6b70000ba000000000f3066ba430066b8000066ef2e0f01cfc4e27d19b615a7000066b8cd008ec866b83d018ee8", 0x51}], 0x1, 0x12, &(0x7f00000003c0)=[@efer={0x2, 0x100}], 0x1) r3 = gettid() close_range(r2, r0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x9, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid_for_children\x00') socket$packet(0x11, 0x2, 0x300) 2m1.940340173s ago: executing program 2 (id=1062): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x40880, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x80, {0x0, 0x0, 0x0, 0x8000000000000001, 0x5, 0x0, 0x4, 0x11, 0x10, "70ba1553ae9ea6478bf48dc9c3fa05060fd28c0449e7dfd9907d3a4ce66bf267b1512089d5c39ddb2a0eaf5fb66fffa6f4e6dac8839a643be8b9cc9f6e529a4d", "4de14f468f3701bee7bff0deeb81c1a9e23cad85953b7b7aca813c0cc80ff2668a63a07d35e2b43950e7ff6eca4a1c0951c3b0bdb089208bf6eb9955708c3b96", "d51843dd68180b7ce0be44da5645e97e8a597187331302cb790131ca4585c81f", [0x6, 0x989]}}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) 2m1.937496345s ago: executing program 2 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x50) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@llx}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x88, &(0x7f0000000440)=""/136, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x3ee5, 0x81}, 0x10, 0x1853e, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r0, r0, r0], &(0x7f0000000580)=[{0x0, 0x4, 0xf, 0x3}, {0x0, 0x1, 0x2}], 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0x1000, 0xe2, &(0x7f0000000a00)="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", &(0x7f0000000680)=""/226, 0x69, 0x0, 0xfd, 0xad, &(0x7f0000000780)="e2c339144974ef7a0e5e634ae19358e2159a1d42d1df601ce7b5f9b14ceb9bd9cfdd468eb8bfcdbf8865012d151a3b4d546feece9c0c9dfda591edbdf051b45f9d50c3aba67c11c8ad9c999b5f39a3522deb26e53c03fd9eacbd7cbc01eb4b30e9d775f162fe9466544da232954c2dc5121d3445045deec123eac6418e4cc524c08d23c029110b00f3892c99d86d0f0d8f322d2dcdfb678d6af47b55f9da311606bd3e7ad6ec1b3b5105b017f6630998d3721568d1e7620ad3c190aa7af8de5160a9ff425a7aeffea75f31019aff2ab49b957bb1dd40af992867d39602e4ad899949440b7aa8bf02f728d6b020d0338589c0f3f6a08c62a901fa5e5199", &(0x7f0000000880)="7ed4270a34e4bda76fc149333ddd0d64e28833022da6244c3c02482f9ed52af1ef26b4436310ff0ea9d69b38d3bee0c4d0fcdfcb58b3e3e7759271ecd09dd7b0d0cb8bb573ff58cb11b81366b0cf94aa629a085783ccf226e9c1df23980fff9ab23ab9714e8abd649217f64d515619793d7da7512caae1c4f760a539253847bb3986bb2a836f9e3f5cabe1285fb90e2024f9b3b767f68240865a8be900c375b0f94bf6e875f2578b072f18f183", 0x2, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) 2m1.233360602s ago: executing program 2 (id=1078): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x4000810) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m1.155674868s ago: executing program 2 (id=1081): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc4601, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) 2m0.958875602s ago: executing program 2 (id=1085): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r3, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40000}}], 0x1, 0x20000000) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x5, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0xa, 0x1ff, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) 2m0.898583211s ago: executing program 32 (id=1085): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r3, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x40000}}], 0x1, 0x20000000) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x5, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0xa, 0x1ff, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) 1m49.306586993s ago: executing program 4 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f0000000780)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg(r5, 0x0, 0x8986) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000040)) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000380)="cd", 0x1}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff2}, {0xfff3}}}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) 1m49.019976725s ago: executing program 4 (id=1272): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000380), 0x4) r1 = userfaultfd(0x801) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r2, r3, 0x2f, 0x18, 0x4}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"8e6801c9d7fe04c0fd864c8c8965406a", r4, 0x0, {0x2, 0x4}, {0x6343f108, 0x58}, 0x5, [0xd228, 0xfff, 0x2, 0xc9, 0xfffffffffffffe01, 0x7, 0x9, 0x4, 0x100000000, 0x40, 0x4, 0x3, 0x7f, 0x9, 0xf, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000180)=r4) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 1m48.971194055s ago: executing program 4 (id=1273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0xd074}}]}}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async, rerun: 32) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (rerun: 32) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1m48.951606338s ago: executing program 4 (id=1274): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x538033cf4e3f7ceb, 0x4, 0x6, 0x3}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) fchmod(r1, 0x40) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x4, 0x8000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x1}, &(0x7f0000000100)=0x8) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x538033cf4e3f7ceb, 0x4, 0x6, 0x3}) (async) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) fchmod(r1, 0x40) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x4, 0x8000}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x1}, &(0x7f0000000100)=0x8) (async) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) (async) 1m48.796373026s ago: executing program 4 (id=1275): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x85, "74d88b904b413c1feeabb90baf1a22c7523e97e455c39f782f5a15346b33443b407951199b1dbbb35e7cd181ec647482cb3bc66ae9bf6b8a623ff300577a9367d3463edd7a5d9f0f15c9fa2bf05bacd7e104d208864c933a45c1bc963276135c07b84e72bb1254191726f01b84a6d19248174b0dbd86de8055f2c59bef70edfc37b8050cf7"}, &(0x7f0000000140)=0x8d) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x80000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @private2, 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000200)="acaff5f8a5b0abf383f8b7a67ed6503cf0e9144e83bb40987e88d564ae639b972f1161cedeacf0f15c5f75f464b5aa07804e5bbe7d248565e0d8baefecfa3f03130bddaa7446b84ccc078af27d7988081889eae7c718997cb8e62a5c363bc1b2fef9afadef7247bfb4988108fd634adb59339f1cb257a7d17e7dd8a86894f12f92eb13a79fd29e2ae3c997c4a5c2ea224a6cffa07ed2a3293f1a1166ecdde7f6f357e98e24981b80f110acfc4897fb6c7e7f931fe2e873bd30ce52f09ea188c2a9f1900d792d04", 0xc7}, {&(0x7f0000000300)="cd3fed61a412266b73d7e76fadd8a2e6d5d296b9647e40f47adb58bb", 0x1c}], 0x2}}, {{&(0x7f0000000380)={0xa, 0x4e21, 0x77c, @loopback, 0x1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="c87418ec3815c4f0db443489ec4c871f917386d48d3ef374655e43ec8b0868df2bbcaabb1d7328b564bae701b0f1735d736538b071bfc9e20424b60a3e67e55d195aea5931f620e80ff52c3b2c8d843a48bbfea628c5c038", 0x58}, {&(0x7f0000000440)="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", 0xfa}, {&(0x7f0000000540)="37d6a2dc30253235e53c3ef65dce439688ef4ce49cb312017dffd7812b4e2ec592313e9cd11b98c905d07fa9027033de261bed74b2248710f661bfcbb6dc7ff0e37a7e34f3024a8f4a9ba325706ed0926eb3d380ce3f467258693683", 0x5c}], 0x3, &(0x7f0000000600)=[@dstopts={{0x48, 0x29, 0x37, {0x2b, 0x5, '\x00', [@generic={0x10, 0x27, "330e762fc7f1eff5893fe3c106cb44692a1d0eadc6efecae1e60028d9f2bff2604addce7d87db0"}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x2, 0x5c, 0x0, [@mcast2]}}}], 0x70}}], 0x2, 0x200048c0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000700)={r2, 0xf}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000740)={r2, 0x5, 0x4, [0xfd, 0x5, 0x4, 0x7f]}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0x2000, 0x80, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004940)={r3, r4, r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000049c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0xa204000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x24, r7, 0xf7ee0cdd678e376e, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044081}, 0x800) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000004b80)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004b40)={&(0x7f0000004b00)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'gretap0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x40048880) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004c00), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004c40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004dc0)={'erspan0\x00', &(0x7f0000004c80)={'sit0\x00', 0x0, 0x80, 0x700, 0xfc, 0x0, {{0x3d, 0x4, 0x3, 0x4, 0xf4, 0x67, 0x0, 0x68, 0x4, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0xc, [{@local, 0xff}, {@remote, 0x200}]}, @cipso={0x86, 0x26, 0x3, [{0x6, 0x2}, {0x0, 0xc, "3cf759370d19c06c50a5"}, {0x1, 0xd, "7b1212db658e8a1e46c4bb"}, {0x4, 0x5, "7b1833"}]}, @lsrr={0x83, 0x7, 0xcb, [@multicast1]}, @cipso={0x86, 0x3b, 0x3, [{0x6, 0xf, "d82ae7f8f2c2e12b09c9cf5bea"}, {0x6, 0x10, "210b961c49677427adae6088cd79"}, {0x2, 0x8, "a98b8c4542fb"}, {0x6, 0xe, "1e2a2f4b884bae5adc949f91"}]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x8, [{@local, 0x9}, {@multicast2, 0x76}, {@multicast2, 0x1ff}, {@remote, 0x8}, {@broadcast, 0xa}]}, @rr={0x7, 0x2b, 0x2b, [@multicast2, @private=0xa010101, @multicast2, @multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @private=0xa010100]}, @generic={0x44, 0xb, "1eb41ed530cb9d1319"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000004e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000004e40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000004f00)={'gre0\x00', &(0x7f0000004e80)={'syztnl1\x00', 0x0, 0x7, 0x8028, 0x2, 0x7, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@rr={0x7, 0xb, 0x9b, [@local, @local]}, @timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x6, [{@remote, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3}, {@loopback, 0x1ff}]}, @ssrr={0x89, 0x7, 0x1b, [@empty]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005240)={0xffffffffffffffff, 0xe0, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000004f40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000004f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000005040)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000005080), &(0x7f00000050c0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000005100)}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000053c0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005380)={&(0x7f0000005280)={0xcc, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005400)={'pim6reg0\x00'}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005480), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000054c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000055c0)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000005580)={&(0x7f0000005500)={0x70, r14, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r16, &(0x7f0000005700)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000056c0)={&(0x7f0000005640)={0x7c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd9d}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40045) 1m48.387764216s ago: executing program 4 (id=1280): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2000000) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) (async) socket(0x0, 0xa, 0x4) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @empty}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x0, 0x24000005) (async) preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}], 0x2, 0xffffff81, 0x0) 1m48.311084333s ago: executing program 33 (id=1280): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2000000) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) (async) socket(0x0, 0xa, 0x4) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @empty}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x0, 0x24000005) (async) preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}], 0x2, 0xffffff81, 0x0) 1m30.961239666s ago: executing program 3 (id=1503): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000180)) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) 1m30.960940911s ago: executing program 3 (id=1504): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r0, &(0x7f0000000100)=""/157, 0x9d) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/185) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0x1ef, 0x1}, 0x1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x67}, {@in=@loopback, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0xfffffffc, 0x2, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "b38e4d000000000000004600000000000000009fd797d6e037989f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r7) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r9, 0xc1004111, &(0x7f0000000140)={0x2, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRESOCT=r8, @ANYBLOB="00002400000000002400120014000100627de3a7fe655f736c617665000000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x140}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='q\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0xcd8f679b2fa98892, 0x63, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) splice(r6, 0x0, r10, 0x0, 0x10d00, 0x9) r11 = fcntl$getown(r1, 0x9) sched_setscheduler(r11, 0x3, &(0x7f0000000280)=0x6) read(r0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000300)=r11, 0x12) 1m29.008493318s ago: executing program 3 (id=1524): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CHANINFO(r1, 0x80306403, &(0x7f0000000600)={0x0, &(0x7f0000000840), 0x0, 0x0}) epoll_create1(0x80000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x9, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r2, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x8000, 0x0, "000200000500"}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x220001) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000140)={0xff, 0x443, 0xe660, 0x2, 0x10, 0x7fff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r5, r6, 0xee00}, 0xc) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaab5aaaaaaaaaaaaaa1c0800462200300065000040119078ac1e05010a01010207030a004e224e210018907804000000e39300000100000000000000"], 0x0) 1m28.658971129s ago: executing program 3 (id=1526): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000240)=""/179, 0xb3, 0x0, &(0x7f0000000300)=""/183, 0xb7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r6}, 0x10) socketpair(0xa, 0x2, 0x5, &(0x7f0000000040)) 1m28.508855678s ago: executing program 3 (id=1527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040001}, 0x4000880) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'batadv_slave_0\x00', @broadcast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'geneve1\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002600)={{0x9, 0x6, 0x3, 0x0, 'syz1\x00', 0x1}, 0x0, 0x10000000, 0x3, r6, 0x2, 0xecf, 'syz1\x00', &(0x7f00000025c0)=['\xff\xff\xff\xff\xff\xff', '\x00'], 0x7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r3) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x58, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9b5d61292d"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "5fee3628"}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000028c0)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002940)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x38, r8, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xcb, 0x30}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040001) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002c00)={r3, &(0x7f0000002a80)="64ca3cec9088bc3509babc0ba3a236dacfaf02f4c138cc405926067af855448ad04e8e2d49ff82cbc2d4924e313ccb07cbab5c91cd9c2d6163c859d3ecd863e0f3a6f9cb6699e22c79ac03b0277af0c881100f4be10ad9d1f564fa73cda2e8b267649c2b38be16675fc592b7d0600939f81e6c0d2d0ce4c1e7db90662e5240dce4307e33d1352782826e6801de9b4c7face7d83a0e4f9516960481690816f886a0061abfd9371baa93830ddaaa9b401cd03e828838db4d79a85b8a5483e9952da1915c6179e5e8bf7b5d69960f89ff145aedf1f0da7c633fed970c400f02d86f05125725d4d385da8bf84799b4c999f88792e5", &(0x7f0000002b80)=""/71}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r11, &(0x7f0000002e00)={&(0x7f0000002c40), 0xc, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0xcc, r12, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x240448c1}, 0x4000) write$char_usb(r3, &(0x7f0000002e40)="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", 0x1000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80), r7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x38, r13, 0x420, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x834) write$P9_RUNLINKAT(r3, &(0x7f0000003f80)={0x7, 0x4d, 0x1}, 0x7) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000003fc0)={{0x2, 0x0, 0x5, 0x1, 0x400}, 0xffffffff, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x8, 0xc65, 0x1}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000040c0)) 1m27.918094324s ago: executing program 3 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000060000000480000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = gettid() r2 = timerfd_create(0x0, 0x0) kcmp(r1, 0x0, 0x3, r0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r3, &(0x7f0000000080)={0x10}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = signalfd4(r9, &(0x7f0000000400)={[0x4]}, 0x8, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x4}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2c690c00080000001866000002000000000000000f00000085100000ffffffff18000000ff01000000000000f300000018110000", @ANYRES32=r0, @ANYBLOB="0000b7020000000000008500000086000000092701001500000218f6a625", @ANYRES32=r11, @ANYBLOB="0000000002000000185700000300"/24], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) splice(r8, &(0x7f0000000440)=0x6, r9, &(0x7f0000000480)=0x7, 0x357d, 0x1) 1m27.849591774s ago: executing program 34 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000060000000480000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = gettid() r2 = timerfd_create(0x0, 0x0) kcmp(r1, 0x0, 0x3, r0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r3, &(0x7f0000000080)={0x10}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = signalfd4(r9, &(0x7f0000000400)={[0x4]}, 0x8, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x4}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2c690c00080000001866000002000000000000000f00000085100000ffffffff18000000ff01000000000000f300000018110000", @ANYRES32=r0, @ANYBLOB="0000b7020000000000008500000086000000092701001500000218f6a625", @ANYRES32=r11, @ANYBLOB="0000000002000000185700000300"/24], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) splice(r8, &(0x7f0000000440)=0x6, r9, &(0x7f0000000480)=0x7, 0x357d, 0x1) 1m10.352886271s ago: executing program 6 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.17283068s ago: executing program 6 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1m10.018621141s ago: executing program 6 (id=1786): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m9.822930114s ago: executing program 6 (id=1790): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async) 1m9.822670936s ago: executing program 6 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="08009e000738000006002a000500000024002d801e000000361af41fe97c2288fc6841f589c46e48956a44dae1bd7f43602f00000a00f5"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="08009e000738000006002a000500000024002d801e000000361af41fe97c2288fc6841f589c46e48956a44dae1bd7f43602f00000a00f5"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000240000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000681c0000060a010400000000000000000100000008000b4000000000401c0480441701800e000100696d6d65646961746500000030170280080001400000000000020280da000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870e0000280002800800018000000000080003400000000008000340000000000900020073797a32000000005400028008000180000000000900020073797a31000000000900020073797a31000000000800034000000000080003400000000008000340000000000900020073797a30000000000900020073797a3000000000100002800900020073797a320000000094000100a601cb73261b6882237a065ff363762d4e1f15598e444ff364754c34b4528543748c9b79c430aa603175a7e3b5b9d190a2c2c4188b7c26120148c094d265a74365a97767ab9cbb31397039ab3f063f96a0d751f68f1af1a4f74a3f5d1cd4c3f29834815f07d702f399b124dfd3b860402c6998b9ad7d6cab6628759fc92df931a9e7e7bb6acbcb7ef909c15a79d6479a0800014000000000b41102806000010065fe9bb27826716fe37215876f3fdda74da914f0fe731980c3a4996a301da00f85e6a0d1e57217beef5c385d81f53cda9f47f7a3be67cf71ac8f58d16c169cfd9eba864d0d4d18181c1553667bc0f38b5d57f6db4617cf5aaee197826b000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727aad002400028008000340000000000900020073797a32000000000900020073797a32000000000400028020000100a1d1361784d5d07d33e06b7ce747466cd48ee5496c948e573baa0d077c0001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553731f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897f8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8e88d2c0c0002800800018000000000040002800c000280080003400000000004100100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a99171455d6801c435073d5d8143b24d9241bba82b7553e7b36c44062fc4047bf4bc8d6c9d594dd6bb220297616256ae9d30d98d33c1fad934f2f392bcc977d417d6463f84feb16f410045772bb92ed2d7eb93fec3dbe9490f10b4e7e293a50c1e196b8c4b9479013b9f9ad74eb96d7e828e0843f56a0c652b1054e7c20740cd540eb78c45d46ab7ee71e908b2fe1f072b5066ff2b8c232992ce6e38629f3acdfc6876dbc6f67e91ca069b8aa785b94d6569667f4a5675b1ad3274f96c411a8cdb500c4a50d56951d196a5849d7d4651cf38d73b88c66a6e9ac9d6103ded9f686fda7a56d262b5f7aca3661329ff505152d61bb10306e03338bc331096513123926b8b3005bf63486b8179ffbeba6c2122d53caa76ba756e1b8c5dd2d64915017d0ac348aac7e20280700b0379604c57988f4d13760e16ff4c29fd6ad76775d8c1619cc9a286958ea390635c90957aeac760caab20f297765091e8c4620e4041c256e3e063c4a75ad4e1b8563e84393f77f36212baba9c6644735de1b09acc0c33d88ec1c86f016e6fb8c0662645d2755a5470043c1bd2059079723ca0d0acb27c1916bf3821309606b8876ca60b87e52dce1fee4c697fc606406ed9d5aea44646891df32dfa567e9b93c02fcdff6e8a3583bd0c8507974805c0786895489f69d19c8970a762b03448894187f3150fcf433b00ead09987cee6473e28492532e74c846d0ab6e7908e260571f62e712fd8d0212030e41681b1e23c8f60af3c458eba1d41c1a365901039adee88ccc1f8dd06911ec37048509acbb56491ed5bc91d274faad42ca11e2b3d02f14c95d20aab34e313f1b91928408142d19570b217237b39a6281322b7cc7d8dee6a07145cd3827dff0e55b7ac5ac618e8e81b42002efb045fff6c08915888470bbe430749693c0d65c182c3483561624b7c309e19e94ba194f403ee8a1406d5f09df5cfa3839e1017d99b226b40a6baa06aff4b17a6fe995a6a83c56bba65a118bd93432d27d44fcc125e395f818fef7b82360eccc399ed0f03e1f0be86baeec92b67b54fcab9389bb5fdcb8b4303b6c2a4262ee30b37b917c6e14f2b52d481d2e5ad02739851b203b8602b983dc19bffdd3748fd0b29dc6b70054e68534888c02cdef58d15c79258c9880dd32ad90fbd2c766b2a68b880e7f0262640fc3e32c88e913dac1cf34201adda0cd457e87013889dc6f69d17bf1318b11c6293c1fb429050dcd33af8b7e31ce38990d358da60c5b31d16dadd46c6aad637b92ccad11b6249679998be4918d50e8208dd8286b1e325b8e023cbd9d707481752ecc6c5bfdb12aa88e14a154db4e79a64daa5ee9a53ac35b42c0000f07a9e427c3f215f11deef388b8f9960ac15251f2bb02ec282c858605061006211958260a8ce394f55a1c70883271709f24c1eb3f64eff2c2b69fb1368cce3d0f8d3d62e6192fc8b2368b0ae1311da57a8633060153293435ba8945249b9226ea630b2b6aa33d181cacddda6d3338fe6e9f1779d966d14c1f156757d5f5fb15102002c39421cb41b97b142853b6da4b86bb88aadf526447c5a12b4c324f9a1604cb7956b9afb5c596641f9cd9fc6be37eff82f32ce45d0515bf1cc966b8e57397986817399c98047622c87acfb1c6bfb0a37f326d285e22f6308bd1384c1e8681d44762dae45e073d246b52f6414eedecb90217057d42f985a2f8e2acd041af03e61d69e67e1689459a267090993e3d98f45314b9d43570a482c21ef678793f85f181eb677b4f73981c5d0a1ca8c6e65249359ca95093185cc8640e1f1cec8abfef53ba9c7fc24f0ca20389e9606dcfbaa93f5426e084d9cf522b3c75411aa34c22b289b1a7bd3ab01efebc27a1e09ee81056a113839234c0400dba9696c219eeacae13623505cdded580bc54819974c06ffcbb87c45d377c0bedf25907327bb7f4d07b600c9a816620815275c75aca418ade32ea85c965b379e8af6d8c8a32aa7f546978617cd907d39e75aab3221bb030194559e73d93e74d897b114b39d53ec305d332310b7abbef44569307703e916f7514b8497b6f3fb6f0daccd7bd301f67cad840419cf7128aa0b6264c6bbfd0c21eb6771bfbcc8590cbf7de3e6d9aa83667deb776715736c9194bb8825d0abce6d9b2693f93aa81ca67eb0ac9566456d6dababb75ccef060df30c8c23be41560e58f9f846debbf43765649047187cc7549d6728190675e7be45b3f56ed71564ae74b544b493e567459503b237a811a84036512e0728879eecc085ed1807613eb097ed784237c8746e96b73912be98f20dd2e2d4a79d0f6df706cf2366acbd01eafad1de8930d04bef65a5ee17ee453d5cb648d6279dd602814445d2967af8c1b1e92dc049ad9bee6f3b746ba5d8323b02f3ad671538f71efb65dd31fb86c090b77de525a678c12be72b86a62d1d850a1ab62ec46e0f11d34f43dac738bb2c2f925af7cc9d46a2b63f54077f0bc0035848da6f4ffff071ef4e1b8ba9a4fe2e4e1778c4f715a97787c29a4187c718dedf0459a4a6c736d0cefd2d6e2c49b7332d68ede037fe6f4281fee0afeccdd2c22763783f681ed014461aa805fdce74a1712a79473b5d99ab08b9dd4c3c6eae5d16f689ec2084382bf1b44fb1ac891e0a5adddcefb1b11f755ff2eadfa2d992c740826b246d3a91346a87f8802796e269323151f9c359715c6199338c003e19f8dfc474bc898bc3f0ef4a9b8d47cea6c655840dc9cc685c6e16104beadca4b069957fd54b62c6077c717f1b8ff6052aa89237ce8b71c44ca4f2fcedcee464774eb56132ddf1c037def1ad39a14e00f76f1fe84d90b48dd3c28bbbfeb157416b659b740bc35949765e8644a50eca9116c043718e233f80a307cf78c93cd6e38a2cf143faaaf602806556dc293d4907f5aa4e541901ee12267697cfc7fa35d979d6aaf8312e21c4f571dd32b506fc488da3843629ff5b63db55a5021286346b691ce7d8f930cdbcb4d07411f585de89696b33e0a8f32bc42ec9f6699f4a8af2fd74d1359898558ea0158342ff7703611af8d5a98c537b3bf6856bdfec88c73013b9cdcf987a12c9df591aa75d28ead7537e975479b9712d713b36744e5dc4ffd05f168be52bd0f4ffeb4ae6a638f2e415ef1a2d5d4d9d9a9e8bdb08265492b49e2ca6651a93230ed3ba9c09bc112591117939b043016732a083be675327b92c4624cbc62113c85253e653d001c157d23a3d1784a1cc1cf6d564bdb1c910a492d351c3471ee5486887c1f32555fb286da41ae46f3910516ed3bc4c8262cf6a668d0fb4f472dd7ffd23f9c5dbaa9f22f0f5a97905effdcb7877aba1213a2412bc5bd5fc6d8e7d0e7be5baa3c09dcc2b2299a72450adf04667244c930e638d4ce768386f8d954fba62a4fdc723c7cb8432361addbf15c086b4c1321463f2ec34d623426c4de8f4724b403ca013d5ea473be184d44716c3d7bc74d802e7f3898799346a752130aa3db94962ef7625fad6d2fa3b3ce37ba6ece06a4fde35b6490285bb66718551ca883edef903d3885deb852dd05df86eedec946b3543cf85cc5f3f89f13dae6cdc9d3b238fce59f4aae66ff2aba8c99ffd7c14b07a069fbade76084bdfbcecc00492147356d3d931bf15cf4b759981c290b9951d7abee0e43a6f9fac598c174d2ae0894dc5697633a0d051c5ace7f295376b53cfbfb5b49d01d09e56912d74d9494741c6fde0562004c5397c9f477a80be0db173a5336cfd74afa55f8afb1f0b93f2d6cc8b18cc3bbc954291a69c889f8361d0d93ccd9f1e0d950e08e1030eed47957c369e64c97aef34c289a778863d34684d90f54ec29a1a45b058d96dcd77d4708c8ce8fa087dc212f0f4785b1e145c7e6c734fcc8ec0a0fdc457cb60c57bc1259d05ed92ddacc9ba2d8e810ffde8ccf67ec43ac8f05c5f9dff3efbafe67271a7cbfd85dc90f870a3a2be2145b767edfa0e666a041ca7b99ac6cf09379df560e27bf00b60acc8bdc28bf765fd1a3a6daf20905e5f0a2dd473b3fbe1eaa414e5af8d4fa9847af219db7118d609cf28a45d810cfc2cbc9dfcdd1676816309165d89cf3a138fb785f4e41adb7e15cf40e6401ca684bfb976d4a7989b4fe6666fd926857366da896815d243c033fa243f6d02c683091d8b9ba613225246ab1f661f8085da9f18682e410e9aa771e6f30cb8b00d17e7cfaefd9d9b80a8760506f34ba04e0844b5dc8ec53cdf578d2a0bbdbe3ba4c92ff75d85caa97b396405f06dcecf136a3a73944a44e333df258a86960285f6cf2a5185b9e1afdd6feadef8f25b0836ab644eaedaa39b7f840332b6ba4a2e2ca4007dc02a8009e81d23428651a597437155d03a177e9c8501fbfca334d2515cbbde3116e5db438de268eb4ed4c29c7e19a421e7581969919449ea4982018a0ab283790a3741495572568476abc5ef7110db461167846cdfb21f5af30692724a3930b34a95fbfd2fea886ae5c3d30ab3737a5df1689ca3e30e24c1a907196e34002247bec3c7b58ead4c5b374f2ff6408bfc8f513c6bf7e8cf3a493046c16340459053a569fedf652bd4f6b04c43fa770b084defa3b2d7182feff095c4f0fd23e33ba1a3513e7a9c6a42ac35afa085083fe1ec331a1b1d4b11c5fc9573cfaf984027c98191ef52ec14e23477ce2b8ebc8523f3dc74fea42984d8711c2d5a98a92bfa26e8b92053e448f1d0aa9b3ad6bb159e08eb923d710e50784166e2d0021a933de490eb0542e45072c178646a6f674a5eabdde0aff8c20ef266c41bcb3150a8e2948e46e618988d44305ccb39dd77909f24704000280b80002809c000100875ba50afb7c4103b226f60ec3155234e3877c38dfdddca157704e58f963af3fd3ab9cddf625c2c3b44632f25af3de897f9aef70806700bc24c712677751fe844e94e44aa78410a88d4d32cc8fc592535e47a2045b6b13fec2acff1c57ec2e44789220c6ad86cde3262c0e29767d0793beb652eaa9ef1c9befb0a0641870d88c46e54141d2d8882c844b51249f0528a3413711f0c9b13a3b170001004310bc2a4e2de1f78da171e70703a65b8066da0004000280e0010280490001003342d233e05edebf6453ad40ffb8fdc32e50e78270ec9bdf6e7643df95e8d153f0fc5e15f615da4801b0fdb192177422b143dbbe14ee95b9f90e9d8797ca929c8a7ca57574000000e40001006aa6eaac6f4b461864c9dbab56133eaaa9f50b6770a119a9d89fec6e4376b5b2c32f661be94a4fe7c0755fd642f4b8d4752b9660d5b61226062d8871599bbcfa7c8206e27495557f57bc4647d209c70145e88dfe8b23aab7743c420ca8d3bffa2d96d91374fa565ac88aba12fb8163ec8d485eda1ff86f398f947db05a51b74abee278e6add982c178c4e08fb5aa9ef689629f74947a06d3b2d653216aaba7124ab6cf2a2bb2662834fc66fa32961f2065450b967516aaa8bed092ee58639c4fa0afe229c4a5e5c6f0d899360b0a26467db5b4f43fb3228fab59ae84be114ba08800010000000001290ad3eb30b6f62075fa7597f1fd84d9549fb819d48dc0632c14e96918cc653ec6718691516a727a180f8cd727f98394328b476bd4496f31fbdbecac89913ab041d49d9083286f1919c157b091587e87ec3ece2bfeb2c64400e7f8d1919215eb96d3f0919ae61554cf4911b5c2b6e2332e869e337ab23d2de9544ec2b5304dc52400028008000340000000000800018000000000080003400000000008000180000000004800028044000280080003400000000008000180000000000900020073797a3100000000080003400000000008000180000000000900020073797a3000000000080001800000000048000280340002800900020073797a300000000008000340000000000900020073797a300000000008000340000000000800018000000000100002800900020073797a32000000003800028034000280080001800000000008000340000000000800034000000000080001800000000008000180fffffffd0800034000000000b40401800c0001006269747769736500a4040280080003400000000008000240000000000800064000000000080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340000000000800034000000000080003400000000008000180000000006200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034000000000080003400000000008000180000000000800014000000000600004804000028008000180000000000900020073797a3000000000080001800000000008000180000000000900020073797a31000000000900020073797a31000000001c0002800900020073797a31000000000900020073797a32000000000800024000000000ac010480b200010006687351802453c1b314541f275193ac658985478517d01198c7d90f63dbcb74fce872904af6593131bccce0ef918bcbf359a0d8aa2801d0f31fc8aae73107413f6112724ccec7e130fb84435e63fed1d71f589f8b071b95bb38e0532478f6d3592922c17c635ea7a8f7ad3260e620447bf7f845e6017d17014e26504fe91922a2b5e10b8511169b2a9ac673e340506a052cea05d8a429d989757a396fe43535df4fe926987ed7fc41dd6acfdf2600000b0001000bca99f460f4b0002800028008000180000000000900020073797a30000000000800034000000000080003400000000004000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d6574610000000024000280080002400000000008000340000000000800035000000000080003400000003cd43137800a0001006c696d69740000000900010073797a30"], 0x1cdc}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x3}) (async) 1m9.753048224s ago: executing program 6 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000dc0)=0x6, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, 0xffffffffffffffff, 0xdd1ff000) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x5, 0x4) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 32) socket(0x2, 0xa, 0x300) (async) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m2.037519752s ago: executing program 0 (id=1888): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0xc0045002, &(0x7f0000000100)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) sendto$l2tp(r4, &(0x7f0000000280)="73f5011bd800cf175801", 0xa, 0x4008005, &(0x7f00000003c0)={0x2, 0x0, @remote, 0x3}, 0x10) recvfrom$l2tp(r4, 0x0, 0x0, 0x40010160, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0xb000, 0x7, 0x100, 0x8, 0x0, [{0x2, 0x9, 0x2, '\x00', 0x1}, {0x75, 0xf, 0x3, '\x00', 0xfd}, {0xe7, 0xf7, 0x98, '\x00', 0x9}, {0x2, 0x17, 0xb, '\x00', 0x2}, {0x1, 0xe, 0x3, '\x00', 0x2}, {0x2, 0x4, 0x40, '\x00', 0x3}, {0x7, 0x5, 0x7, '\x00', 0xff}, {0x2, 0x2, 0x10, '\x00', 0x80}, {0x8, 0x8, 0xfd, '\x00', 0x9}, {0x92, 0x5, 0x6, '\x00', 0x53}, {0x5, 0x80, 0x8, '\x00', 0x9}, {0x1, 0x4, 0x9, '\x00', 0x8}, {0x3, 0x1, 0xfd, '\x00', 0x3}, {0x8, 0x9, 0x7, '\x00', 0x2}, {0x49, 0x4, 0xd, '\x00', 0x6}, {0x54, 0x4, 0x5, '\x00', 0x9}, {0x4, 0x7, 0x12, '\x00', 0x6}, {0x3, 0x9, 0x7, '\x00', 0x9}, {0x1, 0x80, 0x2c, '\x00', 0x2f}, {0x8, 0x8, 0xf8, '\x00', 0x7f}, {0x7, 0x1, 0x1, '\x00', 0x1}, {0xe, 0x5, 0x4, '\x00', 0x2}, {0x95, 0x3, 0x5, '\x00', 0x8}, {0xfc, 0x81, 0x7f, '\x00', 0x8}]}}) read$FUSE(0xffffffffffffffff, &(0x7f00000012c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x3, &(0x7f0000000000)={0x0, 0x2, 0x2, @tid=r5}, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) r7 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvfrom$l2tp(r4, &(0x7f0000000440)=""/238, 0xee, 0x3, &(0x7f0000000300)={0x2, 0x0, @initdev}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x37, 0x0, 0x0, 0x202}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000080)=0x8) 1m1.970844042s ago: executing program 0 (id=1891): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x945a, 0x6, 'syz0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8013}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000500)={0x2, "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"}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x22, "af5405a7b1818f4a097d9a9f0074bf2cb6000000000000006700"}}) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) 1m1.869862021s ago: executing program 0 (id=1893): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) 1m1.851044564s ago: executing program 0 (id=1895): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001080)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0xfffffffffffffebd, &(0x7f0000003580)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5c0300001f0000022abd7000fddbdf25fc020000000000000000000000000001000004d202000000ac1414aa0000000000000000000000000100000005350000080018003b51000014000e00ff02000000000000000000000000000144000500ac141433000000000000000000000000000004d4ff000000832d000000000000000000000000ffffac1414bb03350000000309000900000000000000ffff00002c00130020010000000000000000000000000001fe8000000000000000000000000000aa000000000a000000ea000100736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100500003b0b5bd4becb7e927824acd898a54ca9f29f366d3e7cebbd165403c21a5a311e08a622286de5c96ceacf15311a093614bc7f1921c80f491f9b13fef5e91b3b9210bfa0e3ae74a8fe924acb3b18f10688233eb87fca209e3985a3b2fe4c804cc7288abc5ca5c9db3f09fb388660ea84ea00c66925e3e76c30bfcae5f39b1d200471a8eb9a7a82c5dfe9f2300854b1696acf59d9b053a1d0a42ac92782a2478ff10a4100007c000100626c616b6532732d3132380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000b98585eb83dc376bc6d39f0462e037ef60380e99faca04162679a4b29deadd45c9e10f54c64d02369d686f98c72106bd8e2890870c001c00", @ANYRES32=r2, @ANYBLOB="000000002c001300ff020000000000000000000000000001e00000020000000000000000000000000000000002000000ef00120065636861696e69762867656e657269632d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000000000001805000080000000c59be1a65242ac144170d81d52d39381aa1db151c1e27bc4c1131ceb754fed2b03473faa74a48f6e24b2576e37b4f435e739d821e7fdd72ae24f148eaeebe88a460ea6f2fdbd6f2874f2e3291f36fd022b4492343c9446c04934d5c2ee9b697d14d95c151aed93de52144639bed2a06d3d7bb3bedf3b9153bbee8a76a6e215644cac0ed7c667eade0fc8fad708dfe5be5dc8cb80b69e7bf3feb0850457408599aac67f00"], 0x35c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.320911696s ago: executing program 0 (id=1901): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e35842", 0x8d}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x2, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000380012800b00010065727370616e000028000280060010004e240000060011004e210000040012000800140002000000050009"], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000180)={&(0x7f0000000040)=[r9, r9], &(0x7f0000000140)=[0x7f], 0x9, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000040)) 1m0.861184574s ago: executing program 0 (id=1904): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) (async) prctl$PR_SET_PTRACER(0x59616d61, r1) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x1000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x22}, &(0x7f0000000200)=""/16, 0x10, &(0x7f0000000240)=""/93, &(0x7f0000000300)=[r1, r2], 0x2, {r3}}, 0x58) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x4a) (async) socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f00000000c0)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1m0.755408669s ago: executing program 35 (id=1904): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) (async) prctl$PR_SET_PTRACER(0x59616d61, r1) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x1000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x22}, &(0x7f0000000200)=""/16, 0x10, &(0x7f0000000240)=""/93, &(0x7f0000000300)=[r1, r2], 0x2, {r3}}, 0x58) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x4a) (async) socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f00000000c0)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 54.700483363s ago: executing program 36 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000dc0)=0x6, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, 0xffffffffffffffff, 0xdd1ff000) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x5, 0x4) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 32) socket(0x2, 0xa, 0x300) (async) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5.080542057s ago: executing program 5 (id=2589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@multicast2, 0x1}, {@local, 0x3}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.219853824s ago: executing program 5 (id=2601): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x18, "6485e5e9587a23d15560613b98d3bb4b19bafc48932f4e6ec25642dc81426653009b4cd01b993d5580694f283c3dfdc7322599f532307604cbdebdddcf93c4bf56302585df68b6766aeb4848ef8a0e28fca79dc4a7fa88d182c3fec9dc04ccaa383a77d334e85422880620d1af31999548eeeb1e136635f72664565ba7e2cd23"}) 4.218056899s ago: executing program 5 (id=2602): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000100)=""/97) 4.130779125s ago: executing program 5 (id=2603): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2080000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x3, 0x803, 0xfffffffd) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRES8=r5], 0x48}}, 0x24000045) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRES8=r5], 0x48}}, 0x24000045) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x2, 0x2a, 0x1, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_io_uring_setup(0x1ffc, &(0x7f0000000180)={0x0, 0x5ca3, 0x10000, 0x3, 0x30}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)) r11 = eventfd(0x10000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, &(0x7f0000006d00)=r11, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000071, 0x0, 0x67}]}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x7f}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) eventfd(0x569) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000000110001000000000000000000000ad5bc1cdf0cdf753c3e58f453ca1c6e519fc51f366e02"], 0xa0}}, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7, 0x80, 0x4, 0x0, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0xfa, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0xc, 0x73, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x2}]}, @timestamp={0x44, 0x1c, 0x38, 0x0, 0x2, [0x7f, 0x7, 0x100, 0x2, 0x6, 0x8]}, @lsrr={0x83, 0xf, 0x14, [@local, @private=0xa010100, @local]}, @timestamp={0x44, 0x10, 0xa5, 0x0, 0x8, [0x4, 0x7, 0xc8]}, @rr={0x7, 0x1b, 0x48, [@multicast1, @multicast1, @rand_addr=0x64010100, @broadcast, @broadcast, @broadcast]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7, 0x80, 0x4, 0x0, {{0x1e, 0x4, 0x3, 0x3, 0x78, 0x65, 0x0, 0xfa, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0xc, 0x73, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x2}]}, @timestamp={0x44, 0x1c, 0x38, 0x0, 0x2, [0x7f, 0x7, 0x100, 0x2, 0x6, 0x8]}, @lsrr={0x83, 0xf, 0x14, [@local, @private=0xa010100, @local]}, @timestamp={0x44, 0x10, 0xa5, 0x0, 0x8, [0x4, 0x7, 0xc8]}, @rr={0x7, 0x1b, 0x48, [@multicast1, @multicast1, @rand_addr=0x64010100, @broadcast, @broadcast, @broadcast]}]}}}}}) 3.804951995s ago: executing program 5 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4008850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x6400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='afs_cb_miss\x00', r3, 0x0, 0x80000000}, 0x18) 3.600441245s ago: executing program 5 (id=2607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x10, r0, 0x239c0000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) socket$rxrpc(0x21, 0x2, 0xa) 3.508172189s ago: executing program 37 (id=2607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x10, r0, 0x239c0000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) socket$rxrpc(0x21, 0x2, 0xa) 1.686629558s ago: executing program 1 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x40040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.685455603s ago: executing program 1 (id=2635): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24004051) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24004051) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) semget$private(0x0, 0x1, 0x200) (async) r4 = semget$private(0x0, 0x1, 0x200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'geneve1\x00', &(0x7f0000000400)=@ethtool_cmd={0x48, 0x7, 0x3, 0x7, 0xa1, 0x40, 0x6, 0x1, 0xb, 0xfd, 0x101, 0x3d, 0x74, 0x9, 0x1, 0x5, [0x1ff, 0x9]}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000001a00000f00000a34000000060a0b0400000000000000000100000008000b40000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) write(r1, &(0x7f0000000240)="e11c57eacf4ec0cdac490e722555eb0e2a5a6829bcedb3d7cd4f035193704e337d52b8e8c288b9ec9abeb1191d3fe5fda56827d5b9d1f18aff7747068dc377ed68bfb8ca54e0a433504acd2050c989c47c317d152c8f6923f0259265f83fe46d139cc6aabf1f73eb058e2a11215fe70f3333b08fceba6b352e8fcfcafed0f641572ad57682730fc66478096f470ab888af927a", 0x93) (async) write(r1, &(0x7f0000000240)="e11c57eacf4ec0cdac490e722555eb0e2a5a6829bcedb3d7cd4f035193704e337d52b8e8c288b9ec9abeb1191d3fe5fda56827d5b9d1f18aff7747068dc377ed68bfb8ca54e0a433504acd2050c989c47c317d152c8f6923f0259265f83fe46d139cc6aabf1f73eb058e2a11215fe70f3333b08fceba6b352e8fcfcafed0f641572ad57682730fc66478096f470ab888af927a", 0x93) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x1, 0x8, 0x5}, 0x14) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000016c0)=""/152) 1.570969492s ago: executing program 1 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x3, 0x6, 0x5}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000380012800b00010065727370616e000028000280060010004e240000060011004e210000040012000800140002000000050009"], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4) 1.500015698s ago: executing program 1 (id=2639): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) r1 = openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = getpid() sendfile(r1, r1, 0x0, 0x69) prctl$PR_SET_PTRACER(0x59616d61, r2) getpid() ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@overlay={0xcc30dec6, 0x7, 0x4, 0x2000, 0x7, {}, {0x3, 0xc, 0xc0, 0x81, 0x69, 0xb0, "07a68ff8"}, 0x1, 0x3, {}, 0x3, 0x0, r0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = socket$inet6(0x1c, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) getsockopt$inet_mreqn(r5, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}, r6}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fcff7f00000000e12100000009001f0070687931000000000a0001007770616e300000000a0001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c813}, 0x0) syz_clone3(&(0x7f0000000940)={0x200004000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0xfffffffffffffcb0, 0x0, &(0x7f0000000040)=[0x0], 0x1, {r3}}, 0x58) 1.420766113s ago: executing program 1 (id=2640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x1}, 0x58) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async, rerun: 64) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) (rerun: 64) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000640)={&(0x7f0000000500)=[{0x50, 0xa001, 0x0, 0x0}], 0x1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x200000) (async) munmap(&(0x7f0000075000/0x2000)=nil, 0x2000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async, rerun: 64) r4 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000300)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="1c", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r7}) 1.220542701s ago: executing program 7 (id=2645): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async, rerun: 32) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a6d42) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb", 0x1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) (async) close(r1) 1.170402219s ago: executing program 7 (id=2646): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) io_setup(0x3ff, &(0x7f0000000500)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001040)=0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000880)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000300)=ANY=[@ANYBLOB="01643df4a80f52b56ad5739a239a47b8aaf801000000bc8dec", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) write$binfmt_register(0xffffffffffffffff, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x43, 0x50, 0x46, 0x46, 0x4f]}, 0x30) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000400)={0x7, 0x6}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)={0x1, 0xa, 0x1, 0xc9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @loopback]}, 0x58) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000540)={0x0, 0x8000, 0x6, 0x0, 0x0, [{{r2}, 0x1}, {{r6}}, {{r3}, 0x9}, {{r3}, 0xdd}, {{r3}, 0x5}, {{r3}}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff7ffc}, {0x5, 0x31, 0x0, 0x5}, {0x4, 0x3, 0x53, 0x9}, {0xe421, 0xab, 0x5, 0x7}, {0x3, 0x0, 0xa, 0x7}, {0x1, 0x80, 0x69, 0x200}, {0x8, 0x4, 0x0, 0x3}]}) close_range(r7, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x7f, &(0x7f0000000000)=0x2) mknod(&(0x7f0000000140)='./file0\x00', 0x400, 0x8) 770.786971ms ago: executing program 8 (id=2652): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 769.471501ms ago: executing program 8 (id=2653): r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x7fffffff, 0x7}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={r2, @broadcast, @broadcast}, 0xc) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x10042040) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @dev}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e15ea0e464ce04fc8252b3aeb11d05d47965420f275bb41b561bb747d2b68a43fed70ec9fe415875452bb5929aabbce3e575230f6ecfaf8e2ba9d81ee32502fbea95074e6dba85847b2add83a7d717f7ea13c93d12ccb0329cef7bcf47c1121c10bfb6049e3f01e90967262ec95791a451841e1630b24e5d086888cef0ef9f7cca185953e035bae2807920745ddfd93b7321dadf3c3f8f054350e8581760ba90704b618f5bd4e1ca129392463a14c71fde05259846b89"], 0x0, 0x37}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="6d04d0fff0ffffff18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000899070005000000185600000b0000000000000000000000aca50c0001000000185100000900"/80], &(0x7f0000000100)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x21, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x10, 0x7000000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) socket$kcm(0x2, 0x3, 0x106) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x7fffffff, 0x7}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={r2, @broadcast, @broadcast}, 0xc) (async) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x10042040) (async) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) (async) ioprio_set$uid(0x3, 0x0, 0x2007) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @dev}, &(0x7f0000000180)=0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e15ea0e464ce04fc8252b3aeb11d05d47965420f275bb41b561bb747d2b68a43fed70ec9fe415875452bb5929aabbce3e575230f6ecfaf8e2ba9d81ee32502fbea95074e6dba85847b2add83a7d717f7ea13c93d12ccb0329cef7bcf47c1121c10bfb6049e3f01e90967262ec95791a451841e1630b24e5d086888cef0ef9f7cca185953e035bae2807920745ddfd93b7321dadf3c3f8f054350e8581760ba90704b618f5bd4e1ca129392463a14c71fde05259846b89"], 0x0, 0x37}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x48) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="6d04d0fff0ffffff18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000899070005000000185600000b0000000000000000000000aca50c0001000000185100000900"/80], &(0x7f0000000100)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x21, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x10, 0x7000000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) (async) 540.927065ms ago: executing program 8 (id=2654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000100)=@x25={0x9, @remote}, 0x0, 0x800) 540.680449ms ago: executing program 8 (id=2655): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0x7, &(0x7f0000000140)={0x0, 0xf, 0x2, @thr={&(0x7f0000000040)="d9a23adce13f724f42627d92de8b292194d718970fa3ca07fd154c00041830d98992c290aaee9a9010d5fae242383946ee71b481421550b78bd78508bff9b7410fa0dfda46c694798097d60e88faf15b573fae97e7690db6c282f4b23831002ffcb8f7dd20073c57934de9df23c7cb75b80f837c91b98162636c55a9112ec2af0e840fa2cd0e211422ac52b3a8360a094bd59d3038d872006260e14805e98f0d5af66ca200b62bc7eb8fe9a9d7090bad1ae5351900e61d2b9544eefc3c2fc14f2ac1b446f6ac06c2995877bce6bbf959b2f7cf8bdf0c984e1df1a178db233882b97807e959", &(0x7f0000000500)="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"}}, &(0x7f0000000180)) 390.56201ms ago: executing program 7 (id=2656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0xfdef) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x26, 0xd, 0x4}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r5, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000880)=[@request_death], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x41, 0x0, &(0x7f0000000340), 0x0, {r9}}, 0x58) 310.682423ms ago: executing program 7 (id=2657): fanotify_init(0x8, 0x80000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @private=0xa010100, @multicast, @private=0x1}}}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x1, 0x0, 0x3, 0x1}}, 0x26) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f00000001c0)={0x4009b8d, 0x40, 0xb, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf40d, 0x0, 0x7ff, 0x1, 0xa8d, 0xe5a, 0x6, 0x5, 0x3, 0x200000000000000, 0x6, 0x4, 0x10001, 0x0, 0x0, 0x400000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'pim6reg0\x00', 0x0}) r4 = syz_io_uring_setup(0x1ff1, &(0x7f0000000480)={0x0, 0xf236, 0x80, 0x0, 0xb6}, &(0x7f00000000c0)=0x0, &(0x7f0000000700)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x0, 0x7d8e39db, 0x100000001}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x430000, 0x90, 0x1d}, 0x18) io_uring_enter(r4, 0x47bc, 0x6f43, 0x0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000eb267e173aade979a065ed1fa436ed6c000080000000000000f5b08f04006ccfa7608753c67d5a5e69deb34a72bcd583abb3f76c6e4b6810bd813a65eb4a65c8f1695579dbcc5ed478c93ff6a8b35fed9e1957fc1899652d231300453718ab9c0117", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r5, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) read$dsp(0xffffffffffffffff, &(0x7f0000000040)=""/243, 0xf3) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1, 0x2, 0x400) socket$kcm(0x11, 0x200000000000002, 0x300) msgget(0x3, 0x84) 238.887164ms ago: executing program 8 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 150.707582ms ago: executing program 1 (id=2659): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000a145e17cb39636500c4e3bf4d12415551647403a0c7c57c2fa88368ab181c73b05d13a8a0c157de3c53f2f68d7841931db7ec5309977ebda5724c67c957db6d2f158a6576496779ba354b1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r4, r5, 0x0, 0x10ffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000dd0000000007020000f8ffffffb703000008000000b7040000000000008500000016000000950000000000002000faffffff0000071c25f8953540c058f80299c2f6ecc0af032f52de1d080455bbe5abd17085c5a3b2c7b4a8e5af2189be082b1871d5807e226ddd770d8cf74d4f00dc61c55736c82faa3cdb7d05d9a5adea1089702d6922c6bd702c082e4032db885d71b02249fffa3017f8e5290e3e56e770a6aefd3507d8621e2416fd591671afbfb7099e57b8a1cb66acb71edc2132055bd701000000"], 0x0, 0x1, 0xfffffffffffffd48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f00000004c0)) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 150.33021ms ago: executing program 7 (id=2660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, 0x0, &(0x7f00000003c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x48524742, 0x3, 0xb, [{0x6, 0xd381}, {0xdc5, 0x45}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcb}, {0x5, 0x6}, {0x1, 0x80000001}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x3}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x50000, 0x1000, &(0x7f0000fef000/0x1000)=nil}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80080) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03a", 0x62}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3713c1ae2", 0x96}, {0x0}], 0x7}}], 0x1, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140002f8dbdf250d00"/20], 0x14}}, 0x4008800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 150.133427ms ago: executing program 8 (id=2661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, 0x0, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07060000000000000000270000", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 0s ago: executing program 7 (id=2662): r0 = socket(0x2, 0x805, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001900)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6078628400280001200100000000000000000000000000000000000000002f04000000000000071800000000040000d60400000000000003042215fffb"], 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000010300), &(0x7f0000000040)=0x8) socket$kcm(0x10, 0x2, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000080)) close(0x3) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(0xffffffffffffffff, 0x207a98, 0xaf1d, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) pipe2(&(0x7f0000000340), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240002006800010002000000fcff0000000c0002000200000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) readv(r1, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 196.826163][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 196.902136][ T6246] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.906319][ T6246] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.915534][T12699] 9p: Bad value for 'dfltgid' [ 196.917728][T12699] 9p: Bad value for 'dfltgid' [ 196.923957][T12699] pvrusb2: Attempted to execute control transfer when device not ok [ 196.933369][ T53] usb 6-1: USB disconnect, device number 44 [ 196.968214][ T6246] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.972363][ T6246] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.026695][ T6246] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.030038][ T6246] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.065179][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.072132][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.075985][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.080510][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.084162][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.088633][ T6246] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.092444][ T6246] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.114511][T12719] ªªªªªª speed is unknown, defaulting to 1000 [ 197.255967][ T6246] bridge_slave_1: left allmulticast mode [ 197.258522][ T6246] bridge_slave_1: left promiscuous mode [ 197.261194][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.264772][ T6246] bridge_slave_0: left allmulticast mode [ 197.267110][ T6246] bridge_slave_0: left promiscuous mode [ 197.269197][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.395966][ T6246] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 197.493468][T12724] overlayfs: regular lower layers cannot follow data lower layers [ 197.670967][ T6246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.677099][ T6246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.684095][ T6246] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 197.691973][ T6246] bond0 (unregistering): Released all slaves [ 197.784937][ T6246] bond1 (unregistering): Released all slaves [ 197.839164][T12737] "syz.5.1912" (12737) uses obsolete ecb(arc4) skcipher [ 197.929365][ T6246] bond2 (unregistering): Released all slaves [ 198.009343][ T6246] bond3 (unregistering): Released all slaves [ 198.018628][T12719] xfrm0 speed is unknown, defaulting to 1000 [ 198.098207][ T6246] : left promiscuous mode [ 198.197993][ T6246] IPVS: stopping backup sync thread 10166 ... [ 198.253902][T12754] __nla_validate_parse: 7 callbacks suppressed [ 198.253914][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 198.260275][T12755] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1915'. [ 198.272910][T12719] chnl_net:caif_netlink_parms(): no params data found [ 198.376290][T12765] netlink: 'syz.1.1917': attribute type 7 has an invalid length. [ 198.421609][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.430474][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.433152][T12719] bridge_slave_0: entered allmulticast mode [ 198.436442][T12719] bridge_slave_0: entered promiscuous mode [ 198.439774][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.443865][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.446244][T12719] bridge_slave_1: entered allmulticast mode [ 198.448842][T12719] bridge_slave_1: entered promiscuous mode [ 198.471401][T12765] netlink: 'syz.1.1917': attribute type 7 has an invalid length. [ 198.480763][T12768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1917'. [ 198.502482][T12719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.507368][T12719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.524000][T12719] team0: Port device team_slave_0 added [ 198.527280][T12719] team0: Port device team_slave_1 added [ 198.544034][T12719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.546540][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.560539][T12719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.566517][T12719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.569453][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.585131][T12719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.685964][ T40] audit: type=1400 audit(1767003332.446:1083): avc: denied { read } for pid=12771 comm="syz.1.1918" path="socket:[61753]" dev="sockfs" ino=61753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.691464][T12719] hsr_slave_0: entered promiscuous mode [ 198.696370][T12719] hsr_slave_1: entered promiscuous mode [ 198.698996][T12719] debugfs: 'hsr0' already exists in 'hsr' [ 198.701250][T12719] Cannot create hsr debugfs directory [ 198.723255][ T6246] hsr_slave_0: left promiscuous mode [ 198.725824][ T6246] hsr_slave_1: left promiscuous mode [ 198.728364][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.732275][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.734717][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.741838][ T40] audit: type=1400 audit(1767003332.506:1084): avc: denied { map } for pid=12771 comm="syz.1.1918" path="socket:[61753]" dev="sockfs" ino=61753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.751746][ T6246] veth1_to_batadv: left promiscuous mode [ 198.753821][ T6246] veth1_macvtap: left promiscuous mode [ 198.755647][ T6246] veth0_macvtap: left promiscuous mode [ 198.764418][T12774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.767717][T12774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.771219][T12774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.774104][T12774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.776534][T12774] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.780276][T12774] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.075320][ T6246] team0 (unregistering): Port device team_slave_1 removed [ 199.109669][ T6246] team0 (unregistering): Port device team_slave_0 removed [ 199.242878][T12781] "syz.5.1920" (12781) uses obsolete ecb(arc4) skcipher [ 199.569935][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 199.575039][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'. [ 199.610432][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 199.613569][ T1421] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.624094][T12793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=12793 comm=syz.1.1924 [ 199.633802][T12719] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.638972][T12719] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.643540][T12719] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.648332][T12719] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.672446][T12804] random: crng reseeded on system resumption [ 199.716221][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.726960][ T6246] IPVS: stop unused estimator thread 0... [ 199.729140][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.737998][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.740280][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.751253][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.753808][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.769592][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.784663][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.852442][ T5984] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 199.904933][T12719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.012870][ T5984] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.016996][ T5984] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.030584][ T5984] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 200.033592][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.040949][ T5984] usb 10-1: config 0 descriptor?? [ 200.048996][ T5984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 200.051911][ T5984] dvb-usb: bulk message failed: -22 (3/0) [ 200.072062][ T5984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 200.080223][ T5984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 200.084795][ T5984] usb 10-1: media controller created [ 200.088941][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.099003][ T5984] dvb-usb: bulk message failed: -22 (6/0) [ 200.102441][T12719] veth0_vlan: entered promiscuous mode [ 200.102454][ T5984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 200.113733][ T5984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input71 [ 200.114011][T12719] veth1_vlan: entered promiscuous mode [ 200.122501][ T5984] dvb-usb: schedule remote query interval to 150 msecs. [ 200.125201][ T5984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 200.136370][T12719] veth0_macvtap: entered promiscuous mode [ 200.144527][T12719] veth1_macvtap: entered promiscuous mode [ 200.161992][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.168820][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.176228][ T96] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.179916][ T96] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.185967][ T96] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.189603][ T96] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.226751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.229580][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.244869][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.247522][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.252385][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.267080][ T5984] usb 10-1: USB disconnect, device number 5 [ 200.296680][ T5984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 200.393886][T12825] input: syz1 as /devices/virtual/input/input72 [ 200.640528][ T29] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 200.681507][T12834] program syz.7.1931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.794852][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.800472][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.803777][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.806737][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 200.820709][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.821258][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 200.822784][ T5935] Bluetooth: hci0: command 0x041b tx timeout [ 200.829136][ T5935] Bluetooth: hci2: command 0x0419 tx timeout [ 200.831406][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.831445][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.846761][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.849316][ T29] usb 6-1: Product: syz [ 200.851247][ T29] usb 6-1: Manufacturer: syz [ 200.862947][ T40] audit: type=1400 audit(1767003334.616:1085): avc: denied { read append } for pid=12837 comm="syz.5.1933" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.864380][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 200.871414][T12838] gfs2: error -5 reading superblock [ 200.873507][ T40] audit: type=1400 audit(1767003334.616:1086): avc: denied { open } for pid=12837 comm="syz.5.1933" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.898882][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 200.904352][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 200.910561][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 200.927829][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 200.929947][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 200.935912][T12842] xt_hashlimit: invalid interval [ 202.520342][ T40] audit: type=1400 audit(1767003336.276:1087): avc: denied { append } for pid=12846 comm="syz.5.1937" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.649177][ T6028] usb 6-1: USB disconnect, device number 45 [ 202.757510][ T40] audit: type=1400 audit(1767003336.516:1088): avc: denied { connect } for pid=12848 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.890492][ T5933] Bluetooth: hci0: command 0x041b tx timeout [ 202.900768][ T5933] Bluetooth: hci2: command 0x0419 tx timeout [ 202.970580][ T5935] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 202.970640][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 203.071426][ T29] IPVS: starting estimator thread 0... [ 203.082325][ T5933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.087756][ T5933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.091714][ T5933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.095623][ T5933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.099057][ T5933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.160340][T12856] ªªªªªª speed is unknown, defaulting to 1000 [ 203.160935][T12857] IPVS: using max 46 ests per chain, 110400 per kthread [ 203.209122][ T40] audit: type=1400 audit(1767003336.966:1089): avc: denied { accept } for pid=12865 comm="syz.1.1943" path="socket:[58870]" dev="sockfs" ino=58870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.224036][ T5933] Bluetooth: hci0: unexpected event for opcode 0x080c [ 203.292530][T12856] xfrm0 speed is unknown, defaulting to 1000 [ 203.294633][T12866] XFS (nullb0): Invalid superblock magic number [ 203.373869][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.410889][T12884] IPVS: length: 18 != 8 [ 203.484873][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.519812][T12889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 203.549553][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.591732][ T40] audit: type=1400 audit(1767003337.356:1090): avc: denied { ioctl } for pid=12900 comm="syz.1.1953" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.606146][T12856] chnl_net:caif_netlink_parms(): no params data found [ 203.624548][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 203.704822][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.738162][T12856] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.740867][T12856] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.744024][T12856] bridge_slave_0: entered allmulticast mode [ 203.750919][T12856] bridge_slave_0: entered promiscuous mode [ 203.756186][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.759902][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.764224][T12856] bridge_slave_1: entered allmulticast mode [ 203.767141][T12856] bridge_slave_1: entered promiscuous mode [ 203.796122][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.801039][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.806176][ T40] audit: type=1400 audit(1767003337.566:1091): avc: denied { watch watch_reads } for pid=12912 comm="syz.1.1956" path="/507/file0" dev="autofs" ino=61321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 203.827235][T12856] team0: Port device team_slave_0 added [ 203.830814][T12856] team0: Port device team_slave_1 added [ 203.851745][ T40] audit: type=1400 audit(1767003337.606:1092): avc: denied { link } for pid=12919 comm="syz.5.1958" name="#32" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.859778][ T40] audit: type=1400 audit(1767003337.606:1093): avc: denied { rename } for pid=12919 comm="syz.5.1958" name="#33" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.904163][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.907346][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.918282][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.939741][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.942851][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.953805][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.965813][ T12] bridge_slave_1: left allmulticast mode [ 203.968402][ T12] bridge_slave_1: left promiscuous mode [ 203.980563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.985009][ T12] bridge_slave_0: left allmulticast mode [ 203.987000][ T12] bridge_slave_0: left promiscuous mode [ 203.988999][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.290845][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1964'. [ 204.325154][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.329351][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.336099][ T12] bond0 (unregistering): Released all slaves [ 204.340966][ T12] bond1 (unregistering): Released all slaves [ 204.343064][T12942] Invalid ELF header magic: != ELF [ 204.343306][ T40] audit: type=1400 audit(1767003338.106:1094): avc: denied { module_load } for pid=12940 comm="syz.7.1964" path="/15/bus" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 204.419531][T12856] hsr_slave_0: entered promiscuous mode [ 204.422898][T12856] hsr_slave_1: entered promiscuous mode [ 204.425824][T12856] debugfs: 'hsr0' already exists in 'hsr' [ 204.428365][T12856] Cannot create hsr debugfs directory [ 204.439977][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 204.500526][ T29] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 204.546280][T12946] team0: Port device team_slave_0 removed [ 204.714522][ T5935] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 204.719234][T12965] Cannot find add_set index 0 as target [ 204.918671][T12973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.927295][ T5998] ªªªªªª speed is unknown, defaulting to 1000 [ 204.993993][T12856] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 205.001565][T12856] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 205.008987][T12856] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 205.031950][T12856] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 205.071269][ T12] hsr_slave_0: left promiscuous mode [ 205.074775][ T12] hsr_slave_1: left promiscuous mode [ 205.077128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.079539][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.084491][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.087034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.109469][ T12] veth1_macvtap: left promiscuous mode [ 205.112785][ T12] veth0_macvtap: left promiscuous mode [ 205.114705][ T12] veth1_vlan: left promiscuous mode [ 205.116468][ T12] veth0_vlan: left promiscuous mode [ 205.120921][ T982] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 205.130709][ T5935] Bluetooth: hci4: command tx timeout [ 205.271305][ T982] usb 12-1: Using ep0 maxpacket: 8 [ 205.274387][ T982] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 205.277271][ T982] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.280823][ T982] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.285012][ T982] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.289340][ T982] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.295882][ T982] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.299779][ T982] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.372415][ T5984] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 205.496573][ T12] team0 (unregistering): Port device team_slave_1 removed [ 205.511462][ T982] usb 12-1: usb_control_msg returned -32 [ 205.513555][ T982] usbtmc 12-1:16.0: can't read capabilities [ 205.520982][ T5984] usb 10-1: Using ep0 maxpacket: 8 [ 205.527950][ T5984] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 205.532359][ T12] team0 (unregistering): Port device team_slave_0 removed [ 205.534004][ T5984] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.539315][ T5984] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.543917][ T5984] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.548158][ T5984] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.552763][ T5984] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.555729][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.766725][ T5984] usb 10-1: usb_control_msg returned -32 [ 205.768701][ T5984] usbtmc 10-1:16.0: can't read capabilities [ 205.831729][T12993] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.859268][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.867840][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.875834][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.878534][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.888394][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.893712][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.937347][T13005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 205.948575][T13005] usbtmc 12-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 206.007532][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 206.022516][ T96] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.030448][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.074699][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 206.074709][ T40] audit: type=1400 audit(1767003339.836:1098): avc: denied { listen } for pid=13014 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.195284][T12856] veth0_vlan: entered promiscuous mode [ 206.202755][T12856] veth1_vlan: entered promiscuous mode [ 206.219612][T12856] veth0_macvtap: entered promiscuous mode [ 206.226825][T12856] veth1_macvtap: entered promiscuous mode [ 206.242795][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.253131][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.263028][ T6246] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.266199][ T6246] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.269951][ T6246] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.275255][ T6246] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.317723][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.320547][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.340352][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.343045][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.414159][T13039] "syz.8.1940" (13039) uses obsolete ecb(arc4) skcipher [ 206.572333][T13040] /dev/sr0: Can't open blockdev [ 206.637189][T13054] loop8: detected capacity change from 0 to 7 [ 206.642970][T13054] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 206.645794][T13054] loop8: partition table partially beyond EOD, truncated [ 206.648206][T13054] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 206.651789][T13054] loop8: p2 start 956478 is beyond EOD, truncated [ 206.692152][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 207.120520][ T6016] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 207.210663][ T5935] Bluetooth: hci4: command tx timeout [ 207.272026][ T6016] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.274989][ T6016] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.278330][ T6016] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.281383][ T6016] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.284918][ T6016] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.289773][ T6016] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.293207][ T6016] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.295800][ T6016] usb 13-1: Product: syz [ 207.297157][ T6016] usb 13-1: Manufacturer: syz [ 207.302046][ T6016] cdc_wdm 13-1:1.0: skipping garbage [ 207.303800][ T6016] cdc_wdm 13-1:1.0: skipping garbage [ 207.307764][ T6016] cdc_wdm 13-1:1.0: cdc-wdm2: USB WDM device [ 207.309733][ T6016] cdc_wdm 13-1:1.0: Unknown control protocol [ 209.127032][ T61] usb 13-1: USB disconnect, device number 2 [ 209.290473][ T5935] Bluetooth: hci4: command tx timeout [ 209.738652][T13069] bond1: Unable to set up delay as MII monitoring is disabled [ 209.744817][T13069] bond1 (unregistering): Released all slaves [ 209.887140][T13073] use of bytesused == 0 is deprecated and will be removed in the future, [ 209.892147][T13073] use the actual size instead. [ 209.927562][ T40] audit: type=1400 audit(1767003343.686:1099): avc: denied { map } for pid=13072 comm="syz.8.2000" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.938359][ T40] audit: type=1400 audit(1767003343.686:1100): avc: denied { execute } for pid=13072 comm="syz.8.2000" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.016261][T13075] misc userio: No port type given on /dev/userio [ 210.018994][T13075] misc userio: The device must be registered before sending interrupts [ 210.058530][ T40] audit: type=1400 audit(1767003343.816:1101): avc: denied { ioctl } for pid=13076 comm="syz.8.2003" path="socket:[63910]" dev="sockfs" ino=63910 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.069690][T13079] loop6: detected capacity change from 0 to 524287999 [ 210.456280][ T40] audit: type=1400 audit(1767003344.216:1102): avc: denied { relabelfrom } for pid=13093 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.470735][ T40] audit: type=1400 audit(1767003344.216:1103): avc: denied { relabelto } for pid=13093 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.601192][T13112] kvm: user requested TSC rate below hardware speed [ 210.607872][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2012'. [ 210.729414][T13116] syzkaller0: entered promiscuous mode [ 210.731780][T13116] syzkaller0: entered allmulticast mode [ 210.735543][T13116] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2014'. [ 210.853019][T13121] tmpfs: Bad value for 'mpol' [ 210.857442][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2015'. [ 210.857453][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2015'. [ 211.070103][ T40] audit: type=1400 audit(1767003344.826:1104): avc: denied { write } for pid=13131 comm="syz.8.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 211.132544][T13002] usbtmc 12-1:16.0: usb_control_msg returned -110 [ 211.190103][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'. [ 211.194879][T13139] gre0: Master is either lo or non-ether device [ 211.205694][ T5984] usb 12-1: USB disconnect, device number 2 [ 211.222810][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2021'. [ 211.247525][T13142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.278546][ T40] audit: type=1400 audit(1767003345.036:1105): avc: denied { add_name } for pid=13145 comm="syz.7.2022" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.289052][ T40] audit: type=1400 audit(1767003345.046:1106): avc: denied { create } for pid=13145 comm="syz.7.2022" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 211.301842][ T40] audit: type=1400 audit(1767003345.046:1107): avc: denied { associate } for pid=13145 comm="syz.7.2022" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 211.314500][ T40] audit: type=1400 audit(1767003345.066:1108): avc: denied { read append open } for pid=13145 comm="syz.7.2022" path="/24/file0/cpuacct.usage_sys" dev="9p" ino=71827981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.331063][ T40] audit: type=1400 audit(1767003345.076:1109): avc: denied { lock } for pid=13145 comm="syz.7.2022" path="/24/file0/cpuacct.usage_sys" dev="9p" ino=71827981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.347618][T13151] syzkaller0: entered promiscuous mode [ 211.348914][ T40] audit: type=1400 audit(1767003345.096:1110): avc: denied { unmount } for pid=12719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 211.349528][T13151] syzkaller0: entered allmulticast mode [ 211.370489][ T5935] Bluetooth: hci4: command tx timeout [ 211.770994][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.720804][ T40] audit: type=1400 audit(1767003346.486:1111): avc: denied { shutdown } for pid=13172 comm="syz.1.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.721915][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 212.765136][T13175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2031'. [ 212.769404][T13175] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2031'. [ 212.784033][ T40] audit: type=1400 audit(1767003346.546:1112): avc: denied { mount } for pid=13176 comm="syz.1.2032" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 212.788334][T13174] delete_channel: no stack [ 212.831102][ T40] audit: type=1400 audit(1767003346.596:1113): avc: denied { mounton } for pid=13176 comm="syz.1.2032" path="/537/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 212.831625][T13177] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.846315][T13177] overlayfs: failed to resolve '/': -2 [ 212.849369][ T40] audit: type=1400 audit(1767003346.606:1114): avc: denied { read } for pid=13176 comm="syz.1.2032" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 212.882886][T13182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2034'. [ 213.291237][ T6016] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 213.452472][ T6016] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.455614][ T6016] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.459518][ T6016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.463293][ T6016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 213.467466][ T6016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 213.473317][ T6016] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.476874][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.479974][ T6016] usb 6-1: Product: syz [ 213.481713][ T6016] usb 6-1: Manufacturer: syz [ 213.495688][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 213.497884][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 213.509757][ T6016] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 213.512329][ T6016] cdc_wdm 6-1:1.0: Unknown control protocol [ 215.024075][ T6016] usb 6-1: USB disconnect, device number 46 [ 215.047114][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.049839][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.087727][T13220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.095193][T13220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.184785][ T1147] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.188008][ T1147] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.194382][ T1147] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.198191][ T1147] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.311228][ T6016] usb 10-1: USB disconnect, device number 6 [ 215.594396][T13251] netlink: 'syz.5.2053': attribute type 10 has an invalid length. [ 215.600503][T13247] netlink: 'syz.5.2053': attribute type 10 has an invalid length. [ 215.619686][T13251] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.652762][T13269] /dev/nbd1: Can't lookup blockdev [ 215.682089][T13271] __nla_validate_parse: 3 callbacks suppressed [ 215.682105][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2060'. [ 215.730350][T13273] loop9: detected capacity change from 0 to 7 [ 215.733837][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.737033][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.740246][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.749424][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.753352][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.756073][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.758858][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.761780][ T5938] ldm_validate_partition_table(): Disk read failed. [ 215.764054][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.766824][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.769611][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.772628][ T5938] Dev loop9: unable to read RDB block 0 [ 215.774857][ T5938] loop9: unable to read partition table [ 215.777200][ T5938] loop9: partition table beyond EOD, truncated [ 215.780788][T13273] ldm_validate_partition_table(): Disk read failed. [ 215.783860][T13273] Dev loop9: unable to read RDB block 0 [ 215.786369][T13273] loop9: unable to read partition table [ 215.788717][T13273] loop9: partition table beyond EOD, truncated [ 215.792672][T13273] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 215.792672][T13273] ) failed (rc=-5) [ 216.137776][T13239] 9pnet_fd: p9_fd_create_tcp (13239): problem connecting socket to 127.0.0.1 [ 216.141739][ T6016] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 216.332286][ T6016] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.340866][ T6016] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.349519][ T6016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.353762][ T6016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 216.358500][ T6016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 216.365393][ T6016] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.369360][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.373252][ T6016] usb 6-1: Product: syz [ 216.375105][ T6016] usb 6-1: Manufacturer: syz [ 216.383206][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 216.386770][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 216.392041][ T6016] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 216.394163][ T6016] cdc_wdm 6-1:1.0: Unknown control protocol [ 217.540760][ T96] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.901463][T13300] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2071'. [ 217.904472][T13300] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2071'. [ 217.936314][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 217.936331][ T40] audit: type=1400 audit(1767003351.696:1122): avc: denied { getopt } for pid=13301 comm="syz.8.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.936651][T13302] tmpfs: Invalid uid '0x00000000ffffffff' [ 217.955602][ T5998] usb 6-1: USB disconnect, device number 47 [ 218.027695][T13310] "syz.7.2075" (13310) uses obsolete ecb(arc4) skcipher [ 218.029245][ T40] audit: type=1400 audit(1767003351.786:1123): avc: denied { setopt } for pid=13309 comm="syz.5.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 218.133964][T13323] misc userio: Begin command sent, but we're already running [ 218.162131][ T40] audit: type=1400 audit(1767003351.926:1124): avc: denied { create } for pid=13326 comm="syz.7.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 218.173956][ T40] audit: type=1400 audit(1767003351.936:1125): avc: denied { write } for pid=13326 comm="syz.7.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 218.183539][ T40] audit: type=1400 audit(1767003351.946:1126): avc: denied { read } for pid=13326 comm="syz.7.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 218.232738][ T40] audit: type=1400 audit(1767003351.996:1127): avc: denied { map } for pid=13326 comm="syz.7.2079" path="socket:[62396]" dev="sockfs" ino=62396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.490578][ T5998] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 218.640557][ T5998] usb 13-1: Using ep0 maxpacket: 8 [ 218.644434][ T5998] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.648265][ T5998] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.652665][ T5998] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.657401][ T5998] usb 13-1: config 0 descriptor?? [ 218.657562][T13342] cgroup: name respecified [ 218.751995][ T40] audit: type=1400 audit(1767003352.516:1128): avc: denied { read } for pid=13344 comm="syz.5.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 218.759983][ T40] audit: type=1400 audit(1767003352.516:1129): avc: denied { getopt } for pid=13344 comm="syz.5.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.865147][ T5998] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.981504][T13355] Invalid source name [ 218.983066][T13355] UBIFS error (pid: 13355): cannot open "./cgroup", error -22 [ 219.022769][ T40] audit: type=1400 audit(1767003352.786:1130): avc: denied { ioctl } for pid=13356 comm="syz.7.2090" path="socket:[67606]" dev="sockfs" ino=67606 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.054091][T13361] netlink: 'syz.7.2091': attribute type 10 has an invalid length. [ 219.057841][T13361] veth1_macvtap: left promiscuous mode [ 219.061585][T13361] team0: Device veth1_macvtap failed to register rx_handler [ 219.100511][ T5998] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 219.105825][ T5935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 219.107765][ T5935] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 219.113083][ T5935] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 219.113867][T13363] sysfs: Unknown parameter '/dev/vcsa' [ 219.166165][T13365] bridge_slave_0: left allmulticast mode [ 219.168660][T13365] bridge_slave_0: left promiscuous mode [ 219.171637][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.177504][T13365] bridge_slave_1: left allmulticast mode [ 219.179963][T13365] bridge_slave_1: left promiscuous mode [ 219.184964][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.191916][T13365] bond0: (slave bond_slave_0): Releasing backup interface [ 219.196979][T13365] bond0: (slave bond_slave_1): Releasing backup interface [ 219.202569][T13365] team0: Port device team_slave_0 removed [ 219.206787][T13365] team0: Port device team_slave_1 removed [ 219.209724][T13365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.213913][T13365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.217887][T13365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.226440][T13366] vlan0: entered promiscuous mode [ 219.251128][ T5998] usb 6-1: no configurations [ 219.252906][ T5998] usb 6-1: can't read configurations, error -22 [ 219.283399][T13368] team0: Device gtp1 is up. Set it down before adding it as a team port [ 219.371286][ T24] usb 13-1: USB disconnect, device number 3 [ 219.400582][ T5998] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 219.550976][ T5998] usb 6-1: no configurations [ 219.552645][ T5998] usb 6-1: can't read configurations, error -22 [ 219.555103][ T5998] usb usb6-port1: attempt power cycle [ 219.890739][ T5998] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 219.920482][ T5998] usb 6-1: no configurations [ 219.922443][ T5998] usb 6-1: can't read configurations, error -22 [ 219.983097][ T40] audit: type=1400 audit(1767003353.746:1131): avc: denied { nlmsg_write } for pid=13400 comm="syz.5.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 220.050864][ T5998] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 220.056147][T13409] "syz.8.2107" (13409) uses obsolete ecb(arc4) skcipher [ 220.071498][ T5998] usb 6-1: no configurations [ 220.073142][ T5998] usb 6-1: can't read configurations, error -22 [ 220.075491][ T5998] usb usb6-port1: unable to enumerate USB device [ 220.225527][T13414] netlink: 'syz.5.2108': attribute type 8 has an invalid length. [ 220.246962][T13414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.343804][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2113'. [ 220.524714][ T142] libceph: connect (1)[c::]:6789 error -101 [ 220.526824][ T142] libceph: mon0 (1)[c::]:6789 connect error [ 220.566852][T13445] CIFS: Unable to determine destination address [ 220.653207][T13454] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 13454 comm: syz.5.2122) [ 220.667018][T13441] ceph: No mds server is up or the cluster is laggy [ 220.782773][T13478] ksmbd: Unknown IPC event: 1, ignore. [ 220.859201][T13482] netlink: 'syz.8.2130': attribute type 11 has an invalid length. [ 220.861926][T13482] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.2130'. [ 220.993325][T13498] netlink: 'syz.8.2135': attribute type 1 has an invalid length. [ 221.005462][T13498] bond2: entered promiscuous mode [ 221.007766][T13498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.017523][T13502] netlink: 312 bytes leftover after parsing attributes in process `syz.7.2136'. [ 221.019391][T13498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.023657][T13498] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 221.027079][T13498] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 221.033424][T13498] bond2: (slave ip6gre1): making interface the new active one [ 221.036017][T13498] ip6gre1: entered promiscuous mode [ 221.038497][T13498] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 221.044939][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2135'. [ 221.120098][T13498] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 221.123942][T13498] ip6gre1: left promiscuous mode [ 221.128194][T13498] bond2 (unregistering): Released all slaves [ 221.311439][T13510] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 221.328349][T13510] bridge_slave_0: left allmulticast mode [ 221.330806][T13510] bridge_slave_0: left promiscuous mode [ 221.333097][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.338711][T13510] bridge_slave_1: left allmulticast mode [ 221.340867][T13510] bridge_slave_1: left promiscuous mode [ 221.342919][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.349543][T13510] bond0: (slave bond_slave_0): Releasing backup interface [ 221.356177][T13510] bond0: (slave bond_slave_1): Releasing backup interface [ 221.363614][T13510] team0: Port device team_slave_0 removed [ 221.367921][T13510] team0: Port device team_slave_1 removed [ 221.372218][T13510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.374729][T13510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.377276][T13511] netlink: 'syz.8.2138': attribute type 10 has an invalid length. [ 221.381352][T13510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.383878][T13510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.387447][T13510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.399686][T13511] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 221.406256][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.414503][T13511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.064029][T13542] netlink: 'syz.5.2147': attribute type 13 has an invalid length. [ 222.176640][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2149'. [ 222.185622][T13550] netlink: 'syz.5.2149': attribute type 7 has an invalid length. [ 222.188432][T13550] netlink: 'syz.5.2149': attribute type 8 has an invalid length. [ 222.192093][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2149'. [ 222.520552][ T5998] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 222.672085][ T5998] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.675219][ T5998] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.678758][ T5998] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.682848][ T5998] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.687392][ T5998] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.692182][ T5998] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.695333][ T5998] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.698112][ T5998] usb 13-1: Product: syz [ 222.698815][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2159'. [ 222.699629][ T5998] usb 13-1: Manufacturer: syz [ 222.710486][ T5998] cdc_wdm 13-1:1.0: skipping garbage [ 222.712302][ T5998] cdc_wdm 13-1:1.0: skipping garbage [ 222.719080][ T5998] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 222.721292][ T5998] cdc_wdm 13-1:1.0: Unknown control protocol [ 222.866220][T13598] overlayfs: failed to clone upperpath [ 222.908814][ T5998] usb 13-1: USB disconnect, device number 4 [ 223.038919][T13608] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.084021][T13611] overlay: ./bus is not a directory [ 223.086057][T13610] syzkaller0: entered promiscuous mode [ 223.087942][T13610] syzkaller0: entered allmulticast mode [ 223.091095][T13611] netlink: 'syz.7.2166': attribute type 1 has an invalid length. [ 223.111703][T13611] bond1: entered promiscuous mode [ 223.113631][T13611] bond1: entered allmulticast mode [ 223.116912][T13611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.123024][T13611] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2166'. [ 223.219196][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 223.219207][ T40] audit: type=1326 audit(1767003356.976:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.219327][T13617] overlayfs: failed to clone upperpath [ 223.221862][ T40] audit: type=1326 audit(1767003356.976:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.242917][ T40] audit: type=1326 audit(1767003356.976:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.245228][T13617] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 223.252601][ T40] audit: type=1326 audit(1767003356.976:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.262700][ T40] audit: type=1326 audit(1767003356.976:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.270187][ T40] audit: type=1326 audit(1767003357.006:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.278023][ T40] audit: type=1326 audit(1767003357.006:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.286017][ T40] audit: type=1326 audit(1767003357.006:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.291398][ T6246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.293824][ T40] audit: type=1326 audit(1767003357.006:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.304543][ T40] audit: type=1326 audit(1767003357.006:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 223.360653][T13624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2172'. [ 223.378332][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13625 comm=syz.5.2172 [ 223.429438][T13634] netlink: 'syz.5.2175': attribute type 10 has an invalid length. [ 223.430949][T13621] ntfs3(sr0): try to read out of volume at offset 0x0 [ 223.438771][T13634] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.443933][T13634] bond0: (slave team0): Enslaving as an active interface with an up link [ 223.457572][T13634] netlink: 'syz.5.2175': attribute type 10 has an invalid length. [ 223.472772][T13634] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.478376][T13634] siw: device registration error -23 [ 223.581359][T13650] netlink: 'syz.8.2181': attribute type 1 has an invalid length. [ 223.610358][T13652] sp0: Synchronizing with TNC [ 223.622671][T13650] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.628747][T13650] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 223.667705][T13656] gretap1: entered promiscuous mode [ 223.671877][T13658] sctp: [Deprecated]: syz.5.2182 (pid 13658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.671877][T13658] Use struct sctp_sack_info instead [ 223.672857][ T5933] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 223.676067][T13656] bond2: (slave gretap1): making interface the new active one [ 223.676457][T13656] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 223.716894][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2181'. [ 223.721331][T13662] overlayfs: unescaped trailing colons in lowerdir mount option. [ 223.730746][ T5998] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 223.880438][ T5998] usb 6-1: Using ep0 maxpacket: 16 [ 223.883676][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 7 [ 223.887193][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 223.893618][ T5998] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 223.896522][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.899145][ T5998] usb 6-1: Product: syz [ 223.900675][ T5998] usb 6-1: Manufacturer: syz [ 223.902262][ T5998] usb 6-1: SerialNumber: syz [ 223.909861][ T5998] usb 6-1: config 0 descriptor?? [ 223.912811][ T5998] hub 6-1:0.0: bad descriptor, ignoring hub [ 223.914838][ T5998] hub 6-1:0.0: probe with driver hub failed with error -5 [ 223.918724][ T5998] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input74 [ 224.199482][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2190'. [ 224.342505][ T982] usb 6-1: USB disconnect, device number 52 [ 224.397637][T13684] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.500604][ T5933] Bluetooth: hci4: command 0x0405 tx timeout [ 224.551698][T13708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.716413][T13709] 9p: Unknown access argument 18446744073709551615: -34 [ 224.822796][T13724] vxfs: WRONG superblock magic 00000000 at 1 [ 224.825262][T13724] vxfs: WRONG superblock magic 00000000 at 8 [ 224.827376][T13724] vxfs: can't find superblock. [ 224.847282][T13724] ªªªªªª speed is unknown, defaulting to 1000 [ 224.891396][ T5984] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 224.932020][T13724] xfrm0 speed is unknown, defaulting to 1000 [ 224.948641][T13736] xt_SECMARK: invalid mode: 2 [ 225.052079][ T5984] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.055166][ T5984] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.069082][ T5984] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.072180][ T5984] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 225.075873][ T5984] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 225.082269][T13751] QAT: Stopping all acceleration devices. [ 225.082471][ T5984] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.087305][ T5984] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.101186][ T5984] usb 13-1: Product: syz [ 225.102757][ T5984] usb 13-1: Manufacturer: syz [ 225.116030][ T5984] cdc_wdm 13-1:1.0: skipping garbage [ 225.117884][ T5984] cdc_wdm 13-1:1.0: skipping garbage [ 225.121940][ T5998] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 225.123142][ T5984] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 225.126976][ T5984] cdc_wdm 13-1:1.0: Unknown control protocol [ 225.145090][T13755] binder: 13754:13755 ioctl 309 200000000000 returned -22 [ 225.243252][T13758] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 225.272863][ T5998] usb 10-1: config 0 has no interfaces? [ 225.281267][ T5998] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.284782][ T5998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.287443][ T5998] usb 10-1: Product: syz [ 225.291133][T13758] bond11: (slave geneve4): making interface the new active one [ 225.293957][T13758] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 225.297124][ T60] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.297228][ T5998] usb 10-1: Manufacturer: syz [ 225.302604][ T5998] usb 10-1: SerialNumber: syz [ 225.305853][ T5998] usb 10-1: config 0 descriptor?? [ 225.310810][ T60] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.321943][ T6016] usb 13-1: USB disconnect, device number 5 [ 225.329108][ T60] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.353872][ T60] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.730459][ T982] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 225.890457][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 225.894274][ T982] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 225.897798][ T982] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.903063][ T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.907242][ T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.911915][ T982] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.917385][ T982] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.921506][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.100522][ T6016] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 226.132748][ T982] usb 6-1: usb_control_msg returned -32 [ 226.135302][ T982] usbtmc 6-1:16.0: can't read capabilities [ 226.241058][ T6016] usb 13-1: device descriptor read/64, error -71 [ 226.256773][T13782] tipc: Enabling of bearer rejected, media not registered [ 226.480567][ T6016] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 226.610508][ T6016] usb 13-1: device descriptor read/64, error -71 [ 226.720669][ T6016] usb usb13-port1: attempt power cycle [ 227.060544][ T6016] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 227.080970][ T6016] usb 13-1: device descriptor read/8, error -71 [ 227.223566][T13788] netlink: 'syz.7.2224': attribute type 14 has an invalid length. [ 227.320531][ T6016] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 227.341258][ T6016] usb 13-1: device descriptor read/8, error -71 [ 227.451276][ T6016] usb usb13-port1: unable to enumerate USB device [ 227.836203][ T6016] usb 10-1: USB disconnect, device number 7 [ 228.250447][ T6016] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 228.402006][ T6016] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.405640][ T6016] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.408848][ T6016] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.411072][ T1145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.412407][ T6016] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 228.420222][ T6016] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 228.425301][ T6016] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.428388][ T6016] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.431255][ T6016] usb 10-1: Product: syz [ 228.432818][ T6016] usb 10-1: Manufacturer: syz [ 228.438043][ T6016] cdc_wdm 10-1:1.0: skipping garbage [ 228.439846][ T6016] cdc_wdm 10-1:1.0: skipping garbage [ 228.443076][ T6016] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 228.445126][ T6016] cdc_wdm 10-1:1.0: Unknown control protocol [ 228.639240][ T5984] usb 10-1: USB disconnect, device number 8 [ 228.977221][T13809] __nla_validate_parse: 1 callbacks suppressed [ 228.977232][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2231'. [ 229.019673][T13811] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2232'. [ 229.076749][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2232'. [ 229.275016][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2234'. [ 229.278968][T13817] netlink: 'syz.5.2234': attribute type 21 has an invalid length. [ 229.362027][T13822] geneve2: entered promiscuous mode [ 229.891139][T13832] "syz.8.2241" (13832) uses obsolete ecb(arc4) skcipher [ 230.143680][T13849] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2246'. [ 230.171382][T13851] netlink: 'syz.8.2247': attribute type 1 has an invalid length. [ 230.462512][T13907] tipc: Started in network mode [ 230.464247][T13907] tipc: Node identity , cluster identity 4711 [ 230.466249][T13907] tipc: Failed to obtain node identity [ 230.468071][T13907] tipc: Enabling of bearer rejected, failed to enable media [ 230.580230][ T5935] Bluetooth: hci1: unexpected event for opcode 0x200a [ 231.053306][T13937] SELinux: ebitmap: truncated map [ 231.061589][T13937] SELinux: failed to load policy [ 231.210676][ T982] usb 6-1: USB disconnect, device number 53 [ 231.210708][T13764] usbtmc 6-1:16.0: stb usb_control_msg returned -110 [ 231.306140][T13955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13955 comm=syz.7.2257 [ 231.316198][T13955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58130 sclass=netlink_route_socket pid=13955 comm=syz.7.2257 [ 231.427665][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2263'. [ 231.758311][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 231.758322][ T40] audit: type=1804 audit(1767003365.516:1173): pid=13999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2272" name="/newroot/215/file0/file0" dev="9p" ino=71827845 res=1 errno=0 [ 231.831081][ T982] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 231.984873][ T40] audit: type=1400 audit(1767003365.746:1174): avc: denied { bind } for pid=14008 comm="syz.8.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.985524][T14009] program syz.8.2276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.012826][ T982] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 232.016395][ T982] usb 6-1: config 0 has no interface number 0 [ 232.019838][ T982] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.024726][ T982] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 232.029361][ T982] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.037303][ T982] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 232.043494][ T982] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 232.048446][ T982] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.054422][ T982] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.058444][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.065871][ T982] usb 6-1: config 0 descriptor?? [ 232.068955][T13985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.078235][T13985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.089053][ T982] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.292575][ T142] usb 6-1: USB disconnect, device number 54 [ 232.296551][ T142] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 232.330950][ T982] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 232.482780][ T982] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.486262][ T982] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.492572][ T982] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.496254][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.574305][T14022] ªªªªªª speed is unknown, defaulting to 1000 [ 232.683953][T14022] xfrm0 speed is unknown, defaulting to 1000 [ 232.704105][ T982] usb 10-1: GET_CAPABILITIES returned 0 [ 232.706515][ T982] usbtmc 10-1:16.0: can't read capabilities [ 232.751103][ T40] audit: type=1326 audit(1767003366.516:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14021 comm="syz.7.2280" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220538f7c9 code=0x0 [ 232.858363][T14022] ip6erspan0: entered promiscuous mode [ 232.871532][ T6016] usb 10-1: USB disconnect, device number 9 [ 233.429827][ T40] audit: type=1326 audit(1767003367.186:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.8.2282" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d398f7c9 code=0x0 [ 233.531669][T13894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.579306][T14044] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 233.588611][ T40] audit: type=1400 audit(1767003367.346:1177): avc: denied { lock } for pid=14043 comm="syz.5.2285" path="socket:[71029]" dev="sockfs" ino=71029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 233.632770][T14051] "syz.5.2287" (14051) uses obsolete ecb(arc4) skcipher [ 233.682271][ T40] audit: type=1400 audit(1767003367.446:1178): avc: denied { mount } for pid=14057 comm="syz.7.2289" name="/" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.689610][ T40] audit: type=1400 audit(1767003367.446:1179): avc: denied { search } for pid=14057 comm="syz.7.2289" name="/" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.699412][ T40] audit: type=1400 audit(1767003367.446:1180): avc: denied { search } for pid=14057 comm="syz.7.2289" name="/" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.706780][ T40] audit: type=1400 audit(1767003367.446:1181): avc: denied { setattr } for pid=14057 comm="syz.7.2289" name="/" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.736492][T14060] ªªªªªª speed is unknown, defaulting to 1000 [ 233.751289][ T6016] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 233.765195][ T40] audit: type=1400 audit(1767003367.526:1182): avc: denied { append } for pid=14061 comm="syz.5.2291" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 233.817684][T14060] xfrm0 speed is unknown, defaulting to 1000 [ 233.890709][ T6016] usb 13-1: device descriptor read/64, error -71 [ 234.114963][T14086] "syz.1.2299" (14086) uses obsolete ecb(arc4) skcipher [ 234.160735][ T6016] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 234.310701][ T6016] usb 13-1: device descriptor read/64, error -71 [ 234.401335][T14093] SELinux: syz.1.2302 (14093) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 234.430634][ T6016] usb usb13-port1: attempt power cycle [ 234.780471][ T6016] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 234.800998][ T6016] usb 13-1: device descriptor read/8, error -71 [ 234.897923][T14098] IPv6: sit1: Disabled Multicast RS [ 234.900110][T14098] sit1: entered allmulticast mode [ 235.052295][T14104] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2307'. [ 235.060538][ T6016] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 235.063869][ T59] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 235.081227][ T6016] usb 13-1: device descriptor read/8, error -71 [ 235.090142][T14110] openvswitch: netlink: Flow actions attr not present in new flow. [ 235.124832][T14113] x_tables: duplicate underflow at hook 1 [ 235.191602][ T6016] usb usb13-port1: unable to enumerate USB device [ 235.210460][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 235.213542][ T59] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 235.216207][ T59] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 235.219676][ T59] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 235.223317][T14125] ksmbd: Unknown IPC event: 1, ignore. [ 235.224880][ T59] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 235.231600][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.235943][ T59] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 235.238770][ T59] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 235.242022][ T59] usb 10-1: Product: syz [ 235.243512][ T59] usb 10-1: Manufacturer: syz [ 235.245015][ T59] usb 10-1: SerialNumber: syz [ 235.248349][ T59] usb 10-1: config 0 descriptor?? [ 235.255004][ T59] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 235.259814][ T59] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 235.404027][T14137] tipc: Started in network mode [ 235.406358][T14137] tipc: Node identity c6a6, cluster identity 4711 [ 235.413187][T14139] geneve2: entered promiscuous mode [ 235.415020][T14139] geneve2: entered allmulticast mode [ 235.522490][T14142] xt_bpf: check failed: parse error [ 235.524470][T14144] overlayfs: failed to clone upperpath [ 235.610183][T14147] overlayfs: failed to clone upperpath [ 235.711973][ T982] usb 10-1: USB disconnect, device number 10 [ 235.718597][T13896] failed while handling packet from 1:16384 [ 235.720077][ T982] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 235.751466][T14161] xt_bpf: check failed: parse error [ 236.630765][T14183] bridge0: port 1(syz_tun) entered blocking state [ 236.633662][T14183] bridge0: port 1(syz_tun) entered disabled state [ 236.636438][T14183] syz_tun: entered allmulticast mode [ 236.640063][T14183] syz_tun: entered promiscuous mode [ 236.646617][T14183] bridge0: port 1(syz_tun) entered blocking state [ 236.649458][T14183] bridge0: port 1(syz_tun) entered forwarding state [ 236.734498][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2330'. [ 237.168699][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 237.168716][ T40] audit: type=1400 audit(1767003370.926:1188): avc: denied { watch } for pid=14199 comm="syz.8.2334" path="/92" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 237.181853][ T40] audit: type=1400 audit(1767003370.926:1189): avc: denied { watch_sb } for pid=14199 comm="syz.8.2334" path="/92" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.215738][T14202] SELinux: failed to load policy [ 237.238269][ T40] audit: type=1400 audit(1767003370.996:1190): avc: denied { mount } for pid=14203 comm="syz.8.2336" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 237.478290][ T40] audit: type=1400 audit(1767003371.236:1191): avc: denied { module_load } for pid=14219 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 237.621990][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2342'. [ 237.626033][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2342'. [ 237.730352][T14227] binder: 14226:14227 ioctl c0306201 200000000600 returned -14 [ 237.731725][T14242] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.2346'. [ 237.739831][T14244] netlink: 184 bytes leftover after parsing attributes in process `syz.8.2347'. [ 237.837066][T14254] bond2: option downdelay: invalid value (18446744073709551615) [ 237.837084][T14254] bond2: option downdelay: allowed values 0 - 2147483647 [ 237.838174][T14254] bond2 (unregistering): Released all slaves [ 237.973724][ T40] audit: type=1400 audit(1767003371.736:1192): avc: denied { getopt } for pid=14250 comm="syz.5.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.024103][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2355'. [ 238.024132][T14275] openvswitch: netlink: Missing key (keys=40, expected=80) [ 238.028446][T14275] netlink: 'syz.7.2355': attribute type 10 has an invalid length. [ 238.037046][T14275] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.043895][T13895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.043909][T13895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.186384][T14282] netlink: 'syz.7.2358': attribute type 5 has an invalid length. [ 238.187943][T14282] overlayfs: failed to clone lowerpath [ 238.227040][T14285] tmpfs: Unknown parameter 'quoa_inode_hardlimit' [ 238.282451][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2360'. [ 238.291275][ T40] audit: type=1400 audit(1767003372.056:1193): avc: denied { watch_sb } for pid=14288 comm="syz.7.2360" path="/148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.354318][T14293] bridge0: entered promiscuous mode [ 238.354849][T14292] bridge0: left promiscuous mode [ 238.582519][T12611] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.983676][ T40] audit: type=1400 audit(1767003372.746:1194): avc: denied { mounton } for pid=14344 comm="syz.8.2377" path="/111/file0" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.611180][T14372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14372 comm=syz.5.2383 [ 239.630490][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2383'. [ 239.642632][T14372] bond2 (unregistering): Released all slaves [ 239.660647][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 239.666428][ T40] audit: type=1400 audit(1767003373.426:1195): avc: denied { read } for pid=14366 comm="syz.1.2384" path="socket:[71342]" dev="sockfs" ino=71342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.100512][T13893] wlan0: Trigger new scan to find an IBSS to join [ 240.300535][T14411] netlink: 'syz.8.2398': attribute type 1 has an invalid length. [ 240.327641][T14411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.350918][T14411] bond5: (slave veth3): Enslaving as an active interface with a down link [ 240.359259][T14411] bond5: (slave dummy0): making interface the new active one [ 240.363153][T14411] dummy0: entered promiscuous mode [ 240.365039][T14411] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 240.370748][T14411] netlink: 'syz.8.2398': attribute type 10 has an invalid length. [ 240.373421][T14411] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2398'. [ 240.377002][T14411] bond5: (slave dummy0): Releasing active interface [ 240.509538][T14419] ceph: No mds server is up or the cluster is laggy [ 240.553576][ T40] audit: type=1400 audit(1767003374.316:1196): avc: denied { setopt } for pid=14431 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.607535][ T40] audit: type=1326 audit(1767003374.366:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.5.2406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07318f7c9 code=0x7ffc0000 [ 240.620267][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.625772][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.693136][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2410'. [ 240.833466][T14462] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2413'. [ 240.900463][ T59] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 241.053580][ T6243] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 241.062073][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.069921][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.073166][ T59] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 241.076199][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.087176][ T59] usb 6-1: config 0 descriptor?? [ 241.113482][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 241.115783][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 241.130769][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 241.134048][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 241.136413][ T59] usb 6-1: media controller created [ 241.138789][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.161772][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 241.163782][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 241.180512][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input76 [ 241.193672][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 241.196891][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 241.260805][T14476] 9p: Bad value for 'rfdno' [ 241.296230][T14474] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 241.303046][T14475] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 241.313562][T14449] dvb-usb: bulk message failed: -22 (2/0) [ 241.363796][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 241.366054][ T59] dvb-usb: error while querying for an remote control event. [ 241.374633][ T5984] usb 6-1: USB disconnect, device number 55 [ 241.397990][ T5984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 241.423631][T14487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14487 comm=syz.5.2417 [ 241.496868][T14494] "syz.8.2422" (14494) uses obsolete ecb(arc4) skcipher [ 241.506170][T14496] ªªªªªª speed is unknown, defaulting to 1000 [ 241.641790][T14496] xfrm0 speed is unknown, defaulting to 1000 [ 242.040504][ T5984] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 242.200891][ T5984] usb 10-1: Using ep0 maxpacket: 8 [ 242.203073][T14517] fuse: Bad value for 'rootmode' [ 242.210931][ T5984] usb 10-1: config 0 interface 0 has no altsetting 0 [ 242.213508][ T5984] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 242.216533][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.221473][ T5984] usb 10-1: config 0 descriptor?? [ 242.355656][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 242.355667][ T40] audit: type=1400 audit(1767003376.116:1210): avc: denied { append } for pid=14514 comm="syz.8.2430" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 242.356034][T14515] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 242.529952][ T40] audit: type=1400 audit(1767003376.286:1211): avc: denied { ioctl } for pid=14537 comm="syz.7.2437" path="socket:[72958]" dev="sockfs" ino=72958 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 242.828234][ T5984] usbhid 10-1:0.0: can't add hid device: -71 [ 242.832870][ T5984] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 242.839828][ T5984] usb 10-1: USB disconnect, device number 11 [ 242.995630][T14540] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2438' resets device [ 242.999988][T14540] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 243.004478][T14540] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2438' resets device [ 243.038234][T14543] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2439'. [ 243.083616][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2440'. [ 243.165622][ T40] audit: type=1400 audit(1767003376.926:1212): avc: denied { getopt } for pid=14549 comm="syz.7.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.310736][ T142] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 243.455242][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 243.466884][ T142] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.473633][ T142] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.478122][ T142] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.482330][ T142] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 243.486935][ T142] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 243.508865][ T142] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.513708][ T142] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.517145][ T142] usb 13-1: Product: syz [ 243.519085][ T142] usb 13-1: Manufacturer: syz [ 243.526637][ T142] cdc_wdm 13-1:1.0: skipping garbage [ 243.528970][ T142] cdc_wdm 13-1:1.0: skipping garbage [ 243.532969][ T142] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 243.535945][ T142] cdc_wdm 13-1:1.0: Unknown control protocol [ 243.734669][ T5998] usb 13-1: USB disconnect, device number 14 [ 243.781568][ T6243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.120240][T14587] netlink: 'syz.7.2454': attribute type 4 has an invalid length. [ 244.132152][T14587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 244.175952][T14589] overlayfs: failed to clone upperpath [ 244.246606][ T59] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 244.295353][ T40] audit: type=1400 audit(1767003378.056:1213): avc: denied { write } for pid=14592 comm="syz.8.2456" name="/" dev="9p" ino=71827761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.422920][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.440577][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.445001][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.450975][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.454980][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.464318][ T59] usb 10-1: config 0 descriptor?? [ 244.759950][T14617] "syz.7.2464" (14617) uses obsolete ecb(arc4) skcipher [ 244.835046][T14621] netlink: 'syz.7.2466': attribute type 3 has an invalid length. [ 244.898421][ T59] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 244.991170][ T5998] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 245.022104][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2469'. [ 245.088368][T14581] binder: 14580:14581 ioctl 80e85411 200000000380 returned -22 [ 245.140589][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 245.148639][ T5998] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 245.158963][ T5998] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.164497][ T5998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.168090][ T5998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.172402][ T5998] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.176693][ T5998] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.190505][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.412850][ T5998] usb 6-1: usb_control_msg returned -32 [ 245.415362][T14653] fuse: Unknown parameter 'fd70xffffffffffffffff' [ 245.415474][ T5998] usbtmc 6-1:16.0: can't read capabilities [ 245.474638][T14656] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 245.631543][T14658] /dev/sr0: Can't open blockdev [ 245.672651][T14660] loop2: detected capacity change from 0 to 7 [ 245.676703][ T5938] Dev loop2: unable to read RDB block 7 [ 245.679191][ T5938] loop2: unable to read partition table [ 245.681876][ T5938] loop2: partition table beyond EOD, truncated [ 245.686664][T14660] Dev loop2: unable to read RDB block 7 [ 245.689057][T14660] loop2: unable to read partition table [ 245.692445][T14660] loop2: partition table beyond EOD, truncated [ 245.695191][T14660] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.161544][T14687] ªªªªªª speed is unknown, defaulting to 1000 [ 246.250347][T14687] xfrm0 speed is unknown, defaulting to 1000 [ 246.402314][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2489'. [ 246.438833][ T40] audit: type=1400 audit(1767003380.196:1214): avc: denied { firmware_load } for pid=14702 comm="syz.7.2490" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 246.524077][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2493'. [ 246.528523][ T40] audit: type=1400 audit(1767003380.286:1215): avc: denied { read } for pid=14709 comm="syz.8.2493" name="/" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.536238][ T40] audit: type=1400 audit(1767003380.286:1216): avc: denied { open } for pid=14709 comm="syz.8.2493" path="/148/file0" dev="configfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.556597][ T40] audit: type=1400 audit(1767003380.316:1217): avc: denied { unmount } for pid=12856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 246.601071][ T40] audit: type=1400 audit(1767003380.366:1218): avc: denied { transfer } for pid=14713 comm="syz.8.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 246.649295][T14718] fuse: Unknown parameter '00000000000000000008' [ 246.661615][T14720] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2497'. [ 246.672004][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2497'. [ 246.684431][T14722] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 246.737355][ T40] audit: type=1400 audit(1767003380.496:1219): avc: denied { write } for pid=14725 comm="syz.5.2500" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 246.812261][ T5935] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 246.880734][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2504'. [ 246.961086][T14741] tipc: Can't bind to reserved service type 2 [ 246.971803][ T9943] usb 10-1: USB disconnect, device number 12 [ 247.377980][T14755] cgroup: Unknown subsys name 'cpuset' [ 247.405729][ T40] audit: type=1400 audit(1767003381.166:1220): avc: denied { connect } for pid=14756 comm="syz.7.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.514024][T14722] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.516806][T14722] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.519691][T14722] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.520490][ T40] audit: type=1400 audit(1767003381.276:1221): avc: denied { bind } for pid=14762 comm="syz.7.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.522842][T14722] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.532294][T14722] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 247.538286][T14722] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 247.671310][ T5935] Bluetooth: hci4: unexpected event for opcode 0x080e [ 247.744641][T14777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14777 comm=syz.8.2517 [ 247.747515][ T40] audit: type=1400 audit(1767003381.506:1222): avc: denied { mount } for pid=14778 comm="syz.7.2518" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 247.757551][T14779] overlayfs: failed to clone lowerpath [ 247.765554][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2518'. [ 247.795006][ T5998] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 247.798892][T14781] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2519'. [ 247.827504][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2519'. [ 247.879427][ T982] usb 6-1: USB disconnect, device number 56 [ 247.892216][T14782] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2519'. [ 247.899103][T14782] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2519'. [ 247.963041][ T5998] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.965680][ T5998] usb 10-1: config 0 has no interface number 0 [ 247.967610][ T5998] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.971409][ T5998] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 247.975025][ T5998] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.978368][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.983559][ T5998] usb 10-1: config 0 descriptor?? [ 247.990103][T14731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.000882][ T5998] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 248.007659][ T40] audit: type=1400 audit(1767003381.765:1223): avc: denied { setattr } for pid=14790 comm="syz.8.2523" name="RAWv6" dev="sockfs" ino=73395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.060653][T14795] bond2 (unregistering): Released all slaves [ 248.177938][T14814] overlayfs: failed to clone upperpath [ 248.189703][T14803] netlink: 'syz.8.2527': attribute type 2 has an invalid length. [ 248.193297][T14803] netlink: 'syz.8.2527': attribute type 1 has an invalid length. [ 248.207022][ T5998] usb 10-1: USB disconnect, device number 13 [ 248.209093][ C2] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 248.252291][T14823] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 65528, id = 0 [ 248.363166][T14836] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 248.392177][T14835] overlayfs: failed to verify upper (162/file0, ino=888, err=-116) [ 248.395820][T14835] overlayfs: failed to verify index dir 'upper' xattr [ 248.399015][T14835] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 248.442394][T14842] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 248.475699][T14847] overlayfs: failed to clone upperpath [ 248.479886][T14847] kAFS: unable to lookup cell 'syz1' [ 248.492135][ T40] audit: type=1400 audit(1767003382.255:1224): avc: denied { map } for pid=14850 comm="syz.8.2539" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.501734][ T40] audit: type=1400 audit(1767003382.255:1225): avc: denied { execute } for pid=14850 comm="syz.8.2539" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.599851][ T40] audit: type=1400 audit(1767003382.355:1226): avc: denied { watch_reads } for pid=14858 comm="syz.7.2542" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 248.610035][T14859] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 248.620207][ T40] audit: type=1400 audit(1767003382.375:1227): avc: denied { relabelto } for pid=14858 comm="syz.7.2542" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 248.631144][T14859] overlayfs: failed to resolve './file0': -2 [ 248.634622][ T40] audit: type=1400 audit(1767003382.375:1228): avc: denied { associate } for pid=14858 comm="syz.7.2542" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 248.811058][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.190654][ T5998] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 249.342013][ T5998] usb 10-1: config index 0 descriptor too short (expected 65535, got 36) [ 249.345087][ T5998] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.349324][ T5998] usb 10-1: config 0 has no interfaces? [ 249.351801][ T5998] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.354919][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.359129][ T5998] usb 10-1: config 0 descriptor?? [ 249.512699][T14900] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 249.540605][ T5935] Bluetooth: hci0: command 0x041b tx timeout [ 249.541161][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.541728][T13894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.577680][ T40] audit: type=1400 audit(1767003383.335:1229): avc: denied { execute } for pid=14902 comm="syz.7.2558" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=75077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.614002][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.621802][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.626547][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.633000][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.640718][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.674039][T14907] ªªªªªª speed is unknown, defaulting to 1000 [ 249.788472][T14907] xfrm0 speed is unknown, defaulting to 1000 [ 249.816132][T14920] overlayfs: failed to clone upperpath [ 249.931934][T14928] netlink: 'syz.5.2548': attribute type 10 has an invalid length. [ 249.960813][T14928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.978597][T14928] bond_slave_0: entered promiscuous mode [ 249.981442][T14928] bond_slave_1: entered promiscuous mode [ 249.984088][T14928] dummy0: entered promiscuous mode [ 249.986481][T14928] team_slave_0: entered promiscuous mode [ 249.988724][T14928] team_slave_1: entered promiscuous mode [ 249.991343][T14928] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 249.996357][T14928] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 250.053958][T13895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.058394][T13895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.063410][T13895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.067399][T13895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 250.106373][T14907] chnl_net:caif_netlink_parms(): no params data found [ 250.159592][T13895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.163592][T13895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.167143][T13895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.171292][T13895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 250.217524][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.220085][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.224451][T14907] bridge_slave_0: entered allmulticast mode [ 250.227295][T14907] bridge_slave_0: entered promiscuous mode [ 250.252454][T13895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.255871][T13895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.259204][T13895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.262796][T13895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 250.269247][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.272036][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.274604][T14907] bridge_slave_1: entered allmulticast mode [ 250.277465][T14907] bridge_slave_1: entered promiscuous mode [ 250.294183][T14907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.299293][T14907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.323297][T13895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.326931][T13895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.330757][T13895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.334465][T13895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 250.370611][T14907] team0: Port device team_slave_0 added [ 250.380713][T14907] team0: Port device team_slave_1 added [ 250.417749][T14907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.421726][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.432667][T14907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.444625][T14907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.450467][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.480705][T14907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.539444][T14907] hsr_slave_0: entered promiscuous mode [ 250.544650][T14907] hsr_slave_1: entered promiscuous mode [ 250.545179][T14954] "syz.7.2571" (14954) uses obsolete ecb(arc4) skcipher [ 250.601705][T13895] bridge_slave_1: left allmulticast mode [ 250.603698][T13895] bridge_slave_1: left promiscuous mode [ 250.605811][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.611217][T13895] bridge_slave_0: left allmulticast mode [ 250.613475][T13895] bridge_slave_0: left promiscuous mode [ 250.615503][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.799074][T13896] smc: removing ib device syz1 [ 250.858359][T13895] bond8 (unregistering): (slave erspan1): Releasing active interface [ 250.957917][T13895] bond11 (unregistering): (slave geneve4): Releasing active interface [ 250.979666][T13895] bond5 (unregistering): (slave geneve3): Releasing active interface [ 251.110143][T13895] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 251.189658][T13895] bond4 (unregistering): (slave bridge1): Releasing active interface [ 251.557327][T13895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.562085][T13895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.566111][T13895] bond0 (unregistering): Released all slaves [ 251.574753][T13895] bond1 (unregistering): Released all slaves [ 251.610498][ T5933] Bluetooth: hci0: command 0x041b tx timeout [ 251.661690][T13895] bond2 (unregistering): Released all slaves [ 251.691788][ T5933] Bluetooth: hci2: command tx timeout [ 251.743564][T13895] bond3 (unregistering): Released all slaves [ 251.749749][T13895] bond4 (unregistering): Released all slaves [ 251.834718][T13895] bond5 (unregistering): Released all slaves [ 251.846257][T13895] bond6 (unregistering): Released all slaves [ 251.934925][T13895] bond7 (unregistering): Released all slaves [ 251.966321][ T5984] usb 10-1: USB disconnect, device number 14 [ 252.035281][T13895] bond8 (unregistering): Released all slaves [ 252.042260][T13895] bond9 (unregistering): Released all slaves [ 252.049725][T13895] bond10 (unregistering): Released all slaves [ 252.056065][T13895] bond11 (unregistering): Released all slaves [ 252.079708][T14957] tipc: Enabling of bearer rejected, failed to enable media [ 252.083441][ T59] xfrm0 speed is unknown, defaulting to 1000 [ 252.085735][ T59] syz1: Port: 1 Link DOWN [ 252.214451][T14988] "syz.7.2579" (14988) uses obsolete ecb(arc4) skcipher [ 252.252097][T13895] IPVS: stopping backup sync thread 14823 ... [ 252.365635][T14997] block nbd8: not configured, cannot reconfigure [ 252.424336][T15002] netlink: 'syz.5.2585': attribute type 2 has an invalid length. [ 252.434911][T15004] program syz.8.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.479894][T15010] "syz.8.2588" (15010) uses obsolete ecb(arc4) skcipher [ 252.631471][T15015] syz_tun: entered promiscuous mode [ 252.635966][T15015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.724097][T14907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.729365][T14907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.735925][T14907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.740857][T14907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.808737][T15028] __nla_validate_parse: 6 callbacks suppressed [ 252.808748][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2591'. [ 252.882118][T14907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.892132][T14907] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.899775][T13896] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.902970][T13896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.931993][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.934923][T12611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.976983][T15036] netlink: 'syz.7.2595': attribute type 1 has an invalid length. [ 252.979548][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.041349][T13895] hsr_slave_0: left promiscuous mode [ 253.044251][T13895] hsr_slave_1: left promiscuous mode [ 253.057496][T13895] veth1_macvtap: left promiscuous mode [ 253.059610][T13895] veth0_macvtap: left promiscuous mode [ 253.063624][T13895] veth1_vlan: left promiscuous mode [ 253.065703][T13895] veth0_vlan: left promiscuous mode [ 253.273215][T13895] vlan0 (unregistering): left allmulticast mode [ 253.275857][T13895] veth0_vlan (unregistering): left allmulticast mode [ 253.496355][T13895] team0 (unregistering): Port device team_slave_1 removed [ 253.549161][T15057] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 253.560463][T15057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 253.693668][ T5933] Bluetooth: hci0: command 0x041b tx timeout [ 253.774506][ T5933] Bluetooth: hci2: command tx timeout [ 253.826655][T13889] smc: removing ib device sz1 [ 253.832618][ T142] ªªªªªª speed is unknown, defaulting to 1000 [ 253.837225][ T142] sz1: Port: 1 Link DOWN [ 253.929581][T14907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.006730][T12910] bond0: (slave syz_tun): Releasing backup interface [ 254.056521][T14907] veth0_vlan: entered promiscuous mode [ 254.062124][T14907] veth1_vlan: entered promiscuous mode [ 254.093792][T14907] veth0_macvtap: entered promiscuous mode [ 254.103395][T14907] veth1_macvtap: entered promiscuous mode [ 254.111637][T14907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.115879][T14907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.124668][T13893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.127620][T13893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.131558][T15071] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2606'. [ 254.142120][T13893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.147603][T13893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.266863][T13891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.270416][T13891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.320796][T13891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.324191][T13891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.335583][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 254.335597][ T40] audit: type=1400 audit(1767003388.095:1231): avc: denied { accept } for pid=15080 comm="syz.8.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.354562][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.362752][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.367677][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.373480][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.377139][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.493946][ T40] audit: type=1400 audit(1767003388.255:1232): avc: denied { ioctl } for pid=15093 comm="syz.1.2613" path="socket:[75623]" dev="sockfs" ino=75623 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.569906][ T40] audit: type=1400 audit(1767003388.325:1233): avc: denied { bind } for pid=15100 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.576945][T15102] futex_wake_op: syz.1.2616 tries to shift op by -1; fix this program [ 254.656974][T15112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 254.660330][T15079] chnl_net:caif_netlink_parms(): no params data found [ 254.665042][ T5936] IPVS: starting estimator thread 0... [ 254.699590][T13895] IPVS: stop unused estimator thread 0... [ 254.730868][ T5998] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 254.759875][T15079] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.764754][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.767114][T15079] bridge_slave_0: entered allmulticast mode [ 254.769883][T15079] bridge_slave_0: entered promiscuous mode [ 254.771244][T15114] IPVS: using max 45 ests per chain, 108000 per kthread [ 254.771937][T15079] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.772003][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.772078][T15079] bridge_slave_1: entered allmulticast mode [ 254.772797][T15079] bridge_slave_1: entered promiscuous mode [ 254.778324][ T40] audit: type=1400 audit(1767003388.535:1234): avc: denied { ioctl } for pid=15122 comm="syz.1.2623" path="socket:[76700]" dev="sockfs" ino=76700 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.786414][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.788230][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.820907][T15126] QAT: failed to copy from user cfg_data. [ 254.825058][ T40] audit: type=1400 audit(1767003388.585:1235): avc: denied { read } for pid=15125 comm="syz.1.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.847771][T13895] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.882310][ T5998] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.886134][ T5998] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.889487][ T5998] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.892552][T15079] team0: Port device team_slave_0 added [ 254.895305][ T5998] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 254.899476][ T5998] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 254.907415][T15079] team0: Port device team_slave_1 added [ 254.910937][ T5998] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.913951][ T5998] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.916615][ T5998] usb 13-1: Product: syz [ 254.918021][ T5998] usb 13-1: Manufacturer: syz [ 254.924921][ T5998] cdc_wdm 13-1:1.0: skipping garbage [ 254.926691][ T5998] cdc_wdm 13-1:1.0: skipping garbage [ 254.931109][ T5998] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 254.933096][ T5998] cdc_wdm 13-1:1.0: Unknown control protocol [ 254.962713][T13895] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.970046][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.974914][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.986672][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.993631][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.996817][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.008334][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.036144][T13895] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.076632][T15079] hsr_slave_0: entered promiscuous mode [ 255.079906][T15079] hsr_slave_1: entered promiscuous mode [ 255.084492][T15079] debugfs: 'hsr0' already exists in 'hsr' [ 255.086979][T15079] Cannot create hsr debugfs directory [ 255.111320][T13895] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.135177][ T5998] usb 13-1: USB disconnect, device number 15 [ 255.190325][T15132] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2626'. [ 255.261644][T15079] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 255.272811][T15079] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 255.277394][T15079] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 255.287247][T15079] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 255.299999][T13895] bridge_slave_1: left allmulticast mode [ 255.302710][T13895] bridge_slave_1: left promiscuous mode [ 255.305426][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.310789][T13895] bridge_slave_0: left allmulticast mode [ 255.313296][T13895] bridge_slave_0: left promiscuous mode [ 255.315897][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.339990][T13895] bond_slave_0: left promiscuous mode [ 255.342995][T13895] bond_slave_1: left promiscuous mode [ 255.345706][T13895] dummy0: left promiscuous mode [ 255.349603][T13895] team_slave_0: left promiscuous mode [ 255.352356][T13895] team_slave_1: left promiscuous mode [ 255.667643][ T40] audit: type=1400 audit(1767003389.425:1236): avc: denied { unmount } for pid=14907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 255.780631][ T5933] Bluetooth: hci0: command 0x041b tx timeout [ 255.784179][ T40] audit: type=1400 audit(1767003389.545:1237): avc: denied { view } for pid=15136 comm="syz.8.2627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.785960][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 255.785988][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 255.833675][T13895] bond2 (unregistering): (slave macvlan3): Removing an active aggregator [ 255.836874][T13895] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 255.844097][T13895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.850171][T13895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.850469][ T5933] Bluetooth: hci2: command tx timeout [ 255.859747][T13895] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 255.864839][T13895] bond0 (unregistering): (slave team0): Releasing backup interface [ 255.868428][T13895] bond0 (unregistering): Released all slaves [ 255.873684][T13895] bond1 (unregistering): Released all slaves [ 255.968384][T13895] bond2 (unregistering): Released all slaves [ 256.038678][T15158] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 256.082391][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.099324][T15079] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.113367][T13895] IPVS: stopping master sync thread 11442 ... [ 256.118776][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.121933][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.155545][T15167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15167 comm=syz.1.2637 [ 256.156535][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.161389][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 256.164091][T13893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.176000][T15168] erspan1: entered promiscuous mode [ 256.227348][T13895] mac80211_hwsim hwsim21 wlan0 (unregistering): left allmulticast mode [ 256.383535][T13895] hsr_slave_0: left promiscuous mode [ 256.394821][T13895] hsr_slave_1: left promiscuous mode [ 256.397154][T13895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.399789][T13895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.403000][T13895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.405471][T13895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.409382][T15200] netlink: 596 bytes leftover after parsing attributes in process `syz.7.2643'. [ 256.414608][T13895] veth1_macvtap: left promiscuous mode [ 256.416486][T13895] veth0_macvtap: left promiscuous mode [ 256.418496][T13895] veth1_vlan: left promiscuous mode [ 256.422218][T13895] veth0_vlan: left promiscuous mode [ 256.422712][ T5933] Bluetooth: hci1: command tx timeout [ 256.543374][T15210] fuse: Unknown parameter 'd' [ 256.560563][ T838] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 256.591263][T15212] "syz.8.2647" (15212) uses obsolete ecb(arc4) skcipher [ 256.597128][T15212] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2647'. [ 256.731908][ T838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.745124][ T838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.749092][ T838] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.753631][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.765390][ T838] usb 6-1: config 0 descriptor?? [ 256.784530][ T838] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 256.787476][ T838] dvb-usb: bulk message failed: -22 (3/0) [ 256.801729][ T838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 256.805980][ T838] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 256.809026][ T838] usb 6-1: media controller created [ 256.811902][ T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.822429][ T838] dvb-usb: bulk message failed: -22 (6/0) [ 256.825152][ T838] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 256.834732][ T838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input77 [ 256.841544][T13895] team0 (unregistering): Port device team_slave_1 removed [ 256.843628][ T838] dvb-usb: schedule remote query interval to 150 msecs. [ 256.847026][ T838] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 256.883771][T13895] team0 (unregistering): Port device team_slave_0 removed [ 256.987669][ T5936] usb 6-1: USB disconnect, device number 57 [ 257.020077][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 257.176383][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.397989][T15079] veth0_vlan: entered promiscuous mode [ 257.408832][T15079] veth1_vlan: entered promiscuous mode [ 257.436162][T15079] veth0_macvtap: entered promiscuous mode [ 257.442572][T15079] veth1_macvtap: entered promiscuous mode [ 257.456929][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.465610][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.482357][T13891] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.486224][T13891] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.508750][T15256] bridge0: port 1(syz_tun) entered disabled state [ 257.541504][T15256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.548408][T13891] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.552221][T13891] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.635050][T15261] "syz.8.2661" (15261) uses obsolete ecb(arc4) skcipher [ 257.642485][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2661'. [ 257.699363][T13893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.706585][T13893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.722173][T12611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.725678][T12611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.749880][ T40] audit: type=1400 audit(1767003391.505:1238): avc: denied { add_name } for pid=15079 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 257.759456][T15079] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 257.763391][T15079] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 257.766211][T15079] CPU: 2 UID: 0 PID: 15079 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 257.769873][T15079] Tainted: [L]=SOFTLOCKUP [ 257.771608][T15079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.776129][T15079] RIP: 0010:simple_xattrs_free+0x60/0x1e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 257.778547][T15079] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 257.786785][T15079] RSP: 0018:ffffc900074dfae0 EFLAGS: 00010202 [ 257.789320][T15079] RAX: dffffc0000000000 RBX: ffff8880417454b0 RCX: ffffffff826a4375 [ 257.792710][T15079] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 257.796187][T15079] RBP: ffff888041745548 R08: 0000000000000005 R09: 0000000000000000 [ 257.799474][T15079] R10: 00000000ffffffea R11: ffff88802e73d4b0 R12: 1ffff92000e9bf6b [ 257.802757][T15079] R13: 0000000000000000 R14: ffff888025998a20 R15: 0000000000000038 [ 257.805983][T15079] FS: 00005555816ef500(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 257.809710][T15079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.812454][T15079] CR2: 00007f036aa65e00 CR3: 000000002669b000 CR4: 0000000000352ef0 [ 257.815719][T15079] Call Trace: [ 257.817148][T15079] [ 257.818390][T15079] __kernfs_new_node+0x7b4/0x990 [ 257.820438][T15079] ? __pfx___kernfs_new_node+0x10/0x10 [ 257.822679][T15079] ? find_held_lock+0x2b/0x80 [ 257.824661][T15079] ? kernfs_root+0xee/0x2a0 [ 257.826582][T15079] kernfs_new_node+0x13c/0x1e0 [ 257.828581][T15079] ? kasan_save_track+0x14/0x30 [ 257.830594][T15079] kernfs_create_dir_ns+0x4c/0x1a0 [ 257.832690][T15079] cgroup_mkdir+0x40f/0x12e0 [ 257.834558][T15079] ? __pfx_cgroup_mkdir+0x10/0x10 [ 257.836686][T15079] kernfs_iop_mkdir+0x111/0x190 [ 257.838718][T15079] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 257.840833][T15079] vfs_mkdir+0x731/0xb60 [ 257.842605][T15079] do_mkdirat+0x442/0x5e0 [ 257.844431][T15079] ? __pfx_do_mkdirat+0x10/0x10 [ 257.846457][T15079] ? getname_flags.part.0+0x1c5/0x550 [ 257.848690][T15079] __x64_sys_mkdirat+0x83/0xb0 [ 257.850669][T15079] do_syscall_64+0xcd/0xf80 [ 257.852566][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.854961][T15079] RIP: 0033:0x7f036ab8df17 [ 257.856834][T15079] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.864764][T15079] RSP: 002b:00007ffc9990a628 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 257.868208][T15079] RAX: ffffffffffffffda RBX: 00007ffc9990a680 RCX: 00007f036ab8df17 [ 257.871465][T15079] RDX: 00000000000001ff RSI: 00007ffc9990a680 RDI: 00000000ffffff9c [ 257.874795][T15079] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffc9990a377 [ 257.878081][T15079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 257.881371][T15079] R13: 0000000000000003 R14: 00007ffc9990aaf8 R15: 0000000000000000 [ 257.884659][T15079] [ 257.885981][T15079] Modules linked in: [ 257.888048][T15079] ---[ end trace 0000000000000000 ]--- [ 257.890905][T15079] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 257.892942][T15079] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 257.894848][ T40] audit: type=1400 audit(1767003391.515:1239): avc: denied { create } for pid=15079 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.900816][T15079] RSP: 0018:ffffc900074dfae0 EFLAGS: 00010202 [ 257.900830][T15079] RAX: dffffc0000000000 RBX: ffff8880417454b0 RCX: ffffffff826a4375 [ 257.900838][T15079] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 257.900845][T15079] RBP: ffff888041745548 R08: 0000000000000005 R09: 0000000000000000 [ 257.900852][T15079] R10: 00000000ffffffea R11: ffff88802e73d4b0 R12: 1ffff92000e9bf6b [ 257.900860][T15079] R13: 0000000000000000 R14: ffff888025998a20 R15: 0000000000000038 [ 257.900867][T15079] FS: 00005555816ef500(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 257.930570][ T40] audit: type=1400 audit(1767003391.515:1240): avc: denied { associate } for pid=15079 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 257.932257][T15079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.943247][T15079] CR2: 00007f220623df98 CR3: 000000002669b000 CR4: 0000000000352ef0 [ 257.946538][T15079] Kernel panic - not syncing: Fatal exception [ 257.949878][T15079] Kernel Offset: disabled [ 257.951670][T15079] Rebooting in 86400 seconds..