last executing test programs: 11.643472136s ago: executing program 2 (id=357): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000740)={0x0, 0x0, @pic={0x0, 0x5f, 0x5, 0x0, 0x56, 0x9, 0x7, 0x6, 0xa0, 0x2, 0x8a, 0x2, 0x6, 0x1, 0x8}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) bind$rxrpc(r1, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r11 = syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x200000) ioctl$CEC_DQEVENT(r11, 0xc0506107, &(0x7f00000004c0)={0x0, 0x0, 0x0, @lost_msgs}) r12 = socket(0x15, 0x5, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r12], 0x20) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf25190000000c009900020000005b0000000500a3004000000005001d00ec00000005001d000000000005001c0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4000800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x1, 0x212bcf14286e761a, 0xf40, 0x3, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0xcc, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x1, [{@private=0xa010102, 0x7028}]}, @ra={0x94, 0x4}, @generic={0x7, 0x3, "af"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r10, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40004) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8461164dfd1ceb767493c2af0b367978dc56b805541f911ccdfa8f3d0a608abd11d5bb31a90570614d5eb74f", @ANYRES16=r5, @ANYBLOB="01000000000000000000090000004000038014000200626174616476300000000000000000000800010002000000080003000000000008000500e0000002060007005e2300000500080006000000"], 0x54}}, 0x0) 8.544634801s ago: executing program 2 (id=403): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async, rerun: 32) fchdir(0xffffffffffffffff) (async, rerun: 32) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2, 0x0, 0xffffffff}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r6, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) capset(0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RVERSION(r8, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) (async) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 8.494894425s ago: executing program 2 (id=405): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback}}}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) 8.494117899s ago: executing program 2 (id=408): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 8.415253341s ago: executing program 2 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) (async) setpgid(r0, r0) setpgid(0x0, r0) (async) setpgid(0x0, r0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000132000/0x4000)=nil, 0x4000, 0xb) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f0000001040), 0x282d) (async) ptrace$poke(0x4, r4, &(0x7f0000001040), 0x282d) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) syz_open_procfs(r0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200010, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200010, 0x0) 8.345409668s ago: executing program 2 (id=410): sysfs$1(0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r1, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="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", 0x1000}], 0x10000000000001c1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x278, 0x4040800}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001840)="ac909e0e30f11c108893a4124326ca863b6e0781cd3e02579ff63ac5ea4dc8a7eb596d9daca341671a85817aae170ccc30065a8c2cab23f8926bb9b9830c342570532b796f42504148b93cd38b8fefed6e0c3fb1b4c4466ef63bc4f658961f5d60d2757afbf423ecebbdea88ea604e6b2ffe3352598fa35106cbd031bbc5dd3c758bdd3ab2a7ad8d0a70803bb2ec5e9d48c448024707", 0x96}, {&(0x7f0000000380)="032d72a836bd5172ac35ca6a80e8dfc57c7f260e410229dfc2e56913676e617e4866a9c89f6a07e0ba798e0b7befb42813e4c5b40a5ad506400c0743855d34eb6a339c086f2811fbd521fbd88f2943c2bebaf884e61deb9075fff492309a57ad40be432128f59c77012e8e52d53343347f10f266fc0c32c551d57b30e564d797", 0x80}, {&(0x7f00000015c0)="e84b85ac6915f2c20b7fdafbddcde1d945a531d1d89bdb95539b2eb94ceeb3ad2e07def908298141e5ac08de97329342f04b06ea3eb34ab18ef2d8fad6ee6cf4a36dc36dd72f7fad94cf3377c927fdd586", 0x51}], 0x3, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x2d6}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0x110, 0x117, 0x2, 0xf6, "fb89379f5e3efbecf986eeb58202ba254f701f20a4c779d38074c819ebce0337e877ca82793fddcc3764705baed4634db54b2c5eac9d8cc8d9a74959c34af8ccb93c3eca3e1ec48f97e317d9b83e912cd5df222e02354117c1a9920e4a611bee8215189a60b9a5f8dae43979440a7f61efeed53598042636b1d28c0c4cec9c10c5732cfcc496bfb40e2e711fae0e30052145223732723c6cd4f06b90e585015aef20c41c519d82bf8490a7b3b49d8d43d326e68e68f8b8174f4c38e450b169729e73a659de7a9ebb20d795dc94a55cc80a34e085d8e1b27bdcc27ba2ab02608d7b00b01b6df3fedcdeb04deb9727d26d03ece8224f90"}], 0x158, 0x20000080}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sysfs$1(0x1, &(0x7f00000001c0)='GPL\x00') r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000007000000631108002000000085100000020000008500000023000000185200000c00000000000000000000009500a50500000000913d48af65766c7480ee4189b042a2f2179e43214adb0b4c4dd48a5642a3678cd65a8718c0416b9872cb3036d60673fe7b27dddc68d390"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x21, '\x00', 0x0, @fallback=0x33, r3, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000a14010029bd7000fddbdf250800010002000000c7f9c0d724eb080003000300000008000100010000000800000000009a38"], 0x38}}, 0x4) 6.605094691s ago: executing program 0 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) mkdir(&(0x7f0000000200)='./file0\x00', 0x99) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r1}, &(0x7f0000000c00), 0x0}, 0x20) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4c2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048894}, 0x4080) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_emit_vhci(&(0x7f00000027c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x7}, {0x3, 0x3a}}}}, 0x8) close_range(r0, r0, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x70bd27, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x444, 0x3f4, 0x100, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x3b, [0x3, 0xfffffffc, 0x0, 0x1, 0x4, 0x9b64, 0x5, 0xff, 0x5, 0x1, 0x7, 0x3, 0x8000, 0x1, 0xd237, 0xe0000000, 0x1, 0x10000000, 0x8, 0xfe, 0x4, 0x2, 0x543, 0x2, 0x2, 0x5, 0x8, 0xe23, 0x5, 0x7, 0x0, 0x3, 0x2, 0xd9ce, 0x9ec, 0x587, 0x8, 0xb16, 0x8, 0x10, 0xbbe, 0x7, 0x5, 0x7608, 0xa, 0x0, 0x6, 0x2, 0xd8, 0x8, 0x0, 0x7ff, 0xff, 0x7, 0x17, 0xe, 0x4, 0x4, 0xfffffffb, 0x1b, 0x8, 0x80, 0x7, 0x6], [0x10001, 0x2, 0x2, 0xa, 0x30, 0x40580000, 0x0, 0x2, 0x8, 0x3, 0x9, 0x7, 0xdb, 0x2, 0x800, 0x54d5, 0xffffffff, 0x0, 0x5, 0x5, 0x4, 0x3, 0x2, 0x2, 0x0, 0x9, 0x800, 0x5, 0x3, 0x100, 0x6, 0x28000000, 0x5, 0x2ac, 0x26220276, 0x9, 0xf, 0x6, 0x3ff, 0x6, 0x3, 0x68, 0x6, 0x8, 0x8, 0x4, 0xa5, 0x6, 0x2, 0xff, 0x6, 0xd, 0x3d6e, 0x0, 0x7, 0x4, 0x80000001, 0x9, 0xfffffff3, 0xdf47, 0x1, 0xe651, 0x9, 0x1], [0x6, 0x7, 0x3, 0xb07, 0x6, 0x6, 0x101, 0x9, 0x3, 0xffffff81, 0x3, 0x0, 0xffffffff, 0x8, 0x101, 0xfffffc01, 0x1000, 0xc5, 0x4, 0x5, 0x2, 0x400, 0x7, 0x3, 0xf5, 0x18000, 0x4, 0xffffffff, 0x3, 0x156, 0x401, 0xf, 0x0, 0x534a, 0x8, 0xfffffff8, 0x8, 0x5, 0x9, 0x1, 0x4, 0x5, 0x7fffffff, 0x8d2, 0x1, 0x60000000, 0xff, 0xa10, 0x3, 0x6, 0x3, 0x401, 0x565, 0x8000, 0x9, 0x9, 0x8, 0xf9, 0x7fff, 0xffffffff, 0x80000000, 0xb355, 0x8, 0x400], [0x3, 0x4, 0x2, 0xfffffffe, 0x14, 0x8, 0x0, 0x3, 0x4, 0x200, 0x6, 0x100, 0x3, 0xd, 0x7f, 0x80000000, 0x3ff, 0x46, 0xffff, 0xfffffffd, 0x3, 0x200, 0x6, 0x1, 0x5, 0x7, 0x1, 0x3, 0x3, 0xcd, 0x0, 0x101, 0xee, 0xffffffff, 0x1, 0x2, 0x3ff, 0x36d, 0x2, 0x5772, 0x40, 0x7, 0xfffffff9, 0x6, 0x3, 0x1, 0xe, 0x60a6, 0x8, 0x4, 0x7, 0xc91, 0xfffffffb, 0x6, 0xda85, 0xfffffa83, 0x5, 0x9, 0x0, 0x8, 0x4, 0x10, 0x1000, 0x1], 0x22, ['\x00', '/dev/qrtr-tun\x00', '/dev/qrtr-tun\x00', '\x00', '(\'(\x00']}, ["", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x20000014}, 0x44008) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x14}}], 0x18}, 0x24000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) r8 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) (async) io_uring_enter(r8, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f00000003c0)={'s526\x00', [0x0, 0x5, 0xffff0001, 0x6ae624f8, 0x9e60, 0x1, 0xfffff800, 0x7f, 0x81, 0xc0000, 0x77, 0x9, 0x0, 0xb, 0x4, 0x2, 0x3, 0x7, 0x5, 0x3, 0x5, 0x5, 0xb3c, 0x3, 0x1, 0x7fffffff, 0x7, 0x1, 0xd4, 0x7, 0xfffffff8, 0x400]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) dup3(r8, r6, 0x80000) (async) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, 0x1, "66c5aff8a7eb3a096206135a420000008c84aea3170000000003000000000001", 0x4, 0x1, 0x8, 0x6b}, 0x3c) 6.522432675s ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 6.507407995s ago: executing program 0 (id=434): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x24000) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000080)=""/236) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 6.455321211s ago: executing program 0 (id=436): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x1c51, 0x4, 0x3, 0x366}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f00000000c0)={{@hyper}, 0x1ff, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380), 0x1000a) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x8) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x32) setxattr$incfs_metadata(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)="92cbc62dcb5b183dd781233d409dc4ba023c30b4d6b85a46349dbaaa21153112feda0436923682464fee1a87f7a67390a312863c65ef894a78315a1f167f6c77b38c97477ab8cf1918a2468647a36ae2c9dc1fd4", 0x54, 0x3) linkat(r7, &(0x7f0000000140)='./file0\x00', r8, &(0x7f00000001c0)='./file0\x00', 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x42}], 0x19, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x204000, 0x0) ioctl$BSG_SET_COMMAND_Q(r9, 0x2271, &(0x7f0000000040)=0x1) 6.376556866s ago: executing program 0 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x3c) (async) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0x180, 0x15, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xa1, 0x8, "49fcdb6eecb2433bec78b964a9d8f403ce2ccc9d8d7e5ec278b51afe868b699543dcdcaf38d78f6967bedc3e1c0ce26bc6d7dfba9f660cdd77fdaf3184adeb3e4fdbf0f5265c1a69aec03fa3b109b17d6419351ff9fda81a9eb58f8b7b1b6e790436847f63a056f0751e5f01106f229454b192684e471e196e7206e0f363b11adbf61c5da9f72001c6f4036c6e0189d9c5fabf495bfe6eea2b65c76619"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x97, 0x8, "8512dc32fc9d2b1af402d7214ddf677cef2aac00eb2546c35f6ec84f1d030bcc1dd95ab503abead5e00d92d3a6b1419f1556e52109dc03c9404ac535ac46666e6af9b547161086de9dc34ab3aa9c085bf39046c2725cfd73448b12ab8d46c8374c0920edebed48ae80bed0882da20e8f1c9264ae8cab04c6b9caff9f87ad0c975c4538b17996669326c96b29346f85b802a579"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0xffff, 0x5, @private2}]}, &(0x7f0000000180)=0x10) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6.075398506s ago: executing program 0 (id=446): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000180)={0xfffffffffffffda7, 0x4, 0x401, 0x56, 0x8}) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000180)={0xfffffffffffffda7, 0x4, 0x401, 0x56, 0x8}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x5, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xe}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0xfc, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) dup(r4) (async) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x2, 0x1, 0x106) (async) r8 = socket$kcm(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x1}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) (async) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000200)='./file0\x00', 0x101502, 0x101) (async) open(&(0x7f0000000200)='./file0\x00', 0x101502, 0x101) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r11 = socket(0xa, 0x2, 0x0) lseek(r7, 0x8, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x19, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8) 5.975579451s ago: executing program 32 (id=446): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000180)={0xfffffffffffffda7, 0x4, 0x401, 0x56, 0x8}) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000180)={0xfffffffffffffda7, 0x4, 0x401, 0x56, 0x8}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x5, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xe}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0xfc, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) dup(r4) (async) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x2, 0x1, 0x106) (async) r8 = socket$kcm(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x1}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) (async) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000200)='./file0\x00', 0x101502, 0x101) (async) open(&(0x7f0000000200)='./file0\x00', 0x101502, 0x101) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r11 = socket(0xa, 0x2, 0x0) lseek(r7, 0x8, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x19, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8) 3.604110884s ago: executing program 1 (id=479): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) recvfrom$unix(r4, 0x0, 0x0, 0x10041, 0x0, 0x0) bind$isdn_base(r4, &(0x7f0000000180)={0x22, 0x3, 0x1, 0xd3, 0xcb}, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200291b"], 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 2.765189811s ago: executing program 1 (id=484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x15fc, 0x7721, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r7, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206010200000000000000000100fffe11000300686173683a69702c6d61726b000000000900020073797a3100000000050005000a000000050004000100000005000100070000000c0007800500150000000000a3d27b518ec05579847d8b8eb4c29e3c3dc0a02a2664a8f6956ad96d29d9c7de81b3a5262be1ce7170f6deee4814a8e59f98a8fffad2aa683c3228c969200926f2c15f539988033824e7afa588afd92ec9b7007b05ce4b1ce0304155a999ec1c1a67732fe944ad519edd6df427235ed0f51edb7c74cd4de442050ffc6df7"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r5, &(0x7f0000000140), 0x7fffffffffffffff) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 1.885721217s ago: executing program 1 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @uid}, @nested={0x4, 0xd6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40881}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000074) prctl$PR_SET_FPEMU(0xa, 0x3) 1.878100924s ago: executing program 1 (id=493): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) r0 = socket$inet6(0xa, 0x800, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtaction={0x1058, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x1044, 0x1, [@m_ipt={0xc0, 0x1a, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x50, 0x6, {0x3, 'raw\x00', 0x10, 0x8001, "20ddf7f1042e35744a6a5ae539daf3500abf905e4798962cedeb9144516476e085c32442644c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x35, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cdbf16723a0e7bd140c3b76527d778db1845904574e4eb7cabb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xf80, 0x12, 0x0, 0x0, {{0x8}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xc9, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816ba4915ce2c751dd2d6c485410b40295d021698426"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x54, 0x6, {0x8, 'raw\x00', 0xc, 0x0, "fdab49e9eada13ffe711afe67a3890e03d31134edad7caf350e8c77b3e979131fd67ac011b8287d30675"}}, @TCA_IPT_TARG={0xd25, 0x6, {0x4, 'mangle\x00', 0x1, 0x0, "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"}}]}, {0xbd, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1058}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f000001ce80)=[{&(0x7f000001be80)=""/4089, 0xff9}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x801) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x4000000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r7, 0x80) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902"], 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'geneve1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}) 635.380581ms ago: executing program 3 (id=509): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0x0) 634.410596ms ago: executing program 3 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000400)=""/160}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 585.921898ms ago: executing program 4 (id=511): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 585.183661ms ago: executing program 1 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0x5af50c0f, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) 584.82401ms ago: executing program 4 (id=513): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x800, 0x0, 0x100000000000004, 0x10000, 0x100, 0x100, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0xa, 0x8, 0x7, 0x1c1, 0x1000000003, 0x40004, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x7ffffff, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x40000e, 0x7, 0x0, 0x2000000e6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x3, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x4, 0xab6, 0x4, 0x4, 0x1, 0x6, 0xb, 0x139790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x8c7, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r1 = dup(r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x43403d0e, 0x0) r3 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x3ee, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$selinux_create(r9, &(0x7f0000000200)=@objname={'system_u:object_r:iptables_initrc_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x5, 0x20, './file0/file0\x00'}, 0x74) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 584.507906ms ago: executing program 3 (id=514): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x3, 0x0, 0x9, 0x5, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x7) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1}, 0x2}], 0x1, 0x2, 0x0) 515.015547ms ago: executing program 3 (id=515): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x47}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002080)={'vxcan1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000020c0)=0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000002100)=0x1, 0x4) (async, rerun: 64) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000002180)={0x3, 0x1, 0x0, &(0x7f0000002140)}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000021c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000002200)={r1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048854}, 0x8000) (async) socketpair(0x8, 0x3, 0x7fffffff, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)={0x100, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2b}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffc01, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbbec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x815}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000002580)=@ccm_128={{0x304}, "1da083c1511503b9", "bcda030660436489d862d8a7fb87a220", "ff6ce1b1", "d7fce1f0dfee49e9"}, 0x28) recvmsg(r3, &(0x7f0000002c40)={&(0x7f00000025c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002640)}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/240, 0xf0}, {&(0x7f0000002800)=""/178, 0xb2}, {&(0x7f00000028c0)=""/63, 0x3f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f00000029c0)=""/82, 0x52}, {&(0x7f0000002a40)=""/166, 0xa6}], 0x8, &(0x7f0000002b80)=""/163, 0xa3}, 0x140) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002c80), r4) (async) syz_io_uring_setup(0x23cd, &(0x7f0000002cc0)={0x0, 0xaca5, 0x2, 0x1, 0x3e7, 0x0, r0}, &(0x7f0000002d40)=0x0, &(0x7f0000002d80)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000002dc0)=0x8, 0x0, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000002e00)=0x7, 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002e40)={0x3, 'tunl0\x00', {0x2}, 0x200}) (async) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000002e80)) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000002ec0)='/dev/comedi4\x00', 0x4000, 0x0) (async) r7 = openat$cgroup_ro(r0, &(0x7f0000002f00)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000002f40)=""/4096, 0x1000, 0x2002, &(0x7f0000003f40)={0xa, 0x4e20, 0x6, @remote}, 0x1c) (async) r8 = dup(r4) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f0000003f80)=0xb6, &(0x7f0000003fc0)=0x4) (async) ioctl$SNDCTL_DSP_SETDUPLEX(r7, 0x5016, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000004000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x16}, @in6={0xa, 0x4e24, 0x0, @private1, 0x40}, @in={0x2, 0x4e22, @local}], 0xc0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f00000040c0)={0xa, 0x4e20, 0x2, @mcast2, 0xfffffffe}, 0x1c) (async) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000004100)) 514.823ms ago: executing program 3 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x381040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x4, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}, "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"/4008}}, 0xfce) 445.571553ms ago: executing program 1 (id=517): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="035e9e5344147cc8a0dcf0b4d08341425d4542113ac4814f4d60c73d9589428eac4d36882d1705d87839d06486a4b677d431fc3a932be76ce9cb371c0fb2be9c5e55d3cb9d62c4913dcadf627e456a3aa6922d88dc57504ac46c", 0x5a, 0xfffffffffffffffb) r1 = syz_clone(0x230a0000, &(0x7f0000000100)="0de2ca779cd03339d7bbee21283059ccc8feb0929fc6980a6b505d8dcee255a2c8e4c6b68e0fd1ef492ca8528feda4534e7be763562075d1caf6c24a5d25458b5a5bb3fab9dc18d1508d16045ace40a1ae1c4d2eef1020603bb1f8171857127117759522bab2d2dfa46cf8e3f7667915be4a2f2194d1baaba6b70b341649cc441e2115a2acbda4bcbb1c7c3cb92843de0064defd072d0c08fb8c2d9c195a364dd63b5de7635e7b26ad8ce9df3b03f9dabbfdfc0d52b3dbbc7f6cf113fd47aeb0208d814f4612532db04dfa07409a1f10e68b19b1e1003f0f0d9c6d864c99b0e261e819f3869cfd27ce63e503", 0xec, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="409072d23e0455953179fa94dbfa7bf013e572f7af3f0be9a25a42adff2f64e485c42d5351254f2f22a402fa1177cf4d74a916e761cb2cfd69c783241a838a6e95c60f1305a80310da13f809068966cbc8ee6cbf600aa9bd194221fcbb97c6e4f86dc1f6678f1fb705471b1cfb4df618af9f1a56dc5b0c45854fbbf7155df89cc8acf6d33b8245ee51db73e8bfa07a2a759e3d262be46e00352515") r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r0, 0x1000, 0x7b}, 0x0, &(0x7f0000000400)="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", &(0x7f0000001400)=""/123) keyctl$link(0x8, r0, r0) keyctl$search(0xa, r0, &(0x7f0000001480)='ceph\x00', &(0x7f00000014c0)={'syz', 0x2}, r0) getpgid(r1) keyctl$search(0xa, r0, &(0x7f0000001500)='trusted\x00', &(0x7f0000001540)={'syz', 0x1}, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001580)={r0, 0x54, 0xbd}, &(0x7f00000015c0)={'enc=', 'oaep', ' hash=', {'poly1305-arm\x00'}}, &(0x7f0000001640)="461b4cdaed8c298057afb0763bc54183a3edad6bb4ca45e0ec99d2e1f26b719b6f2aa692706f03166262e68bd919e3d318859ed8831d5de88e561fa9beca97620b5410b5ecc8ff5ea0fcbcb0f2b2472db1ccaa07", &(0x7f00000016c0)=""/189) wait4(r1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000001780)={0xd44, 0x1, 0x1}, &(0x7f00000017c0)=[{}]) rt_sigtimedwait(&(0x7f0000001840)={[0x4]}, &(0x7f0000001880), &(0x7f0000001900)={0x77359400}, 0x8) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001ac0)=[{&(0x7f0000001940)="3dd50c2b9d73e917f0b3de2e69fad0672440f28966c3d3a1854f9739ab545dacbcfccd", 0x23}, {&(0x7f0000001980)="5b0bb9343efb8f6a86512892645f69e3f6effaae0832bc6d6591a012412491c3c0f1c49a2b4c1c6fdd8316fa7244a54b484c972eb9972488c918162b5b8dd3fa517d002f19bcb4461fa96ab800ce4b78be3212409e72b223c438b2f4d0ea48a36d73787981dcbdf77abb0bad1ed98fcb7f18abaaeeb5e5765a482639730010543ed844932358ca0589de2bf99767a4091633550ad85fc54035154f13bc39f4d9fecc372fc39084f598e76c15fe522fd361c91c6d876edce6afaf8df6bc877bba58120b75021feb56a05767fbd37e62bf977751658fded1a2796d56788167ea1a2473805a5a1cba84c22f5544e0", 0xed}, {&(0x7f0000001a80)="8fbb35a638bbba8ee7341dcce373be0186742f490c8ff73a365334ec5bd45d4c208583829a427f3c6b3b5e9e64b2a277b840a2e132e19ecf0c0ec72b", 0x3c}], 0x3, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001b00)={r2, 0x25, 0xda}, &(0x7f0000001b40)={'enc=', 'raw', ' hash=', {'streebog512\x00'}}, &(0x7f0000001bc0)="68df4b4852698891a7436086427405e0493453c48f21a66a10470bcfe02e25bc560580cb9f", &(0x7f0000001c00)=""/218) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008085) keyctl$invalidate(0x15, r0) keyctl$invalidate(0x15, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'}) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)=0x0) keyctl$chown(0x4, r0, r5, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001f00)='cifs.spnego\x00', &(0x7f0000001f40)=@secondary) add_key(&(0x7f0000001f80)='keyring\x00', &(0x7f0000001fc0)={'syz', 0x1}, &(0x7f0000002000)="5a975c77bfde9131b6d99af3f33a1f8b16b351b831ac1639ecf34ae3d456c8a2879bae4aca9d99f6c1dee5485b96b3b97ac7ee2fe382febee53d633f2d2d206161ec026991c01e8c2cbb39d96f2f4a111bab50b388fe5bdb2e6c7453fdfb668b99c46084936af50867cdd07dade4b6038f22b17e5a3446d353d85a8943185cd66e645bd3970888f91db0f47633446f3b74e0c2681665cc0279440d77c027e98927be0128c44fb2fd8de3eef270", 0xad, r2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) add_key$user(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x2}, &(0x7f0000002140)="eb7ce20738c752bd3a7d246bc2fa6ff56777f2459ee07c355ac4584e10e7039196e252bd8135d9be725addc928de8d38630b55de070e1573326295dea264315c036cffd0fdf94a70a445d1e9c1079eb033ab242f13745b253a", 0x59, r2) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f00000044c0)=[{{&(0x7f00000021c0)=@isdn, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)=""/44, 0x2c}, {&(0x7f0000002280)=""/180, 0xb4}], 0x2}, 0x81f}, {{&(0x7f0000002380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000002400)=""/112, 0x70}, {&(0x7f0000002480)=""/211, 0xd3}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x3}, 0xffffb9e1}, {{&(0x7f00000035c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f00000036c0)=""/234, 0xea}], 0x2, &(0x7f0000003800)=""/208, 0xd0}, 0x4}, {{&(0x7f0000003900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003980)=""/109, 0x6d}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/122, 0x7a}], 0x3, &(0x7f0000003bc0)=""/203, 0xcb}, 0x401}, {{&(0x7f0000003cc0)=@isdn, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d40)=""/187, 0xbb}, {&(0x7f0000003e00)=""/98, 0x62}], 0x2, &(0x7f0000003ec0)=""/122, 0x7a}, 0x8}, {{&(0x7f0000003f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/16, 0x10}, {&(0x7f0000004040)=""/1, 0x1}, {&(0x7f0000004080)=""/252, 0xfc}, {&(0x7f0000004180)=""/30, 0x1e}, {&(0x7f00000041c0)=""/40, 0x28}, {&(0x7f0000004200)=""/41, 0x29}, {&(0x7f0000004240)=""/181, 0xb5}, {&(0x7f0000004300)=""/77, 0x4d}], 0x9, &(0x7f0000004440)=""/124, 0x7c}, 0x7}], 0x6, 0x40002100, &(0x7f0000004640)={0x77359400}) openat(r4, &(0x7f0000004680)='./file1\x00', 0x0, 0x2) mount(&(0x7f00000046c0)=@sr0, &(0x7f0000004700)='./file0\x00', &(0x7f0000004740)='gadgetfs\x00', 0x2010004, &(0x7f0000004780)='ceph\x00') keyctl$assume_authority(0x10, r0) 445.133ms ago: executing program 3 (id=518): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0}) fcntl$getflags(r0, 0x40a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/41, 0x29}], 0x2, &(0x7f0000000240)=""/183, 0xb7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x4, 0x25dfdbfe, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x2, 0x0, 0x80}, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000200)={'bond0\x00', @ifru_data=&(0x7f0000000000)="efed7ca040a1110529deda82157cb31cb400000000000000000000002300"}) 315.317946ms ago: executing program 4 (id=519): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x200080) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f0000000300)={0x1, 0x0, {0x101, 0x1, 0x2023, 0x6, 0x0, 0x5}}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x48810}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29f4, 0x10100, 0x3, 0x35f}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r4) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81080480}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="315f2c25000000000c0003000100000000000000d99252424bec689c81fa59b20417a41262ba80775e1fe18597d51230d4a6a9af8b71094022770e618f73f9fa746fd2fe199d574aeeee0e35ebbd437de457cab547862861fb38ae9d30421c728ef5b93b4ea3b40af0bccf9ec308d35e127926d5267949a02588c52c74103dac94cd650353e4de94da04e987922f396f70217117fceae3b0db89beb0659919c4b678c546392a30d2b97125c0bb5877006de6033a22e983e2a46ecf7b067ff45d81e6e04acfd22a6bba168afc8c1d8bc9a859781b811108cbece223d622ec62fc2e67"], 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0xc0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000001100)) 114.257739ms ago: executing program 4 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x93}}]}, 0x90}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f00000000c0)) 272.031µs ago: executing program 4 (id=521): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_to_team\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="8e6c6c9c30fb235afe22c52a491e1b5605e795ded1684e24cba2e11abf34197e44e728ef542170ca94b4985ba92d4d92278f15c8f397e76e88efb486e5f0a023f974150f460ef78bde1e009fe94681795ec9c2799465a433009232c8fc4161", 0x5f}, {&(0x7f0000000340)="c263b29fadef6b4d5c3351ad987e395efa75a3bea2f3683e6eccd2a6a2cfc29eef0df6c362d5348d7fb572210f16443ae38348966dcb66d094109a7ec5b12207fec350566c0bd03467985561f8fd9be810d32e4d378f7fa8c561ed784feeae18aa6ede14d542a18a844c73622d1b1370c3031f9f66a91a59dfa21fdd35a9ed37e8ecf27bda41312c2c5a0e322c1660dc633f56304f77c0ec75ed4619f87c9340a48b8f47cc015bfc194cfd1a005e59d1205c06407c667e200b5875d7df879ff10778e7cca688aff9733a90087aa5ef3bbe241b0a41cabb59ac9979bc6d1c0a6b6329edd91b5109", 0xe7}, {&(0x7f0000000540)="7a7375c0c54d3a1a1c9a6a94bf18061eef3919c323e871fdf620f9dba3a931cf16d03086ee84191a7cf3444efa6861504f91993e05120b9e3f32869b10f1270268e03015f6980c7ac3658b6ca1f7789c2597331a6a4b464ee358c4e2b3829c7adafe0e02eed8995a96c6cf57903cb8e4e40f04cf003fae4be66a9c046817e3ec03465cc7df70dfcd0c565aaa9203a6b03a73caf90684e15a54ceb8", 0x9b}, {&(0x7f00000002c0)="449563475242387fb429395b5175abf016894912021d67af7a5b93cc20e81ad6400370df917e5e80804e21b221a6522330fcdcb821481ee191575b7058701a", 0x3f}, {&(0x7f0000000480)="16ec693f646a", 0x6}], 0x5}, 0x4004000) 0s ago: executing program 4 (id=522): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x400) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9382' (ED25519) to the list of known hosts. [ 55.730153][ T40] audit: type=1400 audit(1766428341.478:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.758619][ T40] audit: type=1400 audit(1766428341.508:63): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.765358][ T40] audit: type=1400 audit(1766428341.508:64): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.923279][ T40] audit: type=1400 audit(1766428343.668:65): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.933048][ T40] audit: type=1400 audit(1766428343.678:66): avc: denied { mount } for pid=5920 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.939617][ T5920] cgroup: Unknown subsys name 'net' [ 58.090432][ T5920] cgroup: Unknown subsys name 'cpuset' [ 58.097000][ T5920] cgroup: Unknown subsys name 'rlimit' [ 58.299758][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.304224][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 58.304236][ T40] audit: type=1400 audit(1766428344.048:78): avc: denied { relabelto } for pid=5925 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 58.314559][ T40] audit: type=1400 audit(1766428344.048:79): avc: denied { write } for pid=5925 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.326069][ T40] audit: type=1400 audit(1766428344.068:80): avc: denied { read } for pid=5920 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.336594][ T40] audit: type=1400 audit(1766428344.068:81): avc: denied { open } for pid=5920 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.968993][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.578242][ T40] audit: type=1400 audit(1766428348.328:82): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.836152][ T40] audit: type=1400 audit(1766428348.578:83): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.853215][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.856497][ T40] audit: type=1400 audit(1766428348.578:84): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.866174][ T40] audit: type=1400 audit(1766428348.578:85): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.876961][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.880377][ T40] audit: type=1400 audit(1766428348.578:86): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[6755]" dev="sockfs" ino=6755 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.886471][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.887140][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.889038][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.891733][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.899890][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.903950][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.904042][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.905758][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.906824][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.907001][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.907530][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.910508][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.913588][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.916534][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.918760][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.926163][ T40] audit: type=1400 audit(1766428348.668:87): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.929370][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.940754][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.944435][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.225754][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 63.310519][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 63.354323][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 63.368756][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.371561][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.373962][ T5937] bridge_slave_0: entered allmulticast mode [ 63.376926][ T5937] bridge_slave_0: entered promiscuous mode [ 63.384168][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.386751][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.389020][ T5937] bridge_slave_1: entered allmulticast mode [ 63.391594][ T5937] bridge_slave_1: entered promiscuous mode [ 63.471959][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 63.478730][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.485477][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.487956][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.490375][ T5942] bridge_slave_0: entered allmulticast mode [ 63.493179][ T5942] bridge_slave_0: entered promiscuous mode [ 63.500895][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.531310][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.533642][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.535985][ T5942] bridge_slave_1: entered allmulticast mode [ 63.539054][ T5942] bridge_slave_1: entered promiscuous mode [ 63.625682][ T5937] team0: Port device team_slave_0 added [ 63.627761][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.630136][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.632531][ T5943] bridge_slave_0: entered allmulticast mode [ 63.635355][ T5943] bridge_slave_0: entered promiscuous mode [ 63.644683][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.647204][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.649649][ T5943] bridge_slave_1: entered allmulticast mode [ 63.652361][ T5943] bridge_slave_1: entered promiscuous mode [ 63.656188][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.660555][ T5937] team0: Port device team_slave_1 added [ 63.689816][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.693021][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.696024][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.699231][ T5933] bridge_slave_0: entered allmulticast mode [ 63.703144][ T5933] bridge_slave_0: entered promiscuous mode [ 63.707597][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.709901][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.718576][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.729459][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.731780][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.740604][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.755646][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.758115][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.760549][ T5933] bridge_slave_1: entered allmulticast mode [ 63.763214][ T5933] bridge_slave_1: entered promiscuous mode [ 63.768782][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.781450][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.787408][ T5942] team0: Port device team_slave_0 added [ 63.819573][ T5942] team0: Port device team_slave_1 added [ 63.824171][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.846148][ T5943] team0: Port device team_slave_0 added [ 63.850668][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.891550][ T5943] team0: Port device team_slave_1 added [ 63.904681][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.907051][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.915361][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.921013][ T5933] team0: Port device team_slave_0 added [ 63.939084][ T5937] hsr_slave_0: entered promiscuous mode [ 63.942437][ T5937] hsr_slave_1: entered promiscuous mode [ 63.946124][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.948694][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.957125][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.962375][ T5933] team0: Port device team_slave_1 added [ 63.987823][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.990561][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.000530][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.009116][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.011718][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.021722][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.041855][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.044811][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.055741][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.073316][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.076213][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.086813][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.121113][ T5942] hsr_slave_0: entered promiscuous mode [ 64.123387][ T5942] hsr_slave_1: entered promiscuous mode [ 64.125633][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 64.127659][ T5942] Cannot create hsr debugfs directory [ 64.168141][ T5943] hsr_slave_0: entered promiscuous mode [ 64.171398][ T5943] hsr_slave_1: entered promiscuous mode [ 64.174367][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 64.177022][ T5943] Cannot create hsr debugfs directory [ 64.233444][ T5933] hsr_slave_0: entered promiscuous mode [ 64.236806][ T5933] hsr_slave_1: entered promiscuous mode [ 64.239721][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 64.242127][ T5933] Cannot create hsr debugfs directory [ 64.536010][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.551006][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.556641][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.567214][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.597118][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.605340][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.613802][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.619710][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.692415][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.699867][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.709550][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.714607][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.781446][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.789820][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.793343][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.799575][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.804089][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.830602][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.840750][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.843943][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.863900][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.867103][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.893936][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.922132][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.930371][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.944647][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.946986][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.958018][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.968428][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.970744][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.973891][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 64.973900][ T40] audit: type=1400 audit(1766428350.718:91): avc: denied { sys_module } for pid=5937 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.986750][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.986790][ T5948] Bluetooth: hci2: command tx timeout [ 64.989815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.996431][ T5948] Bluetooth: hci0: command tx timeout [ 64.996522][ T5294] Bluetooth: hci3: command tx timeout [ 64.998710][ T5944] Bluetooth: hci1: command tx timeout [ 65.011503][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.013776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.049115][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.096646][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.112034][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.116585][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.119575][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.130164][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.133223][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.188703][ T5937] veth0_vlan: entered promiscuous mode [ 65.194418][ T5937] veth1_vlan: entered promiscuous mode [ 65.215960][ T5937] veth0_macvtap: entered promiscuous mode [ 65.222603][ T5937] veth1_macvtap: entered promiscuous mode [ 65.243488][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.250313][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.258184][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.270260][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.274159][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.283720][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.290780][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.296120][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.321900][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.364556][ T5933] veth0_vlan: entered promiscuous mode [ 65.380442][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.383650][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.401097][ T5933] veth1_vlan: entered promiscuous mode [ 65.405001][ T5942] veth0_vlan: entered promiscuous mode [ 65.435846][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.437212][ T5942] veth1_vlan: entered promiscuous mode [ 65.439790][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.453182][ T5943] veth0_vlan: entered promiscuous mode [ 65.459534][ T40] audit: type=1400 audit(1766428351.208:92): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.466631][ T40] audit: type=1400 audit(1766428351.208:93): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/syzkaller.vHscKA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.474251][ T40] audit: type=1400 audit(1766428351.218:94): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.481615][ T40] audit: type=1400 audit(1766428351.218:95): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/syzkaller.vHscKA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.482988][ T5943] veth1_vlan: entered promiscuous mode [ 65.489802][ T40] audit: type=1400 audit(1766428351.218:96): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/syzkaller.vHscKA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.496531][ T5933] veth0_macvtap: entered promiscuous mode [ 65.500803][ T40] audit: type=1400 audit(1766428351.218:97): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.505561][ T5942] veth0_macvtap: entered promiscuous mode [ 65.509664][ T40] audit: type=1400 audit(1766428351.238:98): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.516995][ T5942] veth1_macvtap: entered promiscuous mode [ 65.518865][ T40] audit: type=1400 audit(1766428351.238:99): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="gadgetfs" ino=6050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.528404][ T40] audit: type=1400 audit(1766428351.238:100): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.538544][ T5933] veth1_macvtap: entered promiscuous mode [ 65.539945][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.549040][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.558310][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.568295][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.578612][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.584131][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589121][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.597588][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.601881][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.622874][ T5943] veth0_macvtap: entered promiscuous mode [ 65.626080][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.634589][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639480][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648765][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.652906][ T5943] veth1_macvtap: entered promiscuous mode [ 65.687883][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.698539][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.708394][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.713174][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721616][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.725238][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726964][ T6026] block nbd0: server does not support multiple connections per device. [ 65.734028][ T6026] block nbd0: shutting down sockets [ 65.808169][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.811409][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.826790][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.829304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.843627][ T6031] trusted_key: syz.1.6 sent an empty control message without MSG_MORE. [ 65.849391][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.851988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.891181][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.893671][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.908406][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.911656][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.915119][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.918106][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.013212][ T6040] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 66.018553][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.029350][ T6040] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 66.189330][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.189680][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.216209][ T6058] ref_ctr_offset mismatch. inode: 0x21 offset: 0x0 ref_ctr_offset(old): 0x400000000 ref_ctr_offset(new): 0x8 [ 66.231142][ T6061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'. [ 66.338073][ T6069] ISOFS: Unable to identify CD-ROM format. [ 66.346527][ T6027] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.357773][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 66.449007][ T6073] loop6: detected capacity change from 0 to 2640 [ 66.452584][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.455091][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.457932][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.460403][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.462996][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.465517][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.468402][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.470841][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.473394][ T6073] ldm_validate_partition_table(): Disk read failed. [ 66.475486][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.478041][ T6073] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.480488][ T6073] Dev loop6: unable to read RDB block 0 [ 66.482326][ T6073] loop6: unable to read partition table [ 66.484244][ T6073] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 66.510125][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.515150][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.520758][ T6027] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.526820][ T6027] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.531042][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.538207][ T6027] usb 7-1: config 0 descriptor?? [ 66.867214][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 66.967980][ T6027] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.016487][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.056745][ T6104] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 67.067140][ T5948] Bluetooth: hci0: command tx timeout [ 67.067371][ T5944] Bluetooth: hci3: command tx timeout [ 67.067424][ T5294] Bluetooth: hci1: command tx timeout [ 67.067451][ T5294] Bluetooth: hci2: command tx timeout [ 67.180012][ T53] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 67.183424][ T53] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 67.188262][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 67.194054][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.198179][ T53] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.204674][ T53] usb 6-1: Product: syz [ 67.208397][ T53] usb 6-1: Manufacturer: syz [ 67.210418][ T53] usb 6-1: SerialNumber: syz [ 67.217463][ T53] usb 6-1: config 0 descriptor?? [ 67.224638][ T53] hub 6-1:0.0: bad descriptor, ignoring hub [ 67.227688][ T53] hub 6-1:0.0: probe with driver hub failed with error -5 [ 67.234156][ T53] usb 6-1: selecting invalid altsetting 0 [ 68.110478][ T6130] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 68.147101][ T6086] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 68.296788][ T6007] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 68.323156][ T6142] random: crng reseeded on system resumption [ 68.344201][ T6142] gretap1: entered promiscuous mode [ 68.387580][ T6143] ======================================================= [ 68.387580][ T6143] WARNING: The mand mount option has been deprecated and [ 68.387580][ T6143] and is ignored by this kernel. Remove the mand [ 68.387580][ T6143] option from the mount to silence this warning. [ 68.387580][ T6143] ======================================================= [ 68.400643][ T6143] kAFS: No cell specified [ 68.403504][ T6143] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 68.406722][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 68.411769][ T6143] netlink: 'syz.3.34': attribute type 11 has an invalid length. [ 68.414269][ T6143] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.34'. [ 68.436384][ T6007] usb 7-1: device descriptor read/64, error -32 [ 68.512568][ T6145] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 68.535968][ T6086] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 68.539075][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'. [ 68.543292][ T6027] usb 6-1: USB disconnect, device number 2 [ 68.686667][ T6007] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 68.816403][ T6007] usb 7-1: device descriptor read/64, error -32 [ 68.861895][ T6113] autofs: Unknown parameter '0cN`U-! v.pmЮ 2. Xtw O[spHUsfkQ4ǩ' [ 68.916658][ T6027] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 69.076678][ T6007] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 69.082966][ T6027] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 69.085755][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.089948][ T6027] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.092837][ T6160] loop6: detected capacity change from 0 to 524279808 [ 69.093593][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.093610][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.094396][ T6027] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 69.105635][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.109442][ T6007] usb 7-1: device descriptor read/8, error -32 [ 69.111893][ T6027] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.115663][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.120144][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.125113][ T6027] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 69.128142][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 69.132007][ T6027] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.136181][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.140199][ T6027] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 69.144666][ T6160] loop6: detected capacity change from 524279808 to 1 [ 69.147331][ T6027] usb 8-1: string descriptor 0 read error: -22 [ 69.147387][ T6027] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 69.147429][ T5944] Bluetooth: hci0: command tx timeout [ 69.147531][ T6027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.156576][ T5944] Bluetooth: hci2: command tx timeout [ 69.161241][ T5944] Bluetooth: hci1: command tx timeout [ 69.173222][ T6027] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 69.173620][ T6160] Dev loop6: unable to read RDB block 1 [ 69.185588][ T6160] loop6: unable to read partition table [ 69.190522][ T6160] loop6: partition table beyond EOD, truncated [ 69.195041][ T6160] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 69.293806][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 69.428713][ T829] usb 8-1: USB disconnect, device number 2 [ 69.511082][ T6197] syz_tun: entered allmulticast mode [ 69.538237][ T6202] random: crng reseeded on system resumption [ 69.538593][ T6197] batman_adv: batadv0: Adding interface: gretap1 [ 69.544143][ T6197] batman_adv: batadv0: Interface activated: gretap1 [ 69.548322][ T6196] syz_tun: left allmulticast mode [ 69.583166][ T6206] binder_alloc: binder_alloc_mmap_handler: 6204 200000ffe000-200001000000 already mapped failed -16 [ 69.589398][ T6206] binder_alloc: 6204: binder_alloc_buf, no vma [ 69.597152][ T6206] Illegal XDP return value 4194307 on prog (id 15) dev syz_tun, expect packet loss! [ 69.696807][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.700600][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.703357][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.976459][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 69.976471][ T40] audit: type=1400 audit(1766428355.718:227): avc: denied { getopt } for pid=6241 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.978000][ T6243] input: syz1 as /devices/virtual/input/input6 [ 69.981129][ T40] audit: type=1400 audit(1766428355.728:228): avc: denied { create } for pid=6244 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.999836][ T40] audit: type=1400 audit(1766428355.738:229): avc: denied { ioctl } for pid=6244 comm="syz.3.66" path="socket:[10708]" dev="sockfs" ino=10708 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.999903][ T40] audit: type=1400 audit(1766428355.748:230): avc: denied { setopt } for pid=6244 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.000720][ T6247] x_tables: duplicate underflow at hook 3 [ 70.039281][ T6250] io-wq is not configured for unbound workers [ 70.088737][ T40] audit: type=1400 audit(1766428355.838:231): avc: denied { setopt } for pid=6251 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.116407][ T40] audit: type=1400 audit(1766428355.838:232): avc: denied { getopt } for pid=6251 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.116445][ T40] audit: type=1400 audit(1766428355.838:233): avc: denied { map } for pid=6251 comm="syz.0.68" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.116482][ T40] audit: type=1400 audit(1766428355.838:234): avc: denied { execute } for pid=6251 comm="syz.0.68" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.116516][ T40] audit: type=1400 audit(1766428355.858:235): avc: denied { create } for pid=6253 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.122672][ T40] audit: type=1400 audit(1766428355.868:236): avc: denied { read write } for pid=6253 comm="syz.3.69" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.132875][ T6027] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.137920][ T6027] hid-generic 0000:0000:0000.0003: hidraw2: HID v0.00 Device [syz0] on syz0 [ 70.306362][ T6007] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 70.331203][ T6007] usb 7-1: device firmware changed [ 70.340326][ T5934] usb 7-1: USB disconnect, device number 2 [ 70.347155][ T5944] Bluetooth: hci3: command tx timeout [ 70.476423][ T5934] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.513132][ T6284] capability: warning: `syz.3.72' uses deprecated v2 capabilities in a way that may be insecure [ 70.628749][ T5934] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 70.632158][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.637100][ T5934] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 70.640664][ T5934] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 70.644976][ T5934] usb 7-1: Manufacturer: syz [ 70.651328][ T5934] usb 7-1: config 0 descriptor?? [ 70.690561][ T6306] xt_cluster: node mask cannot exceed total number of nodes [ 70.716352][ T5934] rc_core: IR keymap rc-hauppauge not found [ 70.718188][ T5934] Registered IR keymap rc-empty [ 70.721052][ T5934] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 70.724994][ T5934] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 70.923091][ T6321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.941154][ T5934] usb 7-1: USB disconnect, device number 3 [ 70.960559][ T6321] bridge_slave_1: left allmulticast mode [ 70.962834][ T6321] bridge_slave_1: left promiscuous mode [ 70.965893][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.971492][ T6321] bridge_slave_0: left allmulticast mode [ 70.973771][ T6321] bridge_slave_0: left promiscuous mode [ 70.976125][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.214282][ T6327] netlink: 'syz.0.83': attribute type 39 has an invalid length. [ 71.220539][ T6327] veth0_macvtap: left promiscuous mode [ 71.226971][ T5944] Bluetooth: hci1: command tx timeout [ 71.227346][ T5950] Bluetooth: hci0: command tx timeout [ 71.229109][ T5294] Bluetooth: hci2: command tx timeout [ 71.342577][ T6333] tipc: Can't bind to reserved service type 0 [ 71.347937][ T6333] Zero length message leads to an empty skb [ 71.706684][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 71.706702][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.234180][ T6336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.237043][ T6336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.241951][ T6336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.245872][ T6336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.248546][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.251780][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.255093][ T6336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.257786][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.261782][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.265342][ T6336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.268291][ T6336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.273388][ T6336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.323309][ T6364] __nla_validate_parse: 3 callbacks suppressed [ 72.323320][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 72.360404][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 72.371591][ T6372] input: syz0 as /devices/virtual/input/input8 [ 72.469450][ T6383] netlink: 152 bytes leftover after parsing attributes in process `syz.1.99'. [ 72.567739][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.584394][ T6390] binder: 6389:6390 ioctl c038943b 2000000000c0 returned -22 [ 72.863775][ T6397] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 73.257505][ T6417] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.265068][ T6418] tipc: MTU too low for tipc bearer [ 73.303461][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 73.323981][ T6420] warning: `syz.2.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.329130][ T6422] (syz.3.112,6422,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 73.331867][ T6422] (syz.3.112,6422,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 73.334228][ T6422] (syz.3.112,6422,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 73.337238][ T6422] (syz.3.112,6422,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 73.350130][ T6422] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.112'. [ 73.443309][ T6426] process 'syz.0.113' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 73.483534][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 73.489555][ T6437] netlink: 'syz.2.117': attribute type 30 has an invalid length. [ 73.508302][ T4971] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.522338][ T4971] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.530384][ T4971] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.533822][ T4971] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.546453][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.575939][ T6448] netlink: 'syz.0.120': attribute type 5 has an invalid length. [ 73.702700][ T6454] mmap: syz.2.123 (6454) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.992171][ T6464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.010927][ T6464] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 74.014038][ T6464] overlayfs: failed to look up (tracing) for ino (-66) [ 74.029150][ T6464] wg2: entered promiscuous mode [ 74.030578][ T6464] wg2: entered allmulticast mode [ 74.266451][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.266488][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.268895][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.392139][ T6485] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 74.516856][ T6492] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 74.519772][ T6492] netlink: 224 bytes leftover after parsing attributes in process `syz.0.133'. [ 74.543646][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 74.580321][ T6497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.603490][ T6499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.608409][ T6499] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 74.615147][ T6499] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 74.726952][ T6505] bridge_slave_0: entered promiscuous mode [ 74.735943][ T6508] netlink: 'syz.3.138': attribute type 21 has an invalid length. [ 74.740677][ T6508] netlink: 'syz.3.138': attribute type 6 has an invalid length. [ 74.743981][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.138'. [ 74.793454][ T6523] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 74.809248][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.814112][ T6523] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.826566][ T6523] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 74.840541][ T6523] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 74.861511][ T6523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.869815][ T6523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.915803][ T6543] program syz.3.147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.916452][ T6542] program syz.3.147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.015099][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 75.015117][ T40] audit: type=1400 audit(1766428360.758:337): avc: denied { write } for pid=6553 comm="syz.1.151" path="socket:[13315]" dev="sockfs" ino=13315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.047942][ T40] audit: type=1400 audit(1766428360.798:338): avc: denied { append } for pid=6561 comm="syz.3.154" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.079222][ T40] audit: type=1400 audit(1766428360.828:339): avc: denied { nlmsg_write } for pid=6557 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.153133][ T6571] binder: BINDER_SET_CONTEXT_MGR already set [ 75.155176][ T6571] binder: 6561:6571 ioctl 4018620d 200000004a80 returned -16 [ 75.161394][ T40] audit: type=1400 audit(1766428360.908:340): avc: denied { mounton } for pid=6553 comm="syz.1.151" path="/25/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.168975][ T6556] fuse: Unknown parameter '0x0000000000000008' [ 75.226351][ T6570] capability: warning: `syz.1.151' uses 32-bit capabilities (legacy support in use) [ 75.326378][ T850] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.388653][ T6580] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 75.396320][ T40] audit: type=1400 audit(1766428361.138:341): avc: denied { relabelto } for pid=6577 comm="syz.0.156" name="45" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 75.404707][ T40] audit: type=1400 audit(1766428361.138:342): avc: denied { associate } for pid=6577 comm="syz.0.156" name="45" dev="tmpfs" ino=253 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 75.414363][ T40] audit: type=1400 audit(1766428361.148:343): avc: denied { remove_name } for pid=5942 comm="syz-executor" name="binderfs" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 75.423126][ T40] audit: type=1400 audit(1766428361.158:344): avc: denied { rmdir } for pid=5942 comm="syz-executor" name="45" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 75.431611][ T40] audit: type=1400 audit(1766428361.168:345): avc: denied { bind } for pid=6581 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.437405][ T40] audit: type=1400 audit(1766428361.178:346): avc: denied { write } for pid=6581 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.486342][ T850] usb 7-1: Using ep0 maxpacket: 32 [ 75.489223][ T850] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 75.492901][ T850] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 75.496870][ T850] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.500287][ T850] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 75.506032][ T850] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 75.509034][ T850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.511519][ T850] usb 7-1: Product: syz [ 75.512859][ T850] usb 7-1: Manufacturer: syz [ 75.514388][ T850] usb 7-1: SerialNumber: syz [ 75.520197][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 75.523981][ T850] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input9 [ 75.626616][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.737837][ T6596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6596 comm=syz.0.161 [ 75.746365][ T850] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 75.746442][ T850] (id 0x00) [ 75.794890][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.0.161 [ 75.796423][ T850] rc_core: IR keymap rc-imon-pad not found [ 75.796437][ T850] Registered IR keymap rc-empty [ 75.796493][ T850] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 75.796508][ T850] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 75.957744][ T850] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 75.962365][ T850] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input10 [ 75.968593][ T850] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 76.127568][ T55] usb 7-1: USB disconnect, device number 4 [ 76.277324][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.346495][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.346541][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.351795][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.590156][ T6654] netlink: 'syz.1.180': attribute type 12 has an invalid length. [ 76.765130][ T6667] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 76.767046][ T6666] openvswitch: netlink: IPv6 tunnel dst address is zero [ 76.882827][ T6677] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 77.005634][ T6683] (syz.2.189,6683,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 77.040136][ T6685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.384954][ T6702] netlink: 'syz.3.195': attribute type 2 has an invalid length. [ 77.392548][ T6702] 9p: Bad value for 'rfdno' [ 77.403526][ T6702] __nla_validate_parse: 7 callbacks suppressed [ 77.403542][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 77.470823][ T6708] tipc: Started in network mode [ 77.472694][ T6708] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 77.475536][ T6708] tipc: Enabling of bearer rejected, failed to enable media [ 77.696441][ T6007] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.706519][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.846518][ T6732] overlayfs: missing 'lowerdir' [ 77.856413][ T6731] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 77.870996][ T6007] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.874818][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.878071][ T6007] usb 6-1: Product: syz [ 77.879585][ T6007] usb 6-1: Manufacturer: syz [ 77.881604][ T6007] usb 6-1: SerialNumber: syz [ 77.884633][ T6007] usb 6-1: config 0 descriptor?? [ 77.904877][ T6738] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.207'. [ 77.935800][ T6742] CUSE: unknown device info "" [ 77.938393][ T6742] CUSE: zero length info key specified [ 77.988568][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.212'. [ 78.099866][ T6028] usb 6-1: USB disconnect, device number 3 [ 78.216478][ T829] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.268657][ T6774] bond1: option xmit_hash_policy: invalid value (6) [ 78.272522][ T6774] bond1 (unregistering): Released all slaves [ 78.300177][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 78.303568][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 78.306377][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 78.386337][ T829] usb 8-1: Using ep0 maxpacket: 8 [ 78.389230][ T829] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 78.391863][ T829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.395409][ T829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.398693][ T829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.401893][ T829] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.405983][ T829] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.408926][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.427342][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.427388][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.429407][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.578973][ T6791] Bluetooth: MGMT ver 1.23 [ 78.587368][ T6791] /dev/nullb0: Can't open blockdev [ 78.589528][ T6792] /dev/nullb0: Can't open blockdev [ 78.624176][ T829] usb 8-1: usb_control_msg returned -32 [ 78.627167][ T829] usbtmc 8-1:16.0: can't read capabilities [ 78.724099][ T6802] cgroup: none used incorrectly [ 78.726489][ T6800] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 78.949647][ T6822] ip6gre1: entered allmulticast mode [ 78.958284][ T6822] netlink: 'syz.1.234': attribute type 12 has an invalid length. [ 78.961026][ T6822] netlink: 'syz.1.234': attribute type 29 has an invalid length. [ 78.964359][ T6822] netlink: 148 bytes leftover after parsing attributes in process `syz.1.234'. [ 79.132888][ T6829] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 79.138056][ T6829] /dev/nullb0: Can't open blockdev [ 79.177306][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.348625][ T55] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.352278][ T55] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.356823][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.360591][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 79.365166][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.371234][ T55] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.374998][ T55] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.378488][ T55] usb 5-1: Product: syz [ 79.380315][ T55] usb 5-1: Manufacturer: syz [ 79.385979][ T55] cdc_wdm 5-1:1.0: skipping garbage [ 79.388848][ T55] cdc_wdm 5-1:1.0: skipping garbage [ 79.392973][ T55] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 79.395497][ T55] cdc_wdm 5-1:1.0: Unknown control protocol [ 79.588630][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 79.625731][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 79.631050][ T829] usb 5-1: USB disconnect, device number 2 [ 79.685739][ T6840] binder: BINDER_SET_CONTEXT_MGR already set [ 79.690435][ T6840] binder: 6839:6840 ioctl 4018620d 200000004a80 returned -16 [ 79.694672][ T6840] netlink: 328 bytes leftover after parsing attributes in process `syz.2.243'. [ 80.018730][ T6857] overlayfs: missing 'lowerdir' [ 80.022550][ T6857] devpts: Unknown parameter './file0' [ 80.252947][ T6870] xt_socket: unknown flags 0xd0 [ 80.303586][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 80.303597][ T40] audit: type=1400 audit(1766428366.048:411): avc: denied { getopt } for pid=6873 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.326679][ T5967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.496394][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 80.508246][ T5967] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.511320][ T5967] usb 6-1: config 179 has no interface number 0 [ 80.513717][ T5967] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.518100][ T5967] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.522271][ T5967] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.525449][ T5967] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.529123][ T5967] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.534144][ T5967] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.537085][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.541560][ T6864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.661517][ T40] audit: type=1400 audit(1766428366.408:412): avc: denied { read } for pid=6893 comm="syz.0.264" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.672887][ T40] audit: type=1400 audit(1766428366.408:413): avc: denied { open } for pid=6893 comm="syz.0.264" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.715640][ T40] audit: type=1400 audit(1766428366.458:414): avc: denied { create } for pid=6893 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.726366][ T40] audit: type=1400 audit(1766428366.458:415): avc: denied { setopt } for pid=6893 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.733720][ T40] audit: type=1400 audit(1766428366.468:416): avc: denied { ioctl } for pid=6893 comm="syz.0.264" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.754251][ T5967] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input12 [ 80.763464][ T40] audit: type=1400 audit(1766428366.508:417): avc: denied { read } for pid=5328 comm="acpid" name="js0" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.771757][ T40] audit: type=1400 audit(1766428366.508:418): avc: denied { open } for pid=5328 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2914 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.780933][ T40] audit: type=1400 audit(1766428366.508:419): avc: denied { ioctl } for pid=5328 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2914 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.931771][ T40] audit: type=1400 audit(1766428366.678:420): avc: denied { setopt } for pid=6913 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.947531][ T5934] usb 6-1: USB disconnect, device number 4 [ 80.947550][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.953915][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.958151][ T6863] tmpfs: Bad value for 'mpol' [ 81.010836][ T6921] /dev/nbd0: Can't open blockdev [ 81.190724][ T6028] usb 8-1: USB disconnect, device number 3 [ 81.354965][ T6944] XFS (nbd3): no-recovery mounts must be read-only. [ 81.397801][ T6959] bond1: option xmit_hash_policy: invalid value (6) [ 81.402845][ T6959] bond1 (unregistering): Released all slaves [ 81.586541][ T6977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.600529][ T6977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.602823][ T6977] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 81.606543][ T6977] bond2: (slave vcan1): Error -95 calling set_mac_address [ 81.708431][ T6995] openvswitch: netlink: Flow key attr not present in new flow. [ 81.747079][ T6998] bond0: entered promiscuous mode [ 81.748820][ T6998] bond_slave_0: entered promiscuous mode [ 81.751043][ T6998] bond_slave_1: entered promiscuous mode [ 81.753576][ T6998] team0: entered promiscuous mode [ 81.755739][ T6998] team_slave_0: entered promiscuous mode [ 81.758969][ T6998] team_slave_1: entered promiscuous mode [ 81.761721][ T6998] syz_tun: entered promiscuous mode [ 81.766406][ T6998] gretap0: entered promiscuous mode [ 81.771634][ T6998] hsr1: entered promiscuous mode [ 81.776669][ T6027] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.783328][ T7002] ptrace attach of "/syz-executor exec"[7003] was attempted by "/syz-executor exec"[7002] [ 81.801873][ T7005] team0: Device is already in use. [ 81.949418][ T6027] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 81.953322][ T6027] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.957580][ T6027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.962977][ T6027] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.966743][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.970087][ T6027] usb 6-1: Product: syz [ 81.971825][ T6027] usb 6-1: Manufacturer: syz [ 81.973807][ T6027] usb 6-1: SerialNumber: syz [ 81.981230][ T6027] usb 6-1: config 0 descriptor?? [ 81.985055][ T6027] hub 6-1:0.0: bad descriptor, ignoring hub [ 81.987830][ T6027] hub 6-1:0.0: probe with driver hub failed with error -5 [ 81.993109][ T6027] usb 6-1: selecting invalid altsetting 0 [ 82.180542][ T7015] tmpfs: Bad value for 'mpol' [ 82.392766][ T7024] binder: 7023:7024 unknown command 0 [ 82.392785][ T7024] binder: 7023:7024 ioctl c0306201 2000000003c0 returned -22 [ 82.397026][ T7025] bridge0: entered promiscuous mode [ 82.404811][ T7025] macsec2: entered allmulticast mode [ 82.407250][ T7025] bridge0: entered allmulticast mode [ 82.464414][ T7030] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.480051][ T1190] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.607295][ T6974] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 82.758991][ T6974] usb 6-1: device firmware changed [ 82.763365][ T5967] usb 6-1: USB disconnect, device number 5 [ 82.906372][ T5967] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.057595][ T5967] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 83.061100][ T5967] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.064792][ T5967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.069961][ T5967] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.073401][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.076750][ T5967] usb 6-1: Product: syz [ 83.078460][ T5967] usb 6-1: Manufacturer: 䟒郧飿ぬ﬋憎㜇뵷ᬕ著墽껗ꅻ鶰ॽ짯ﭐ䆗씜闭먲嗡﵅迴辑擺눕腸蝮동㟌虸譜渏ᖔ曹 [ 83.083831][ T5967] usb 6-1: SerialNumber: 釞퍋﯑䗼褸 [ 83.087798][ T5967] usb 6-1: config 0 descriptor?? [ 83.091253][ T5967] hub 6-1:0.0: bad descriptor, ignoring hub [ 83.093671][ T5967] hub 6-1:0.0: probe with driver hub failed with error -5 [ 83.098678][ T5967] usb 6-1: selecting invalid altsetting 0 [ 83.118787][ T7038] mkiss: ax0: crc mode is auto. [ 83.291401][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.294906][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.398402][ T5934] usb 6-1: USB disconnect, device number 6 [ 83.523835][ T7054] __nla_validate_parse: 18 callbacks suppressed [ 83.523847][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 83.635020][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.635020][ T7065] Use struct sctp_assoc_value instead [ 83.640022][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.640022][ T7065] Use struct sctp_assoc_value instead [ 83.644811][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.644811][ T7065] Use struct sctp_assoc_value instead [ 83.651339][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.651339][ T7065] Use struct sctp_assoc_value instead [ 83.656436][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.656436][ T7065] Use struct sctp_assoc_value instead [ 83.662301][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.662301][ T7065] Use struct sctp_assoc_value instead [ 83.668326][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.668326][ T7065] Use struct sctp_assoc_value instead [ 83.673845][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.673845][ T7065] Use struct sctp_assoc_value instead [ 83.680021][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.680021][ T7065] Use struct sctp_assoc_value instead [ 83.685616][ T7065] sctp: [Deprecated]: syz.0.317 (pid 7065) Use of int in maxseg socket option. [ 83.685616][ T7065] Use struct sctp_assoc_value instead [ 83.762060][ T7077] netlink: 830 bytes leftover after parsing attributes in process `syz.0.321'. [ 83.805654][ T7083] block nbd0: not configured, cannot reconfigure [ 83.983924][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 84.048249][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.052959][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.129051][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 84.132320][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.331'. [ 84.135463][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 84.139731][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.331'. [ 84.200821][ T7119] xt_connbytes: Forcing CT accounting to be enabled [ 84.203658][ T7119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.430954][ T7138] No control pipe specified [ 84.507550][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.507601][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 84.905842][ T7155] netlink: 'syz.2.347': attribute type 10 has an invalid length. [ 84.937456][ T7155] veth0_vlan: left promiscuous mode [ 84.941650][ T7155] veth0_vlan: entered promiscuous mode [ 84.947857][ T7155] team0: Device veth0_vlan failed to register rx_handler [ 85.066492][ T7161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.350'. [ 85.073941][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.077102][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.139432][ T7165] gfs2: error -5 reading superblock [ 85.189413][ T7167] syzkaller1: entered promiscuous mode [ 85.191757][ T7167] syzkaller1: entered allmulticast mode [ 85.535064][ T5950] Bluetooth: hci2: ACL packet for unknown connection handle 3016 [ 85.586396][ T5934] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.716833][ T7195] openvswitch: netlink: Multiple metadata blocks provided [ 85.757400][ T5934] usb 7-1: Using ep0 maxpacket: 8 [ 85.768968][ T5934] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 85.772390][ T5934] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.775442][ T5934] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.786485][ T5934] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.797804][ T5934] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.803736][ T5934] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.807161][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.831916][ T7197] kvm: pic: non byte read [ 85.834896][ T7197] kvm: pic: single mode not supported [ 85.834975][ T7197] kvm: pic: level sensitive irq not supported [ 85.837919][ T7197] kvm: pic: non byte read [ 85.843043][ T7197] kvm: pic: single mode not supported [ 85.843054][ T7197] kvm: pic: level sensitive irq not supported [ 85.845616][ T7197] kvm: pic: non byte read [ 86.031772][ T5934] usb 7-1: usb_control_msg returned -32 [ 86.033963][ T5934] usbtmc 7-1:16.0: can't read capabilities [ 86.037302][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 86.037315][ T40] audit: type=1400 audit(1766428371.778:460): avc: denied { create } for pid=7219 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 86.080813][ T7225] netlink: 'syz.0.372': attribute type 2 has an invalid length. [ 86.089287][ T7225] !: entered promiscuous mode [ 86.090769][ T40] audit: type=1400 audit(1766428371.838:461): avc: denied { connect } for pid=7224 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.092870][ T7225] netlink: 'syz.0.372': attribute type 2 has an invalid length. [ 86.097074][ T40] audit: type=1400 audit(1766428371.838:462): avc: denied { create } for pid=7224 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.110743][ T7225] !: left promiscuous mode [ 86.130597][ T40] audit: type=1400 audit(1766428371.878:463): avc: denied { read } for pid=7227 comm="syz.1.371" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.140205][ T40] audit: type=1400 audit(1766428371.878:464): avc: denied { open } for pid=7227 comm="syz.1.371" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.149048][ T40] audit: type=1400 audit(1766428371.888:465): avc: denied { ioctl } for pid=7227 comm="syz.1.371" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.193910][ T7234] Bluetooth: Invalid esc byte 0x02 [ 86.234388][ T7241] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.281517][ T7243] openvswitch: netlink: IPv6 tunnel dst address is zero [ 86.284844][ T40] audit: type=1400 audit(1766428372.028:466): avc: denied { bind } for pid=7242 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.293500][ T40] audit: type=1400 audit(1766428372.038:467): avc: denied { name_bind } for pid=7242 comm="syz.3.379" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 86.302667][ T40] audit: type=1400 audit(1766428372.038:468): avc: denied { node_bind } for pid=7242 comm="syz.3.379" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 86.313042][ T40] audit: type=1400 audit(1766428372.048:469): avc: denied { read } for pid=7242 comm="syz.3.379" path="socket:[14335]" dev="sockfs" ino=14335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.321761][ T7245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.325694][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 86.350523][ T7250] 9pnet_virtio: no channels available for device syz [ 86.353828][ T7250] 9pnet_virtio: no channels available for device syz [ 86.360146][ T7250] 9pnet_virtio: no channels available for device syz [ 86.363398][ T7250] 9pnet_virtio: no channels available for device syz [ 86.366745][ T7250] 9pnet_virtio: no channels available for device syz [ 86.369964][ T7250] 9pnet_virtio: no channels available for device syz [ 86.373012][ T7250] 9pnet_virtio: no channels available for device syz [ 86.375872][ T7250] 9pnet_virtio: no channels available for device syz [ 86.379138][ T7250] 9pnet_virtio: no channels available for device syz [ 86.382255][ T7250] 9pnet_virtio: no channels available for device syz [ 86.385343][ T7250] 9pnet_virtio: no channels available for device syz [ 86.517275][ T10] cfg80211: failed to load regulatory.db [ 86.786215][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 86.844784][ T7272] netlink: 'syz.0.386': attribute type 7 has an invalid length. [ 86.845234][ T7272] netlink: 'syz.0.386': attribute type 7 has an invalid length. [ 87.199081][ T7281] syzkaller0: entered promiscuous mode [ 87.201466][ T7281] syzkaller0: entered allmulticast mode [ 87.266450][ T5967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.421574][ T5967] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.425068][ T5967] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.430945][ T5967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.435293][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.439821][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.445934][ T5967] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.450051][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.453310][ T5967] usb 5-1: Product: syz [ 87.455014][ T5967] usb 5-1: Manufacturer: syz [ 87.458816][ T5967] cdc_wdm 5-1:1.0: skipping garbage [ 87.460997][ T5967] cdc_wdm 5-1:1.0: skipping garbage [ 87.465679][ T5967] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 87.468404][ T5967] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.481955][ T7294] Sensor A: ================= START STATUS ================= [ 87.484498][ T7294] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 87.492617][ T7294] Sensor A: Show Information: All [ 87.495773][ T7294] Sensor A: Vertical Flip: false [ 87.498448][ T7294] Sensor A: Horizontal Flip: true [ 87.500344][ T7294] Sensor A: Brightness: 128 [ 87.502172][ T7294] Sensor A: Contrast: 128 [ 87.504160][ T7294] Sensor A: Hue: 0 [ 87.505394][ T7294] Sensor A: Saturation: 128 [ 87.507404][ T7294] Sensor A: ================== END STATUS ================== [ 87.689922][ T7308] can: request_module (can-proto-5) failed. [ 87.866375][ T6027] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.010199][ T7311] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 88.016440][ T6027] usb 6-1: Using ep0 maxpacket: 16 [ 88.021392][ T6028] usb 5-1: USB disconnect, device number 3 [ 88.023599][ T6027] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 88.027626][ T6027] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.032296][ T6027] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.036668][ T6027] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.040505][ T6027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.045232][ T6027] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 88.049139][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.053242][ T6027] usb 6-1: Product: syz [ 88.055143][ T6027] usb 6-1: Manufacturer: syz [ 88.057187][ T6027] usb 6-1: SerialNumber: syz [ 88.060986][ T6027] usb 6-1: config 0 descriptor?? [ 88.239676][ T7321] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 88.243113][ T7321] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 88.246744][ T7321] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 88.249911][ T7321] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 88.257476][ T7321] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 88.267505][ T7321] NILFS (loop0): device size too small [ 88.280149][ T6027] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 88.289107][ T5328] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.294285][ T5328] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.299752][ T5328] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.303973][ T5328] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.397840][ T5967] usb 7-1: USB disconnect, device number 5 [ 88.493584][ T7355] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 88.525640][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.527386][ T7306] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.530682][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.639385][ T6027] usb 6-1: USB disconnect, device number 7 [ 89.404756][ T7404] dlm: Unknown command passed to DLM device : 33 [ 89.404756][ T7404] [ 89.433901][ T7406] Cannot find add_set index 65532 as target [ 89.468707][ T7410] __nla_validate_parse: 1 callbacks suppressed [ 89.468719][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 89.617750][ T7420] wg2: entered promiscuous mode [ 89.619352][ T7420] wg2: entered allmulticast mode [ 89.653791][ T7425] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 89.745504][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 89.748700][ T7432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49112 sclass=netlink_route_socket pid=7432 comm=syz.1.426 [ 90.876731][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.994591][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.047643][ T7501] openvswitch: netlink: IP tunnel dst address not specified [ 91.076935][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.082764][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.091915][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.093131][ T7505] 9pnet_virtio: no channels available for device 127.0.0.1 [ 91.093291][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.098007][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.098659][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.166634][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 91.166645][ T40] audit: type=1400 audit(1766428376.918:506): avc: denied { execute } for pid=7510 comm="syz.3.455" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.187115][ T40] audit: type=1400 audit(1766428376.938:507): avc: denied { accept } for pid=7510 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.193916][ T40] audit: type=1400 audit(1766428376.938:508): avc: denied { remount } for pid=7510 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.216585][ T1145] bond0: (slave netdevsim0): Releasing backup interface [ 91.223592][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.274732][ T7502] chnl_net:caif_netlink_parms(): no params data found [ 91.316449][ T40] audit: type=1400 audit(1766428377.058:509): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=51226 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 91.324852][ T40] audit: type=1400 audit(1766428377.058:510): avc: denied { setopt } for pid=7524 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.331198][ T40] audit: type=1400 audit(1766428377.058:511): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=51226 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 91.348761][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 91.367843][ T7533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=7533 comm=syz.3.462 [ 91.391053][ T7535] ucma_write: process 278 (syz.1.461) changed security contexts after opening file descriptor, this is not allowed. [ 91.403161][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.405834][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.409431][ T7502] bridge_slave_0: entered allmulticast mode [ 91.412200][ T7502] bridge_slave_0: entered promiscuous mode [ 91.421486][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.423948][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.426363][ T7502] bridge_slave_1: entered allmulticast mode [ 91.430245][ T7502] bridge_slave_1: entered promiscuous mode [ 91.455525][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.479752][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.513217][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 91.559164][ T40] audit: type=1400 audit(1766428377.318:512): avc: denied { setopt } for pid=7545 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.648925][ T1145] bridge0 (unregistering): left allmulticast mode [ 91.923411][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.929821][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.934996][ T1145] bond0 (unregistering): Released all slaves [ 91.953170][ T7502] team0: Port device team_slave_0 added [ 91.967500][ T7502] team0: Port device team_slave_1 added [ 91.990767][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.993734][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.004450][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.010571][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.013503][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.024452][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.065840][ T7502] hsr_slave_0: entered promiscuous mode [ 92.066905][ T7502] hsr_slave_1: entered promiscuous mode [ 92.067323][ T7502] debugfs: 'hsr0' already exists in 'hsr' [ 92.067340][ T7502] Cannot create hsr debugfs directory [ 92.077880][ T1145] IPVS: stopping backup sync thread 6667 ... [ 92.193193][ T40] audit: type=1400 audit(1766428377.948:513): avc: denied { connect } for pid=7552 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.263903][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 92.266217][ T7502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.275077][ T7502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.280860][ T7502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.288073][ T7502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.319841][ T7566] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 92.323932][ T7566] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 92.323981][ T40] audit: type=1400 audit(1766428378.068:514): avc: denied { firmware_load } for pid=7565 comm="syz.1.471" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.337262][ T1145] hsr_slave_0: left promiscuous mode [ 92.340583][ T1145] hsr_slave_1: left promiscuous mode [ 92.343597][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.347068][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.351363][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.355530][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.373473][ T1145] veth1_macvtap: left promiscuous mode [ 92.376233][ T1145] veth1_vlan: left promiscuous mode [ 92.378729][ T1145] veth0_vlan: left promiscuous mode [ 92.506725][ T7573] Invalid logical block size (5) [ 92.509198][ T40] audit: type=1400 audit(1766428378.258:515): avc: denied { map } for pid=7572 comm="syz.3.474" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.716671][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 92.744379][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 93.068623][ T7502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.083713][ T7502] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.090672][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.093027][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.102688][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.105751][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.146419][ T5950] Bluetooth: hci2: command tx timeout [ 93.301429][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.467037][ T7502] veth0_vlan: entered promiscuous mode [ 93.474433][ T7502] veth1_vlan: entered promiscuous mode [ 93.495080][ T7502] veth0_macvtap: entered promiscuous mode [ 93.502229][ T7502] veth1_macvtap: entered promiscuous mode [ 93.514030][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.518358][ T7600] netlink: 'syz.3.480': attribute type 19 has an invalid length. [ 93.525465][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.535813][ T1190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.539600][ T1190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.543472][ T1190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.547619][ T1190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.618873][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.622274][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.628416][ T7604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7604 comm=syz.3.482 [ 93.633433][ T7604] syz.3.482 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.655262][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.659448][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.065985][ T7642] netlink: zone id is out of range [ 95.070891][ T7642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7642 comm=syz.1.492 [ 95.226645][ T5950] Bluetooth: hci2: command tx timeout [ 95.426023][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 95.430097][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.494'. [ 95.446367][ T6248] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.602668][ T7658] kvm: pic: level sensitive irq not supported [ 95.604405][ T7658] Cannot find add_set index 0 as target [ 95.609602][ T6248] usb 6-1: Using ep0 maxpacket: 32 [ 95.615296][ T6248] usb 6-1: config 0 has no interfaces? [ 95.619700][ T6248] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 95.623600][ T6248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.627282][ T6248] usb 6-1: Product: syz [ 95.629442][ T6248] usb 6-1: Manufacturer: syz [ 95.631432][ T6248] usb 6-1: SerialNumber: syz [ 95.635867][ T6248] usb 6-1: config 0 descriptor?? [ 95.841656][ T6027] usb 6-1: USB disconnect, device number 8 [ 96.068599][ T7675] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 96.428320][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 96.428336][ T40] audit: type=1400 audit(1766428382.168:529): avc: denied { create } for pid=7707 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.439196][ T40] audit: type=1400 audit(1766428382.188:530): avc: denied { sqpoll } for pid=7707 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.560863][ T40] audit: type=1400 audit(1766428382.308:531): avc: denied { read } for pid=7716 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.636960][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'. [ 96.648579][ T7725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7725 comm=syz.4.519 [ 96.654330][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 96.682365][ T7725] team0: Port device team_slave_0 removed [ 96.705057][ T40] audit: type=1400 audit(1766428382.448:532): avc: denied { ioctl } for pid=7724 comm="syz.4.519" path="socket:[18654]" dev="sockfs" ino=18654 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.706352][ T7726] syz.4.519 uses old SIOCAX25GETINFO [ 96.933087][ T7730] smc: net device wlan1 applied user defined pnetid SYZ1 [ 97.040623][ T7732] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 97.045556][ T7732] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 97.049171][ T7732] CPU: 3 UID: 0 PID: 7732 Comm: syz.4.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.053736][ T7732] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 97.055548][ T7732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.060156][ T7732] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 97.062564][ T7732] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 97.070418][ T7732] RSP: 0018:ffffc90005acf680 EFLAGS: 00010202 [ 97.073008][ T7732] RAX: dffffc0000000000 RBX: ffff8880554a41e0 RCX: ffffc90031457000 [ 97.076304][ T7732] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 97.079574][ T7732] RBP: ffff8880554a4278 R08: 0000000000000005 R09: 0000000000000000 [ 97.082806][ T7732] R10: 00000000ffffffea R11: ffff888031010b30 R12: 1ffff92000b59edf [ 97.086002][ T7732] R13: 0000000000000000 R14: ffff888054b6b440 R15: 0000000000000038 [ 97.089180][ T7732] FS: 00007f75d81ac6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 97.092826][ T7732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.095612][ T7732] CR2: 0000200000002000 CR3: 00000000521a4000 CR4: 0000000000352ef0 [ 97.098962][ T7732] Call Trace: [ 97.100374][ T7732] [ 97.101604][ T7732] __kernfs_new_node+0x7b4/0x990 [ 97.103633][ T7732] ? __pfx___kernfs_new_node+0x10/0x10 [ 97.105885][ T7732] ? find_held_lock+0x2b/0x80 [ 97.107894][ T7732] ? kernfs_root+0xee/0x2a0 [ 97.109829][ T7732] kernfs_new_node+0x13c/0x1e0 [ 97.111912][ T7732] __kernfs_create_file+0x53/0x350 [ 97.114101][ T7732] cgroup_addrm_files+0x546/0xc20 [ 97.116257][ T7732] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 97.118560][ T7732] ? find_held_lock+0x2b/0x80 [ 97.120617][ T7732] ? online_fair_sched_group+0x22c/0x780 [ 97.122960][ T7732] css_populate_dir+0x169/0x570 [ 97.125018][ T7732] cgroup_apply_control_enable+0x3f3/0xbb0 [ 97.127490][ T7732] cgroup_subtree_control_write+0xb47/0xef0 [ 97.129986][ T7732] ? kernfs_get_parent_dentry+0x1b0/0x2b0 [ 97.132406][ T7732] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 97.135042][ T7732] ? kernfs_root+0xf8/0x2a0 [ 97.136970][ T7732] cgroup_file_write+0x1ef/0x7a0 [ 97.139062][ T7732] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 97.141769][ T7732] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.144081][ T7732] kernfs_fop_write_iter+0x3af/0x570 [ 97.146311][ T7732] ? __pfx_cgroup_file_write+0x10/0x10 [ 97.148604][ T7732] vfs_write+0x7d3/0x11d0 [ 97.150442][ T7732] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 97.152908][ T7732] ? __pfx_vfs_write+0x10/0x10 [ 97.154903][ T7732] ksys_write+0x12a/0x250 [ 97.156746][ T7732] ? __pfx_ksys_write+0x10/0x10 [ 97.158809][ T7732] do_syscall_64+0xcd/0xf80 [ 97.160835][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.163243][ T7732] RIP: 0033:0x7f75d738f7c9 [ 97.165060][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.172806][ T7732] RSP: 002b:00007f75d81ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.176307][ T7732] RAX: ffffffffffffffda RBX: 00007f75d75e5fa0 RCX: 00007f75d738f7c9 [ 97.179605][ T7732] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005 [ 97.182915][ T7732] RBP: 00007f75d7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.186202][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.189521][ T7732] R13: 00007f75d75e6038 R14: 00007f75d75e5fa0 R15: 00007ffc21b2b178 [ 97.192881][ T7732] [ 97.194202][ T7732] Modules linked in: [ 97.196060][ T7732] ---[ end trace 0000000000000000 ]--- [ 97.198544][ T7732] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 97.201087][ T7732] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 97.216398][ T7732] RSP: 0018:ffffc90005acf680 EFLAGS: 00010202 [ 97.218969][ T7732] RAX: dffffc0000000000 RBX: ffff8880554a41e0 RCX: ffffc90031457000 [ 97.222290][ T7732] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 97.225483][ T7732] RBP: ffff8880554a4278 R08: 0000000000000005 R09: 0000000000000000 [ 97.228732][ T7732] R10: 00000000ffffffea R11: ffff888031010b30 R12: 1ffff92000b59edf [ 97.232069][ T7732] R13: 0000000000000000 R14: ffff888054b6b440 R15: 0000000000000038 [ 97.235394][ T7732] FS: 00007f75d81ac6c0(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 97.239269][ T7732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.242063][ T7732] CR2: 00007ffc424c6f8c CR3: 00000000521a4000 CR4: 0000000000352ef0 [ 97.245475][ T7732] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 97.248917][ T7732] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 97.252271][ T7732] Kernel panic - not syncing: Fatal exception [ 97.255588][ T7732] Kernel Offset: disabled [ 97.257466][ T7732] Rebooting in 86400 seconds..