last executing test programs: 2m45.60617104s ago: executing program 0 (id=604): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x0, 0x40, "1a816bf86bcc6710eaa5c9e2fcff47fc0a42667fa6f4a5cbe9ca92c6bee05fa0", 0x31303453}) syz_80211_inject_frame(&(0x7f0000000f40)=@device_b, &(0x7f0000000f80)=@ctrl_frame=@ack={{}, {0x6}}, 0xa) 2m45.049421555s ago: executing program 0 (id=611): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="29a0e896e3721e5f5c1ea4312b8306880a235c643842caf8d8f2e60844f73d79175a77c995071cf019dd4036f699926387633038db4046edd1ff05ce0f8514b8e7b8ae82dfe187") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 2m44.225289187s ago: executing program 0 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x4, 0x9, 0x0, 0x400, 0x0, 0x4, 0x3, 0x2, 0xf0, 0x1, 0x4, 0x0, 0xfffffffe, 0x792, 0x7, 0x9, 0x8, 0xf, '\x00', 0x7, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002480)={0x2, 0x0, [{0x40000000, 0x7, 0x4, 0x7f1, 0x9, 0x9, 0x800}, {0x6, 0x2, 0xe, 0xffff, 0x1, 0x4, 0x4}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r6 = fanotify_init(0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r6, 0x161, 0x40000867, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002080)=ANY=[@ANYBLOB="0802000000000000", @ANYRES64=r9, @ANYBLOB="060000000000000000000000000000000800000000000000060000000000000004000000cb00000006000000000000000200000000000000080000000000000000000000000000000200000000000000000000000000000002000000070000000f0000000080000007000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000004000000000000000500000000000000020000000000000011000000050000006e65745f7072696f2e7072696f6964780000000000000000040000000000000000000000000000000600000000000000000000000000000000000000070000000300000000000000000000000000000080000000000000000500000000000000dead0000000000000300000000000000ba470000020000000004000057af916504000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="09000000030000000000000003000000000000000009000000810000006664696e666f2f3300000000000000000400000000000000000000000000000007000000000000009e00000000000000010000000700000000000000000000001f070000001a0000ff00000000000000060000000000000000000000000000008100000000000000fcffffff000000007e00000000a0000009000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0300000003000000000000000500000000000000000000000000000001000000080000002e00000000000000"], 0x208) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) r13 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r13, 0x119, 0x1, &(0x7f00000003c0)=0x10, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/141) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 2m44.010817641s ago: executing program 0 (id=632): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @private=0xa010100, @multicast, @private=0x1}}}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) readlinkat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/48, 0x30) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80, &(0x7f0000000100)={[], [{@dont_hash}, {@appraise}, {@context={'context', 0x3d, 'system_u'}}]}) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "8f3498158b3ea12c7a6f43846f76950cf8967891"}, 0x15, 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={r5, 0x2, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e23, @loopback}}}, 0x84) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) 2m42.970112923s ago: executing program 0 (id=657): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000700"/144]}, 0x108) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604000200000000000000000000fe940db5eb3cac1414bb834df10d522ab505ff9a4a1875383d8d0e8fc9e6dd386877b50f7cade682aecd4f8033c5667c602c7d0ac9390e7a2b7815b6414d82a215f1ea789fc8aae50868e1374660c26a74c1f54feae4c3e71b463f671a198ca7627dc795230257da676bdd09ee31e47c534e0bce982a828f1efdbd94fb458a25095b6335bab0f88e927ebd97a051057b435e093edfdaadc3f7b2e279d7dc30d9e6315b52df75e51bf73f5128ce578d666bcefb9a743bac9b27d3c68522df06bb5fa65a6ac63e6a74bd80317b00"], 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00\x00\x00\b\x00', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x5, [@multicast1, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f, 0x13}}) (async) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m42.570730235s ago: executing program 0 (id=659): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="360fc357210f205a430f32660feb050efa632ac443910d8282000000000f01c8b805000000b9c734a7da0f01c10f9fe3f33e3636d3ee670fc71b", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close$binfmt(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000140)="262e0f01c20f01c8baf80c66b82310e98566efbafc0cb008ee260f20e765660f388233ff8b776f6766c7442400050000006766c7442402d80000006766c744240600000000670f011c2466b9140900000f32baf80c66b8526c778666efbafc0ced0fc75802", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m42.534955626s ago: executing program 32 (id=659): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="360fc357210f205a430f32660feb050efa632ac443910d8282000000000f01c8b805000000b9c734a7da0f01c10f9fe3f33e3636d3ee670fc71b", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close$binfmt(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000140)="262e0f01c20f01c8baf80c66b82310e98566efbafc0cb008ee260f20e765660f388233ff8b776f6766c7442400050000006766c7442402d80000006766c744240600000000670f011c2466b9140900000f32baf80c66b8526c778666efbafc0ced0fc75802", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m29.196403176s ago: executing program 1 (id=866): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x5a1c00, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x86, 0x1) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 2m28.850351105s ago: executing program 1 (id=868): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000100)={r3}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000002140)={0x1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x110) 2m28.661308593s ago: executing program 1 (id=872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x5a1080, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) (async) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000005c0)=@hopopts={0x2b, 0x27, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0xe6, 0xdf, "2e124e82a41811817328f0d7b50c498554ff330bd999b945282da08fb7ba680f357bf6a350f8af5587ccd9256627d62e956d1e0465978eca51462a2fd46a772a7f8c47efec1ac32b75656bfe9edc6af4190d71a431acd5a4894bdff9973bda922758d39b42b86e670e86d23bb0294555a8f16ec6ca9f75700a196c9d21a52c31a2ab3df6a564ff957001efa0553d5cb92be087967c7208d0ab0390401e1737ca239fd703be97795e3cbc73ca4acf0f8e80f0d6ac4303761fe8543b954f3902b1ef3b7c154563be7ab91748f4a11fdb48eb277539fa3df7f66228d4de9eee5a"}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x0, 0x6, 0xbc, 0x4, [0x5, 0x1, 0x5bc539f6]}}]}, 0x148) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getpeername$packet(r4, 0x0, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r1}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0xa) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x8000) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) (async) syz_open_dev$evdev(0x0, 0x8, 0x21a080) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @desc3}}) (async) ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0) (async) pipe2$9p(0x0, 0x80000) (async) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x13, 0xc, {0x15, 0x3, 0x1}}, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40000040}, 0x4811) (async) getsockname$packet(r5, 0x0, &(0x7f0000000580)) 2m28.600354876s ago: executing program 1 (id=875): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000036c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xf}}, 0x14}}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup/../file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000640)=""/243, &(0x7f0000000740)=0xf3) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003880)={0x48, r2, 0x635, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x7}], "d0b4c0f075e0aa64"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x1}, {0x9, 0x4}, {0xfd, 0x1}, {0xff, 0x1}, {0x0, 0x6}], "cfa249f593ae47f8"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) chown(0x0, 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xa0, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0480d2268c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d1c71d5bf21d6c4ab224352b73"}, @NL80211_KEY_SEQ={0x11, 0x4, "6429d77820c1ccb8e93cda84f0"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x8400) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 2m28.467692927s ago: executing program 1 (id=882): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="5e60e574da93883e8c628a600b17cbe584d2e73c681419c4f3fbcf0e16db6e757504", 0x22}, {&(0x7f0000000180)="025878bade25", 0x6}], 0x2}}], 0x1, 0x44080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="a230311b", @ANYRES16=r2, @ANYBLOB="000225bd7000fddbdf250100000005000400010000000900010073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0xc045}, 0x4800) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) (async) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) getsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) getsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) (async) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.128834869s ago: executing program 1 (id=887): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) r0 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x8, 0x0, 0x3}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 2m28.082218431s ago: executing program 33 (id=887): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) r0 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x8, 0x0, 0x3}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 1m39.499502343s ago: executing program 5 (id=1671): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c8c4}, 0x48c0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r4, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r4, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x2, {0x1, [{0x0, 0x48}]}}, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1m39.439700443s ago: executing program 5 (id=1673): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x51) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r5, 0x0) ftruncate(r5, 0x80796c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYRES32=r5], 0x78}, 0x1, 0x0, 0x0, 0x24008860}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m39.438672979s ago: executing program 5 (id=1675): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sigaltstack(&(0x7f0000000040)={&(0x7f0000000000)=""/15, 0x0, 0xf}, &(0x7f0000000100)={&(0x7f00000000c0)=""/2, 0x0, 0x2}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x400c000) 1m39.296297201s ago: executing program 5 (id=1677): r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x120010, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',debug=0x0000000000000005,noxattr,uname=NFQUEUE\x00,version=9p2000,msize=0x000000000000000c,posixacl,dont_measure,uid<', @ANYRESDEC=0xee00, @ANYBLOB="c268aa59f3e7a041fb499795ed0778a8"]) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x5, 0x7f}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003d40)={0x2020}, 0x2020) socket$igmp6(0xa, 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) (async) pipe2$9p(&(0x7f0000000140), 0x800) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x120010, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',debug=0x0000000000000005,noxattr,uname=NFQUEUE\x00,version=9p2000,msize=0x000000000000000c,posixacl,dont_measure,uid<', @ANYRESDEC=0xee00, @ANYBLOB="c268aa59f3e7a041fb499795ed0778a8"]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x5, 0x7f}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') (async) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) (async) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000003d40)={0x2020}, 0x2020) (async) 1m39.149485088s ago: executing program 5 (id=1678): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80024fc360e2aae7ee5d00a6f1f88f342f3700"/34], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) 1m38.760228493s ago: executing program 5 (id=1680): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) 1m38.621407545s ago: executing program 34 (id=1680): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) 1m27.801630993s ago: executing program 2 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000ac0)=""/116, 0xffffffffffffff8b, 0x0, 0x2, 0x2}}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d70791cd00d15afc25ddb9fe49d0dbd2f31ab618aa445f1817f6b8a6aa20757138f32b4b822444d908e16a07d38e5106d782d16820261e238494331a0ccfda58bb9ea0d1d51c3a3797894f87e197cc03f1a0d32dee3d99d6817e3352506df1141e8b02def773acd4ea1f1c716b6c320"], 0x7c}}, 0x40) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}, 0x24008004) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x68, r4, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x111, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x20040010) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0xfffffffffffffff4}, [@NFT_MSG_NEWRULE={0x21, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x40005}, 0x20008852) 1m27.73928449s ago: executing program 2 (id=1853): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, {0x0, @remote}, 0x48, {0x2, 0x0, @loopback}, 'team_slave_1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x100000000, 0x3}) 1m27.672418671s ago: executing program 2 (id=1856): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x12) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m27.618513621s ago: executing program 2 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x7, 0x582b04d7, 0x0, 0x1, 0xfffffff9}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r5, 0x5392, &(0x7f0000000000)={@lba=0xb, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0x8000b3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r10 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x10, 0xffff}, {0x6, 0xf}, {0xfff2, 0x4}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 1m26.676808219s ago: executing program 2 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bdf001"], 0x38}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa6d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x5, 0x701400) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000100000000000000700b5000000087c9a0095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r8, 0x25, 0x2, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1c, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x159d8d0b, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @generic={0x1, 0x3, 0xa, 0xe, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000001700)='syzkaller\x00', 0x1, 0x58, &(0x7f0000001740)=""/88, 0x41000, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0xc, 0x9, 0xc}, 0x10, 0x0, r2, 0x1, &(0x7f0000001840)=[r1], &(0x7f0000001880)=[{0x2, 0x5, 0x9, 0x4}], 0x10, 0x7}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r10, 0x1) r11 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) r12 = syz_open_dev$tty1(0xc, 0x4, 0x4) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000080)={0x8}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x14, 0x11, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x25ad190008a8a26, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xfc, &(0x7f0000001600)=""/252, 0x41000, 0x12, '\x00', r8, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x2, &(0x7f0000001ac0)=[r10, r11, r13, r14, r15, r16], &(0x7f0000001b00)=[{0x4, 0x2, 0xb, 0x8}, {0x5, 0x5, 0x9}], 0x10, 0x852}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840000000001400058008"], 0x5c}}, 0x0) 1m26.673205262s ago: executing program 2 (id=1875): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000000000088a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a55958728f159f87c20602f12eab745f90084a1834980300", 0x38414761}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @raw_data=[0x22, 0xf, 0x0, 0x3, 0x9, 0x5, 0x4, 0x3, 0x5b, 0x7, 0x1, 0x4, 0x7fffffff, 0x8bf, 0x9, 0x5]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) 1m12.166713383s ago: executing program 35 (id=1875): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000000000088a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a55958728f159f87c20602f12eab745f90084a1834980300", 0x38414761}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @raw_data=[0x22, 0xf, 0x0, 0x3, 0x9, 0x5, 0x4, 0x3, 0x5b, 0x7, 0x1, 0x4, 0x7fffffff, 0x8bf, 0x9, 0x5]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) 45.340007774s ago: executing program 3 (id=2568): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@ng={0x4, 0x5, "81bef469b4bc0f"}, 0x9, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getgroups(0x3, &(0x7f0000000200)=[0xee01, 0x0, 0xffffffffffffffff]) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) setreuid(0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000300)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r4}}]}}) 45.125907922s ago: executing program 3 (id=2574): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2000000000002, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0xffffffff, 0x3010, 0x0, 0x6, 0x6, 0x0, 0x17}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@nat={'nat\x00', 0x62, 0x5, 0x3f8, 0x0, 0x268, 0xffffffff, 0xa8, 0x268, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000300)="0f011a66baf80cb856840e83ef66bafc0c66ed66b813000f00d0400fc71a0f001500580000f466ba610066b88cd366efc7442400bf000000c744240299000000ff1c2464660f07b9800000c00f3235001000000f30"}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(anubis)\x00'}, 0x58) (async) r8 = socket(0x1d, 0x2, 0x6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) (async) r9 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r9, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/28, 0x1c) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x800, 0xfffffffc) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r13 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r13, 0x8, 0x4) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x7, 0xc}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0xfff1, 0x4}, {0xfff3, 0x2}, {0x7, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) flock(r5, 0x2) 44.969386314s ago: executing program 3 (id=2577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a80)={0x1, [{0x1, 0x158, 0x24, &(0x7f0000000340)="24d35b452e3cc04c1a79193e03ea89e7dfda696502dd6bb1ae8c0acd48883834eeefe3e6545848058eaf3e"}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x401, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x40, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xfffffffa, 0x0}, {0x1, 0x0, 0x1933, 0x0}, {0x0, 0x0, 0x80, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0xfffffffc, 0x0}, {0x2, 0x0, 0x40, 0x0}]}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e0000050000000020", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="010000000500000001"], 0x50) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61", 0x5c}, {&(0x7f00000006c0)="138b9f8300", 0x5}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.789709611s ago: executing program 3 (id=2581): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000900)) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) write$sndseq(r3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59540000000fcffffff0a3f0000", @ANYRES32=r5, @ANYBLOB="14000200fe800000db894e9400000000000000aa140006000400000001f0ffff000000000600000014000100fe80000000000000000000000000003f"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="020027bd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x48041) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000300)={0x80006015}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000080)={0x28000006}) r11 = syz_open_dev$vim2m(&(0x7f0000000380), 0x5000005, 0x2) r12 = dup2(r0, r11) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x5, 0x1]}, &(0x7f00000001c0)=0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x4, 0x1, 0x0, "8e8ade11b61720ff63524975cbf8286a90b33ed315eedf842910c125e4ec7bfe", 0x4f565559}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000100)=0x1) 44.244459295s ago: executing program 6 (id=2594): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x7, @void}, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x14, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 44.187150867s ago: executing program 6 (id=2596): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x1ffd, 0x7d, 0x5, 0x2, [0x2], [0xfffffffd, 0x2, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) (async) r4 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x40, 0x80, 0x81, 0x6}, {0x9, 0x5, 0x5, 0x2, 0x0, 0x82, 0xff, 0x2}, {0x9, 0x5, 0xa, 0x3, 0x400, 0x1, 0xff, 0x4}}}}}}]}}, 0x0) syz_usb_disconnect(r4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049c2) (async) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f0000000380)={[{@favordynmods}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x48040) (async) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40884) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x2, 0x0) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001c40)) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d2000/0x3000)=nil, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) 43.278948792s ago: executing program 6 (id=2612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x23, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd2c9645e408be402617d9bf0b7651d51116ef86fbe5", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 43.179727668s ago: executing program 6 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x8, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x30}}, 0x4040061) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x28) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 43.179422325s ago: executing program 6 (id=2614): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0xffffff44, 0x80800}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xa, 0x80) ioctl$RTC_WIE_OFF(r4, 0x7010) write$nci(r1, &(0x7f0000000240)=ANY=[], 0x2b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) 43.067800169s ago: executing program 6 (id=2615): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="93f97ab7d2c40601127c4d2d0d5874600027b7889efff3b9c3062b5808832b0a6686f06346a8efdc1ed85f910c1850b18174e143e739e96347761993053f5a12bc58b70b982be924ee250cf555275fc75ac6cbca25647b99e76c8a", 0x5b}, {&(0x7f0000000340)="59f689e7f0a7e07b54ccb02a2ffdf63df7551fe128a6613087316da489fe23e22e2b55d3dd9ee68d451b7595a35660392929032cc7d509b18866c61bec1e153d22317f36f2d5fe24f98cae6eed964d2dd0adfac79b337554617348ca5527d0d165296c6445a933ec466833879dac", 0x6e}, {&(0x7f00000002c0)="d31a7954ed8cada38437d0ddba8dda468068ee3a1db25e2bc32735f2f51412379f5786c0a3", 0x25}, {&(0x7f0000000400)="61aae9a918eb65d6733309cbcefe8c784f41e903edaae37aff6fce08f16e9747f79ec9a26ba09fdd0fcda4195810207f56188fe8eebae72eb6af1fb0765090594549283907ab5676eac4e4a273c659f8104fdd469f415bdcf96f159090a0bd573bf153f5b9bf5f9f3c31129deaf6d0d650abf443d0b8c230bbd37a72628909be5e792022068ce936f84f94ffeeb0c7d8ab880f5bffe436262a0510c30a0bc2db", 0xa0}], 0x4, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7c}}], 0x90}}], 0x2, 0x4001) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000040)={0x30, &(0x7f0000000100)=[{0x33, '\x00', @st={0x4, [{0x7, @svalue=0xde6}, {0x1, @uvalue=0x626}, {0x2, @svalue=0x9}, {0x0, @svalue=0x9}]}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbc6aaaaaaaabb81000000080045000028000000000088907800000000ffffffff0d00907807ff2000"/58], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000740)={'veth0_to_team\x00', 0x4000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="0000000000000000000000008100", 0x38}], 0x3) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab40000", 0x7}, {&(0x7f0000000340)="af7940", 0x3}], 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5, "f0c65d69d4"}, &(0x7f00000000c0)=0xd) setsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000180)={r13, 0x59}, 0x8) 28.039448634s ago: executing program 36 (id=2615): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="93f97ab7d2c40601127c4d2d0d5874600027b7889efff3b9c3062b5808832b0a6686f06346a8efdc1ed85f910c1850b18174e143e739e96347761993053f5a12bc58b70b982be924ee250cf555275fc75ac6cbca25647b99e76c8a", 0x5b}, {&(0x7f0000000340)="59f689e7f0a7e07b54ccb02a2ffdf63df7551fe128a6613087316da489fe23e22e2b55d3dd9ee68d451b7595a35660392929032cc7d509b18866c61bec1e153d22317f36f2d5fe24f98cae6eed964d2dd0adfac79b337554617348ca5527d0d165296c6445a933ec466833879dac", 0x6e}, {&(0x7f00000002c0)="d31a7954ed8cada38437d0ddba8dda468068ee3a1db25e2bc32735f2f51412379f5786c0a3", 0x25}, {&(0x7f0000000400)="61aae9a918eb65d6733309cbcefe8c784f41e903edaae37aff6fce08f16e9747f79ec9a26ba09fdd0fcda4195810207f56188fe8eebae72eb6af1fb0765090594549283907ab5676eac4e4a273c659f8104fdd469f415bdcf96f159090a0bd573bf153f5b9bf5f9f3c31129deaf6d0d650abf443d0b8c230bbd37a72628909be5e792022068ce936f84f94ffeeb0c7d8ab880f5bffe436262a0510c30a0bc2db", 0xa0}], 0x4, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7c}}], 0x90}}], 0x2, 0x4001) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000040)={0x30, &(0x7f0000000100)=[{0x33, '\x00', @st={0x4, [{0x7, @svalue=0xde6}, {0x1, @uvalue=0x626}, {0x2, @svalue=0x9}, {0x0, @svalue=0x9}]}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbc6aaaaaaaabb81000000080045000028000000000088907800000000ffffffff0d00907807ff2000"/58], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000740)={'veth0_to_team\x00', 0x4000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="0000000000000000000000008100", 0x38}], 0x3) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab40000", 0x7}, {&(0x7f0000000340)="af7940", 0x3}], 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5, "f0c65d69d4"}, &(0x7f00000000c0)=0xd) setsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000180)={r13, 0x59}, 0x8) 12.739745547s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 10.917050406s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 8.978884788s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 6.977440416s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 4.878561496s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 2.787355383s ago: executing program 7 (id=2856): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r1 = dup2(r0, r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x1, 0x0) fchdir(r7) r8 = dup(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r9, 0x80044dfb, 0xfffffffffffffffd) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000020200000000008000000000", @ANYRES64=0x77359400, @ANYRESHEX, @ANYRES16, @ANYRES32=r9, @ANYBLOB="0e00"], 0x38}}, 0x40000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980902, 0x6e}) 2.719740743s ago: executing program 4 (id=2858): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/336], 0xf5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,cache=none,']) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000005c0)=ANY=[@ANYBLOB="00fbf504ffa1ab8de8425df2ac3c625555c8c06356eea7d2db2ee49339a553b1b96fe273179316f7cfb64c7bc362d768bbcfa5d1e38972a40caee8180179baf1c40ecf1e9dcc58c9a2f91ea8dcdc184b4691adb77dbdf672824d0cc16349d3c6cf5ab96335f40c17b96df696738166e23d4912ae6236eaea2efe582368b1faf7d422921714de8970c51b24fdedd7faa51ed2c9f4c9e49d06d374baed1710d5440c24c857489c9fd037f1516b5d45791037dd7aeb12e57fc77e75991e7bc821c92db10b59bf22bfcb6500032e419d42faf6516ff2a3efdb23b16c2a4ee796ca3cbb86c653406d21ec42b5ac16904fc18cbcb3f2295700f19c65aa22f78fa7ed99e1371484d0f1f1a7fb1501463313720171ecabd3ecbf644ce9dcd46b789e34c6742545107bbaed101fb79bd4c1541e23a961df0be500"/336], 0xf5, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,cache=none,']) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) 2.71798237s ago: executing program 7 (id=2859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x40000) ioctl$BLKDISCARDZEROES(r4, 0x127c, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r5], 0x2c}}, 0x20008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bdf001"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840000000001400058008"], 0x5c}}, 0x0) 2.639808109s ago: executing program 7 (id=2860): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$netlink(r0, 0x0, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401"], 0x18}}, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) (async) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r6}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r6}) 2.639580142s ago: executing program 8 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48835}, 0xc020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) 519.847523ms ago: executing program 4 (id=2861): open(0x0, 0x0, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x0, 0x5b3}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80400c0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x4040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000011008b88040f80ee59ac990413080048250000005e2900421803001825800000000f0000ea", 0x29}], 0x1}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 519.612945ms ago: executing program 7 (id=2862): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'caif0\x00', {}, 0x7f8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000500)={0x290, 0x320, 0xc80, 0x1e0, 0x0, 0x503, 0x4, 0x1, {0x1ff, 0x23}, {0x7f, 0xb}, {0xd, 0x8000}, {0x8001, 0x6, 0x1}, 0x3, 0x2, 0x78c8, 0x9, 0x0, 0x6, 0x400, 0x10000, 0xf249, 0x800, 0x4, 0xd3b, 0x21, 0x200, 0x2, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 519.281135ms ago: executing program 3 (id=2602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 439.649044ms ago: executing program 7 (id=2863): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@empty, 0x4e23, 0x6, 0x4e23, 0x9, 0xa, 0x0, 0x30, 0x6, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81b5}, {0x0, 0x400000000000, 0x0, 0x7ff}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x20000}}, 0xe8) sendmmsg$inet6(r1, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value64=0x100}}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x7fff, 0x0, 0x2, 0x0, 0xed]}, 0xe) 439.247247ms ago: executing program 4 (id=2864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r2, &(0x7f00000004c0)="4bdbaec0", 0x4) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x107100) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 438.757929ms ago: executing program 7 (id=2865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x0, 0xa0, 0x18, @generic=0x7, 0x6}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$BSG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4854}, 0x0) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) r8 = socket$netlink(0x10, 0x3, 0x15) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtaction={0xf4, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe0, 0x1, [@m_tunnel_key={0xdc, 0x1, 0x0, 0x0, {{0xf}, {0xac, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffc00, 0x8, 0x0, 0x101, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0xc, 0x10000000, 0x2, 0x7f}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0x1, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xf4}}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x78, 0x3, 0x1, 0x200, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf5, 0x3}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xd}]}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xbdc0}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8811}, 0x40000) r11 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r10}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r10, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r11, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) 239.227905ms ago: executing program 4 (id=2866): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 236.960077ms ago: executing program 3 (id=2602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 168.051µs ago: executing program 4 (id=2867): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46800c040001200000010000000200060001000000dd000000380000004503000008000000010020000100040009000000000000000300000001000000526f000007000000a90000000f00000001000000000400006cbfd26d3eccb8e7772cfcc0076dc2bfbe7817f1b079ec6a45b81debc4316c"], 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4000040) (async) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x4, 0x2, 0x4, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r3, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x100, 0x86}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$sock_SIOCINQ(r4, 0x40140921, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000370400000084fb82e942e58ef700", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100626f6e64000000002c00028005001d00000000000500010004000000050015"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): s 00:05: Alarms can be up to one day in the future [ 171.456698][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.460370][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.463915][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.468575][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.472399][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.475884][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.479477][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.482981][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.486567][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.490656][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.494111][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.497647][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.501169][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.504576][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.509053][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.512871][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.516394][T12694] rtc_cmos 00:05: Alarms can be up to one day in the future [ 171.606803][T12699] overlayfs: conflicting lowerdir path [ 172.006195][T12703] libceph: secret too big 289 [ 172.102348][T12713] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 172.107496][ T40] audit: type=1400 audit(1774071462.711:44400): avc: denied { firmware_load } for pid=12712 comm="syz.4.1933" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.108996][T12713] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 172.546203][ T40] audit: type=1400 audit(1774071463.151:44401): avc: denied { connect } for pid=12715 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.608194][T12717] lo speed is unknown, defaulting to 1000 [ 173.288321][T12756] openvswitch: netlink: IP tunnel dst address not specified [ 173.323425][T12768] netlink: 'syz.6.1948': attribute type 11 has an invalid length. [ 173.334987][T12768] netlink: 'syz.6.1948': attribute type 5 has an invalid length. [ 173.340476][T12768] program syz.6.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.538377][T12786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12786 comm=syz.6.1952 [ 173.646052][ T40] audit: type=1400 audit(1774071464.251:44402): avc: denied { read } for pid=12789 comm="syz.6.1954" path="socket:[54500]" dev="sockfs" ino=54500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.788135][T12797] kvm: kvm [12796]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 174.265220][T12809] overlayfs: failed to clone upperpath [ 174.924013][T12845] overlayfs: failed to clone upperpath [ 174.965061][ T40] audit: type=1400 audit(1774071465.571:44403): avc: denied { getopt } for pid=12850 comm="syz.4.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.018072][T12842] could not allocate digest TFM handle hmac(sha1-ce) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xab000) [ 175.159720][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 175.163230][ T1116] ata1: failed to read log page 10h (errno=-5) [ 175.165987][ T1116] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 175.169560][ T1116] ata1.00: irq_stat 0x41000000 [ 175.171641][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 175.174304][ T1116] ata1.00: cmd 61/c0:00:16:87:08/02:00:00:00:00/40 tag 0 ncq dma 360448 out [ 175.174304][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 175.180390][ T1116] ata1.00: status: { DRDY } [ 175.182147][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 175.184175][ T1116] ata1.00: cmd 61/58:f0:be:81:08/05:00:00:00:00/40 tag 30 ncq dma 700416 out [ 175.184175][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 175.189960][ T1116] ata1.00: status: { DRDY } [ 175.193398][ T1116] ata1.00: configured for UDMA/100 [ 175.197399][ T1116] ata1: EH complete [ 175.213975][T12868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1979'. [ 175.218137][T12869] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1979'. [ 175.346681][T12873] bond4: ARP target 9.0.0.0 is already present [ 175.349505][T12873] bond4: option arp_ip_target: invalid value (9) [ 175.353224][T12873] bond4 (unregistering): Released all slaves [ 175.381438][T12876] netlink: 'syz.6.1982': attribute type 1 has an invalid length. [ 175.401142][T12876] bond2: entered promiscuous mode [ 175.403869][T12876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.525710][ T40] audit: type=1400 audit(1774071466.131:44404): avc: denied { mount } for pid=12889 comm="syz.6.1985" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 175.536688][ T40] audit: type=1400 audit(1774071466.131:44405): avc: denied { write } for pid=12889 comm="syz.6.1985" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.663243][T12907] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 175.869611][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1995'. [ 175.908239][ T40] audit: type=1400 audit(1774071466.511:44406): avc: denied { create } for pid=12921 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 176.129460][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.134788][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.248231][T12932] wg0: entered allmulticast mode [ 176.341272][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.344628][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.346029][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.355930][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.373034][ T40] audit: type=1400 audit(1774071466.981:44407): avc: denied { unmount } for pid=11800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.378892][ T5985] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 176.532716][ T5985] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.536893][ T5985] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.540671][ T5985] usb 8-1: Product: syz [ 176.542546][ T5985] usb 8-1: Manufacturer: syz [ 176.544603][ T5985] usb 8-1: SerialNumber: syz [ 176.561411][ T5985] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.593354][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.801072][ T5985] usb 8-1: USB disconnect, device number 12 [ 176.963824][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'. [ 177.061625][T12978] ipvlan2: entered allmulticast mode [ 177.063908][T12978] batadv_slave_1: entered allmulticast mode [ 177.068460][T12978] batman_adv: batadv0: Adding interface: ipvlan2 [ 177.072351][T12978] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.082977][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.087356][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.091918][T12978] batman_adv: batadv0: Interface activated: ipvlan2 [ 177.102283][T12979] ipvlan3: entered allmulticast mode [ 177.106255][T12979] batman_adv: batadv0: Adding interface: ipvlan3 [ 177.108696][T12979] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.117243][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.121825][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.126084][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 177.130356][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.133598][T12979] batman_adv: batadv0: Interface activated: ipvlan3 [ 177.266040][ T40] audit: type=1400 audit(1774071467.871:44408): avc: denied { create } for pid=12987 comm="syz.6.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.275332][ T40] audit: type=1400 audit(1774071467.881:44409): avc: denied { accept } for pid=12987 comm="syz.6.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.284063][ T40] audit: type=1400 audit(1774071467.881:44410): avc: denied { getopt } for pid=12987 comm="syz.6.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.305304][T12991] cgroup: noprefix used incorrectly [ 177.421537][T12998] EXT4-fs: Conflicting test_dummy_encryption options [ 177.426542][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 177.470181][T12998] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.603127][ T40] audit: type=1400 audit(1774071468.211:44411): avc: denied { ioctl } for pid=13017 comm="syz.3.2026" path="socket:[53778]" dev="sockfs" ino=53778 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.619492][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 177.623123][ T9] ath9k_htc: Failed to initialize the device [ 177.627596][ T5936] udevd[5936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.628004][ T5985] usb 8-1: ath9k_htc: USB layer deinitialized [ 177.747266][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2031'. [ 177.751963][T13040] block nbd1: Unsupported socket: should be TCP or UNIX. [ 177.789559][T13047] netlink: 'syz.6.2033': attribute type 1 has an invalid length. [ 177.792543][T13045] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 177.803684][T13047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.868139][ T6864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.872876][ T6864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.943542][ T40] audit: type=1400 audit(1774071468.551:44412): avc: denied { node_bind } for pid=13061 comm="syz.3.2037" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 177.978519][T13068] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 177.990998][T13068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.997089][T13068] vcan1: entered allmulticast mode [ 178.007038][T13068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.015299][T13068] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 178.024627][T13068] bond4: (slave vcan1): Error -95 calling set_mac_address [ 178.039147][T13077] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.2042'. [ 178.043444][T13077] netlink: Unknown conntrack attr (type=2304, max=9) [ 178.074648][T13081] sctp: [Deprecated]: syz.3.2043 (pid 13081) Use of int in maxseg socket option. [ 178.074648][T13081] Use struct sctp_assoc_value instead [ 178.222729][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2047'. [ 178.470667][T13111] binder: 13109:13111 ioctl c018620c 200000000240 returned -1 [ 178.470671][T13110] binder: 13109:13110 ioctl c018620c 200000000240 returned -1 [ 178.654964][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 178.746359][T13121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2054'. [ 179.275589][T13138] : entered promiscuous mode [ 179.514263][T13152] netlink: 'syz.4.2065': attribute type 12 has an invalid length. [ 179.577937][T13154] openvswitch: netlink: Missing key (keys=40, expected=80) [ 179.721731][T13165] lo speed is unknown, defaulting to 1000 [ 180.069395][T13188] ptrace attach of "/syz-executor exec"[5930] was attempted by ""[13188] [ 180.171352][T13191] sctp: [Deprecated]: syz.4.2077 (pid 13191) Use of int in maxseg socket option. [ 180.171352][T13191] Use struct sctp_assoc_value instead [ 180.283111][T13198] xt_hashlimit: size too large, truncated to 1048576 [ 180.350916][T13203] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 180.361759][T13201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.382170][T13201] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 180.451125][T13205] __nla_validate_parse: 7 callbacks suppressed [ 180.451137][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'. [ 180.456617][T13205] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 180.518062][T13215] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2085'. [ 180.521504][T13215] bridge0: port 3(team0) entered blocking state [ 180.523153][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 180.523627][T13215] bridge0: port 3(team0) entered forwarding state [ 180.529114][T13216] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 180.529759][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.534850][T13215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.534884][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 180.537248][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.543490][T13215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.549000][T13215] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2085'. [ 180.550784][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 180.552188][T13215] bridge0: port 3(team0) entered disabled state [ 180.555775][T13216] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 180.557808][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.561846][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 180.563123][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.603286][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 180.606102][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 180.694844][ T40] audit: type=1400 audit(1774071471.301:44413): avc: denied { remount } for pid=13221 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 180.811365][ T40] audit: type=1400 audit(1774071471.421:44414): avc: denied { setopt } for pid=13224 comm="syz.6.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.932329][ T5291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.936953][ T5291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.954518][ T5291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.963893][ T5291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.968937][ T5291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.997759][T13236] lo speed is unknown, defaulting to 1000 [ 181.071817][ T9587] syz_tun (unregistering): left allmulticast mode [ 181.073950][ T9587] syz_tun (unregistering): left promiscuous mode [ 181.076047][ T9587] bridge0: port 3(syz_tun) entered disabled state [ 181.145209][T13251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2097'. [ 181.148328][T13251] unsupported nlmsg_type 40 [ 181.240161][ T6872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.243628][ T6872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.257141][T13236] chnl_net:caif_netlink_parms(): no params data found [ 181.312998][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.315530][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.317972][T13236] bridge_slave_0: entered allmulticast mode [ 181.323161][T13236] bridge_slave_0: entered promiscuous mode [ 181.339529][ T6872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.342961][ T6872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.348412][T13236] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.355187][T13236] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.358127][T13236] bridge_slave_1: entered allmulticast mode [ 181.362986][T13236] bridge_slave_1: entered promiscuous mode [ 181.393039][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.409529][ T6872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.413836][ T6872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.423359][ T40] audit: type=1400 audit(1774071472.031:44415): avc: denied { name_bind } for pid=13273 comm="syz.4.2103" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 181.427051][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.457139][T13236] team0: Port device team_slave_0 added [ 181.461898][T13236] team0: Port device team_slave_1 added [ 181.483595][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.486567][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.498779][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.504602][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.507051][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.515648][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.531141][ T6872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 181.535559][ T6872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.563441][T13236] hsr_slave_0: entered promiscuous mode [ 181.565785][T13236] hsr_slave_1: entered promiscuous mode [ 181.567994][T13236] debugfs: 'hsr0' already exists in 'hsr' [ 181.570254][T13236] Cannot create hsr debugfs directory [ 181.699583][ T6872] bridge_slave_1: left allmulticast mode [ 181.701878][ T6872] bridge_slave_1: left promiscuous mode [ 181.703793][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.748953][ T54] SELinux: failure in sel_netif_sid_slow(), invalid network interface (82) [ 181.784566][ T6872] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 181.805556][ T40] audit: type=1400 audit(1774071472.411:44416): avc: denied { lock } for pid=13285 comm="syz.3.2105" path="/518/file0/cpuset.effective_cpus" dev="9p" ino=76021887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.823255][ T6872] erspan0 (unregistering): left promiscuous mode [ 181.836747][ T6872] bond2 (unregistering): (slave erspan1): Releasing active interface [ 181.839797][ T6872] erspan1 (unregistering): left promiscuous mode [ 181.984309][ T40] audit: type=1400 audit(1774071472.591:44417): avc: denied { bind } for pid=13293 comm="syz.6.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.024592][T13296] 9pnet_virtio: no channels available for device syz [ 182.084816][ T6872] team0: Port device bridge2 removed [ 182.361814][ T6872] bond1 (unregistering): Released all slaves [ 182.370158][ T6872] bond2 (unregistering): Released all slaves [ 182.377107][ T6872] bond3 (unregistering): Released all slaves [ 182.384963][ T6872] bond4 (unregistering): Released all slaves [ 182.392232][ T6872] bond5 (unregistering): Released all slaves [ 182.399385][ T6872] bond6 (unregistering): Released all slaves [ 182.407872][ T6872] bond0 (unregistering): Released all slaves [ 182.437634][T13236] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.445767][T13236] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.451782][T13236] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.461329][T13236] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.499419][ T6872] tipc: Disabling bearer [ 182.504573][ T6872] tipc: Left network mode [ 182.558285][T13236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.593854][T13236] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.606983][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.609454][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.620063][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.622585][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.660741][ T6872] IPVS: stopping backup sync thread 6592 ... [ 182.846036][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.034823][T13236] veth0_vlan: entered promiscuous mode [ 183.043840][T13236] veth1_vlan: entered promiscuous mode [ 183.055970][ T6872] veth0_to_team: left promiscuous mode [ 183.058897][ T5291] Bluetooth: hci4: command tx timeout [ 183.064025][T13340] netlink: 'syz.3.2112': attribute type 10 has an invalid length. [ 183.072365][ T6872] hsr_slave_0: left promiscuous mode [ 183.075533][ T6872] hsr_slave_1: left promiscuous mode [ 183.078465][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.081920][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.085804][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.091133][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.095719][ T6872] veth1_macvtap: left promiscuous mode [ 183.097615][ T6872] veth0_macvtap: left promiscuous mode [ 183.099858][ T6872] veth1_vlan: left promiscuous mode [ 183.101707][ T6872] veth0_vlan: left promiscuous mode [ 183.223407][ T6872] team0 (unregistering): Port device team_slave_1 removed [ 183.230783][ T6872] team0 (unregistering): Port device team_slave_0 removed [ 183.302618][ T6864] smc: removing ib device syz0 [ 183.382645][ T6381] lo speed is unknown, defaulting to 1000 [ 183.384575][ T6381] syz0: Port: 1 Link DOWN [ 183.388055][T13236] veth0_macvtap: entered promiscuous mode [ 183.401698][T13236] veth1_macvtap: entered promiscuous mode [ 183.414918][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.421390][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.437122][ T6868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.441845][ T6868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.446712][ T6868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.452147][ T6868] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.599836][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 183.599853][ T40] audit: type=1400 audit(1774071474.201:44419): avc: denied { create } for pid=13350 comm="syz.3.2113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.634762][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.642731][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.680463][ T6868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.683589][ T6868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.692960][ T40] audit: type=1400 audit(1774071474.301:44420): avc: denied { mount } for pid=13236 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.706923][ T40] audit: type=1400 audit(1774071474.301:44421): avc: denied { unlink } for pid=5930 comm="syz-executor" name="file0" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.750435][ T40] audit: type=1400 audit(1774071474.361:44422): avc: denied { write } for pid=13357 comm="syz.3.2114" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 183.761400][T13365] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 183.764620][T13365] SELinux: failed to load policy [ 183.929801][T13370] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 184.013840][T13375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 184.220175][T13383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=13383 comm=syz.7.2117 [ 184.638439][ T40] audit: type=1326 audit(1774071475.241:44423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13415 comm="syz.4.2127" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f884239c799 code=0x0 [ 184.685425][T13419] netlink: 'syz.3.2128': attribute type 21 has an invalid length. [ 184.695615][T13419] netlink: 'syz.3.2128': attribute type 21 has an invalid length. [ 184.706354][ T40] audit: type=1400 audit(1774071475.311:44424): avc: denied { write } for pid=13420 comm="syz.7.2129" laddr=fe80::10 lport=43136 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 184.773813][T13430] Invalid source name [ 184.775658][T13430] UBIFS error (pid: 13430): cannot open "/dev/sg0", error -22 [ 184.823143][T13437] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.833336][T13437] xt_hashlimit: size too large, truncated to 1048576 [ 184.919895][T13440] /dev/sg0: Can't lookup blockdev [ 185.125650][T13299] uprobe: syz.6.2110:13299 failed to unregister, leaking uprobe [ 185.149037][ T5291] Bluetooth: hci4: command tx timeout [ 185.308871][ T5985] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 185.333462][ T5339] pmem0: AHDI p1 p3 [ 185.335005][ T5339] pmem0: p1 start 1898867055 is beyond EOD, truncated [ 185.460519][ T5985] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 185.463854][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.478987][ T5985] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.481983][ T5985] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.484875][ T5985] usb 8-1: Manufacturer: syz [ 185.499626][ T5985] usb 8-1: config 0 descriptor?? [ 185.546848][T13464] netlink: 'syz.6.2139': attribute type 4 has an invalid length. [ 185.548838][ T5985] rc_core: IR keymap rc-hauppauge not found [ 185.551424][ T5985] Registered IR keymap rc-empty [ 185.554469][ T5985] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 185.566470][ T5985] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 186.065574][ T40] audit: type=1400 audit(1774071476.681:44425): avc: denied { write } for pid=13492 comm="syz.7.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.203420][ T40] audit: type=1400 audit(1774071476.801:44426): avc: denied { map } for pid=13498 comm="syz.6.2151" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.330747][T13509] fuse: Unknown parameter 'rootm9 K4i0000000000014000' [ 186.453945][ T40] audit: type=1400 audit(1774071477.061:44427): avc: denied { map } for pid=13510 comm="syz.7.2156" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.461901][ T40] audit: type=1400 audit(1774071477.061:44428): avc: denied { execute } for pid=13510 comm="syz.7.2156" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.605469][T13519] __nla_validate_parse: 7 callbacks suppressed [ 186.605481][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2158'. [ 186.610228][T13521] overlayfs: failed to resolve './file1': -2 [ 186.652798][T13523] tmpfs: Unknown parameter 'mp/l' [ 186.791713][T13537] netlink: 'syz.7.2166': attribute type 1 has an invalid length. [ 186.795189][T13537] netlink: 'syz.7.2166': attribute type 3 has an invalid length. [ 186.798544][T13537] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2166'. [ 187.218815][ T5291] Bluetooth: hci4: command tx timeout [ 187.301684][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.304924][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.308708][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.400592][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.405239][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.408318][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 187.564237][T13557] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.674285][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 187.677229][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2176'. [ 187.684923][ T6852] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.687960][ T6852] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.694634][ T6852] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.697507][ T6852] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.971914][ T7176] usb 8-1: USB disconnect, device number 13 [ 187.999706][T13573] bond4: option downdelay: invalid value (18446744073709551615) [ 188.002269][T13573] bond4: option downdelay: allowed values 0 - 2147483647 [ 188.006678][T13573] bond4 (unregistering): Released all slaves [ 188.237715][T13595] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 188.329153][T13605] afs: Unknown parameter '' [ 188.436081][T13616] bond5: option xmit_hash_policy: invalid value (6) [ 188.439505][T13616] bond5 (unregistering): Released all slaves [ 188.601004][T13633] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 188.733985][T13649] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13649 comm=syz.3.2204 [ 188.734873][ T40] audit: type=1400 audit(1774071479.341:44429): avc: denied { write } for pid=13648 comm="syz.3.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.745085][T13649] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13649 comm=syz.3.2204 [ 188.853059][T13661] ipip0: entered promiscuous mode [ 188.910082][ T40] audit: type=1400 audit(1774071479.521:44430): avc: denied { create } for pid=13666 comm="syz.3.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 189.011392][T13685] 9p: Bad value for 'rfdno' [ 189.029885][ T10] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 189.115315][T13677] netfs: Couldn't get user pages (rc=-14) [ 189.181153][ T10] usb 11-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 189.189399][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 189.194923][ T10] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.198051][ T10] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.200853][ T10] usb 11-1: Product: syz [ 189.202273][ T10] usb 11-1: Manufacturer: syz [ 189.203822][ T10] usb 11-1: SerialNumber: syz [ 189.206775][ T10] usb 11-1: config 0 descriptor?? [ 189.209721][T13654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 189.217162][ T10] usb 11-1: selecting invalid altsetting 0 [ 189.251415][T13701] IPv6: Can't replace route, no match found [ 189.260998][T13701] netlink: zone id is out of range [ 189.298959][ T5291] Bluetooth: hci4: command tx timeout [ 189.312825][T13703] Invalid source name [ 189.314519][T13703] UBIFS error (pid: 13703): cannot open "./file0", error -22 [ 189.325889][ T40] audit: type=1400 audit(1774071479.931:44431): avc: denied { map } for pid=13702 comm="syz.7.2224" path="socket:[58833]" dev="sockfs" ino=58833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.419229][T13654] Invalid logical block size (536872960) [ 189.423173][ T10] usb 11-1: USB disconnect, device number 4 [ 189.693088][T13717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.750820][ T40] audit: type=1400 audit(1774071480.361:44432): avc: denied { mount } for pid=13720 comm="syz.4.2228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 189.763074][T13722] overlayfs: failed to clone lowerpath [ 189.763237][T13721] overlayfs: failed to clone lowerpath [ 189.767951][T13722] overlayfs: failed to clone lowerpath [ 189.905030][T13731] overlayfs: empty lowerdir [ 189.983028][ T40] audit: type=1400 audit(1774071480.591:44433): avc: denied { accept } for pid=13733 comm="syz.6.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.989715][T13736] netlink: 'syz.4.2234': attribute type 19 has an invalid length. [ 189.992685][T13736] netlink: 'syz.4.2234': attribute type 19 has an invalid length. [ 190.033658][ T40] audit: type=1400 audit(1774071480.641:44434): avc: denied { accept } for pid=13738 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.120349][T13751] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 190.141320][T13751] bond5: entered promiscuous mode [ 190.143932][T13751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.244905][ T40] audit: type=1400 audit(1774071480.851:44435): avc: denied { getopt } for pid=13756 comm="syz.3.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.862628][T13767] : renamed from wg2 (while UP) [ 190.863640][ T40] audit: type=1400 audit(1774071481.471:44436): avc: denied { mount } for pid=13771 comm="syz.6.2242" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.864427][T13772] devtmpfs: Cannot change global quota limit on remount [ 190.879785][ T40] audit: type=1400 audit(1774071481.471:44437): avc: denied { remount } for pid=13771 comm="syz.6.2242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.911048][ T40] audit: type=1400 audit(1774071481.521:44438): avc: denied { unmount } for pid=11800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.968638][T13788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=515 sclass=netlink_tcpdiag_socket pid=13788 comm=syz.4.2246 [ 191.194912][T13814] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 191.197619][T13814] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 191.583211][T13869] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 191.586595][T13869] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 191.613142][T13868] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.615752][T13868] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.668454][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.674375][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.740221][ T6868] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.744381][ T6868] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.750669][ T6868] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.754559][ T6868] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.792995][T13879] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 191.838424][T13888] __nla_validate_parse: 53 callbacks suppressed [ 191.838442][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2275'. [ 191.962103][T13897] netlink: 4448 bytes leftover after parsing attributes in process `syz.7.2279'. [ 191.964626][T13895] SELinux: ebitmap: start bit 0 comes after start bit 768 [ 191.971915][T13895] SELinux: failed to load policy [ 192.061607][T13905] xt_connbytes: Forcing CT accounting to be enabled [ 192.108849][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 192.192428][T13921] openvswitch: netlink: Missing valid actions attribute. [ 192.194934][T13921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.225965][T13924] netlink: 'syz.6.2287': attribute type 1 has an invalid length. [ 192.255564][T13924] bond4: (slave geneve2): making interface the new active one [ 192.258360][T13924] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 192.260334][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.261754][ T219] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.265819][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.267562][ T219] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.267588][ T219] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.277775][ T219] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.278854][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.286606][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.292041][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.295032][ T10] usb 8-1: Product: syz [ 192.296511][ T10] usb 8-1: Manufacturer: syz [ 192.298108][ T10] usb 8-1: SerialNumber: syz [ 192.511600][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.563568][T13939] kvm: pic: non byte write [ 192.625546][T13950] fuse: Unknown parameter 'Hcoup_id' [ 192.718090][ T9] usb 8-1: USB disconnect, device number 14 [ 192.721005][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 192.727080][ T9] usblp0: removed [ 192.878823][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 192.881943][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.885219][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.888386][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.891696][ T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.895940][ T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.899365][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.109380][ T10] usb 12-1: GET_CAPABILITIES returned 0 [ 193.111308][ T10] usbtmc 12-1:16.0: can't read capabilities [ 193.315713][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.346009][T13948] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 193.365362][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.369831][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.375031][ T50] usb 12-1: USB disconnect, device number 2 [ 193.609314][T13978] bond5 (unregistering): Released all slaves [ 193.791068][T13990] overlayfs: invalid origin (0000) [ 193.952271][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2306'. [ 194.006865][T13992] dns_resolver: Unsupported server list version (0) [ 194.017392][T13992] Invalid option length (1048372) for dns_resolver key [ 194.057927][T14008] /dev/sg0: Can't lookup blockdev [ 194.135547][T14006] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 194.141497][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2309'. [ 194.145552][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 194.145564][ T40] audit: type=1400 audit(1774071484.753:44452): avc: denied { relabelto } for pid=14004 comm="syz.7.2308" name="file1" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 194.168989][ T40] audit: type=1400 audit(1774071484.753:44453): avc: denied { associate } for pid=14004 comm="syz.7.2308" name="file1" dev="tmpfs" ino=350 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 194.201421][ T40] audit: type=1400 audit(1774071484.803:44454): avc: denied { override_creds } for pid=14017 comm="syz.7.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.641096][T14041] overlayfs: regular lower layers cannot follow data lower layers [ 194.856926][T14051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.119974][ T40] audit: type=1400 audit(1774071485.733:44455): avc: denied { append } for pid=14066 comm="syz.7.2324" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.245004][T14071] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 195.250269][T14071] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 195.260999][T14074] Device name not specified. [ 195.260999][T14074] [ 195.281378][T14055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14055 comm=syz.3.2321 [ 195.295914][ T40] audit: type=1400 audit(1774071485.903:44456): avc: denied { connect } for pid=14069 comm="syz.7.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.504084][T14095] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 195.578889][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2331'. [ 195.597077][T14100] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2331'. [ 195.666667][T14102] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2332'. [ 196.097143][T14110] fuse: Unknown parameter 'group' [ 196.098471][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2337'. [ 196.101939][T14110] IPVS: length: 120 != 24 [ 196.165233][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2336'. [ 196.288499][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 196.292547][T14141] netlink: 'syz.4.2343': attribute type 3 has an invalid length. [ 196.295575][T14141] netlink: 'syz.4.2343': attribute type 2 has an invalid length. [ 196.313513][ T40] audit: type=1326 audit(1774071486.923:44457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.4.2343" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f884239c799 code=0x0 [ 196.609689][ T40] audit: type=1400 audit(1774071487.223:44458): avc: denied { map } for pid=14144 comm="syz.6.2344" path="/proc/463/net/kcm" dev="proc" ino=4026533698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 197.123452][T14165] netlink: 'syz.7.2349': attribute type 10 has an invalid length. [ 197.128864][T14165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.134237][T14165] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.463065][T14206] netlink: 'syz.4.2363': attribute type 12 has an invalid length. [ 197.465653][T14206] netlink: 'syz.4.2363': attribute type 29 has an invalid length. [ 197.468377][T14206] __nla_validate_parse: 2 callbacks suppressed [ 197.468386][T14206] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2363'. [ 197.525273][ T40] audit: type=1400 audit(1774071488.133:44459): avc: denied { append } for pid=14212 comm="syz.6.2366" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 197.540032][ T40] audit: type=1400 audit(1774071488.153:44460): avc: denied { map } for pid=14212 comm="syz.6.2366" path="socket:[61136]" dev="sockfs" ino=61136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 197.773479][T14252] xt_l2tp: v2 doesn't support IP mode [ 197.857083][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2378'. [ 197.963700][T14271] tmpfs: Cannot change global quota limit on remount [ 198.010639][T14274] gretap1: entered promiscuous mode [ 198.013369][T14274] batman_adv: batadv0: Adding interface: gretap1 [ 198.016080][T14274] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 198.024874][T14274] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 198.869697][T14301] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2390'. [ 198.936499][ T40] audit: type=1400 audit(1774071489.553:44461): avc: denied { mounton } for pid=14306 comm="syz.4.2393" path="/bus" dev="ramfs" ino=60361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 198.943989][T14307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.948890][T14307] overlayfs: failed to set xattr on upper [ 198.951033][T14307] overlayfs: ...falling back to redirect_dir=nofollow. [ 198.953933][T14307] overlayfs: ...falling back to index=off. [ 198.956450][T14307] overlayfs: ...falling back to uuid=null. [ 198.959435][T14307] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 199.053252][T14312] netlink: 'syz.4.2395': attribute type 7 has an invalid length. [ 199.053252][T14313] netlink: 'syz.4.2395': attribute type 7 has an invalid length. [ 199.053273][T14313] netlink: 'syz.4.2395': attribute type 8 has an invalid length. [ 199.056684][T14312] netlink: 'syz.4.2395': attribute type 8 has an invalid length. [ 199.060878][T14313] netlink: 'syz.4.2395': attribute type 7 has an invalid length. [ 199.068816][T14312] netlink: 208804 bytes leftover after parsing attributes in process `syz.4.2395'. [ 199.075903][T14313] netlink: 208804 bytes leftover after parsing attributes in process `syz.4.2395'. [ 199.142947][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.388452][T14325] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2400'. [ 199.439382][ T2298] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 199.524421][T14331] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.533430][T14331] binder: 14330:14331 ioctl c0306201 200000000680 returned -14 [ 199.595308][ T40] audit: type=1400 audit(1774071490.203:44462): avc: denied { mounton } for pid=14334 comm="syz.3.2404" path="/file0" dev="ramfs" ino=61342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 199.595963][ T2298] usb 11-1: config 0 has no interfaces? [ 199.604413][ T40] audit: type=1400 audit(1774071490.203:44463): avc: denied { remount } for pid=14334 comm="syz.3.2404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.607235][ T2298] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.617032][ T2298] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.621179][ T2298] usb 11-1: Product: syz [ 199.623116][ T2298] usb 11-1: Manufacturer: syz [ 199.625213][ T2298] usb 11-1: SerialNumber: syz [ 199.634944][ T2298] usb 11-1: config 0 descriptor?? [ 199.649715][T14338] x_tables: ip_tables: osf match: only valid for protocol 6 [ 199.662422][T14338] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 199.665420][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2405'. [ 199.816072][T14346] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2407'. [ 199.849350][ T5931] usb 11-1: USB disconnect, device number 5 [ 199.979019][T14348] SELinux: policydb string length 0 does not match expected length 8 [ 199.998805][T14348] SELinux: failed to load policy [ 200.050081][T14357] overlayfs: empty lowerdir [ 200.136243][T14358] overlay: filesystem on ./file0 not supported as upperdir [ 200.139380][T14360] netlink: 750 bytes leftover after parsing attributes in process `syz.7.2413'. [ 200.161694][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 200.453054][ T40] audit: type=1400 audit(1774071491.063:44464): avc: denied { create } for pid=14387 comm="syz.6.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.462604][ T40] audit: type=1400 audit(1774071491.073:44465): avc: denied { write } for pid=14387 comm="syz.6.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.557319][T14388] kvm: kvm [14387]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 200.560755][T14388] kvm: kvm [14387]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 200.579451][T14388] kvm: kvm [14387]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 200.598550][T14388] kvm: kvm [14387]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 200.602007][T14388] kvm: kvm [14387]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 200.806667][ T40] audit: type=1400 audit(1774071491.413:44466): avc: denied { connect } for pid=14399 comm="syz.7.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.988050][T14426] program syz.3.2433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.161474][T14436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.181754][ T40] audit: type=1400 audit(1774071491.793:44467): avc: denied { accept } for pid=14433 comm="syz.7.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 201.342403][T14457] xt_l2tp: unknown flags: 51 [ 201.342619][T14455] validate_nla: 2 callbacks suppressed [ 201.342633][T14455] netlink: 'syz.4.2443': attribute type 11 has an invalid length. [ 201.386351][T14461] netlink: 'syz.7.2445': attribute type 4 has an invalid length. [ 201.394303][ T40] audit: type=1400 audit(1774071492.003:44468): avc: denied { read } for pid=14460 comm="syz.7.2445" path="socket:[63726]" dev="sockfs" ino=63726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.520480][T14479] sctp: [Deprecated]: syz.4.2450 (pid 14479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.520480][T14479] Use struct sctp_sack_info instead [ 201.625470][ T40] audit: type=1400 audit(1774071492.233:44469): avc: denied { setopt } for pid=14487 comm="syz.4.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 201.743750][ T40] audit: type=1400 audit(1774071492.353:44470): avc: denied { connect } for pid=14502 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.858008][T14519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=14519 comm=syz.4.2461 [ 201.928626][ T40] audit: type=1400 audit(1774071492.533:44471): avc: denied { setopt } for pid=14525 comm="syz.4.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.105298][T14549] netlink: 'syz.4.2471': attribute type 6 has an invalid length. [ 202.108225][T14549] netlink: 'syz.4.2471': attribute type 15 has an invalid length. [ 202.115498][T14549] netlink: 'syz.4.2471': attribute type 6 has an invalid length. [ 202.118095][T14549] netlink: 'syz.4.2471': attribute type 15 has an invalid length. [ 202.121099][T14549] netlink: 'syz.4.2471': attribute type 6 has an invalid length. [ 202.123709][T14549] netlink: 'syz.4.2471': attribute type 15 has an invalid length. [ 202.126780][T14549] netlink: 'syz.4.2471': attribute type 6 has an invalid length. [ 202.129408][T14549] netlink: 'syz.4.2471': attribute type 15 has an invalid length. [ 202.348942][ T50] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 202.478794][ T50] usb 11-1: device descriptor read/64, error -71 [ 202.578780][T11382] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 202.718741][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 202.730039][T11382] usb 12-1: config 0 has no interfaces? [ 202.731940][T11382] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 202.735043][T11382] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.743985][T11382] usb 12-1: config 0 descriptor?? [ 202.858786][ T50] usb 11-1: device descriptor read/64, error -71 [ 202.957774][ T5931] usb 12-1: USB disconnect, device number 3 [ 202.969108][ T50] usb usb11-port1: attempt power cycle [ 203.223107][T14578] __nla_validate_parse: 142 callbacks suppressed [ 203.223120][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 203.229530][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 203.242992][T14578] tmpfs: Bad value for 'mpol' [ 203.308792][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 203.331366][ T50] usb 11-1: device descriptor read/8, error -71 [ 203.578831][ T50] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 203.582475][T14593] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2489'. [ 203.591131][T14593] overlay: ./file0 is not a directory [ 203.594456][T14593] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2489'. [ 203.609338][ T50] usb 11-1: device descriptor read/8, error -71 [ 203.636552][T14595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=14595 comm=syz.4.2490 [ 203.652983][T14597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.676426][T14597] vlan2: entered allmulticast mode [ 203.678818][T14597] macsec0: entered allmulticast mode [ 203.731133][ T50] usb usb11-port1: unable to enumerate USB device [ 203.777590][T14604] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.798820][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 203.802055][T14604] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2494'. [ 203.811703][T14604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.840083][T14604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.844044][T14604] bond0 (unregistering): Released all slaves [ 204.037386][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 204.070701][T14635] IPVS: set_ctl: invalid protocol: 47 172.30.1.8:20001 [ 204.074202][ T5931] IPVS: starting estimator thread 0... [ 204.075745][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2503'. [ 204.168829][T14640] IPVS: using max 44 ests per chain, 105600 per kthread [ 204.389292][T14635] nbd1: detected capacity change from 0 to 63 [ 204.394608][ T5944] block nbd1: Receive control failed (result -32) [ 204.395174][ T5291] block nbd1: Receive control failed (result -32) [ 204.400912][ T5936] block nbd1: Send control failed (result -32) [ 204.404280][ T5936] block nbd1: Request send failed, requeueing [ 204.412878][ T5359] block nbd1: Dead connection, failed to find a fallback [ 204.416516][ T5359] block nbd1: shutting down sockets [ 204.419527][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.424105][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 204.428998][ T5936] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.433768][ T5936] Buffer I/O error on dev nbd1, logical block 1, async page read [ 204.437421][ T5936] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.441949][ T5936] Buffer I/O error on dev nbd1, logical block 2, async page read [ 204.445575][ T5936] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.449885][ T5936] Buffer I/O error on dev nbd1, logical block 3, async page read [ 204.453292][ T5936] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.457366][ T5936] Buffer I/O error on dev nbd1, logical block 0, async page read [ 204.461042][ T5936] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.465161][ T5936] Buffer I/O error on dev nbd1, logical block 1, async page read [ 204.466951][T14666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.468560][ T5936] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.475164][ T5936] Buffer I/O error on dev nbd1, logical block 2, async page read [ 204.477732][T14672] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 204.478575][ T5936] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.487880][ T5936] Buffer I/O error on dev nbd1, logical block 3, async page read [ 204.491476][ T5936] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.497233][ T5936] Buffer I/O error on dev nbd1, logical block 0, async page read [ 204.501025][ T5936] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.505200][ T5936] Buffer I/O error on dev nbd1, logical block 1, async page read [ 204.509820][ T5936] ldm_validate_partition_table(): Disk read failed. [ 204.513098][ T5936] Dev nbd1: unable to read RDB block 0 [ 204.515988][ T5936] nbd1: unable to read partition table [ 204.522423][ T5936] ldm_validate_partition_table(): Disk read failed. [ 204.525571][ T5936] Dev nbd1: unable to read RDB block 0 [ 204.528369][ T5936] nbd1: unable to read partition table [ 204.622471][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 204.622488][ T40] audit: type=1400 audit(1774071495.233:44474): avc: denied { listen } for pid=14689 comm="syz.7.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.844304][ T2298] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 204.979132][ T2298] usb 8-1: device descriptor read/64, error -71 [ 205.213002][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 205.216170][T14736] hsr_slave_0: left promiscuous mode [ 205.220676][ T2298] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 205.223577][T14736] hsr_slave_1: left promiscuous mode [ 205.229485][ T40] audit: type=1400 audit(1774071495.843:44475): avc: denied { getopt } for pid=14720 comm="syz.7.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 205.348779][ T2298] usb 8-1: device descriptor read/64, error -71 [ 205.459115][ T2298] usb usb8-port1: attempt power cycle [ 205.500281][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14745 comm=syz.4.2535 [ 205.506046][T14745] xt_ipcomp: unknown flags 1D [ 205.574020][ T24] hid-generic 0005:10CF:03FF.0004: item fetching failed at offset 0/48 [ 205.577260][ T24] hid-generic 0005:10CF:03FF.0004: probe with driver hid-generic failed with error -22 [ 205.616182][T14753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.654688][T14753] bond3: (slave veth3): Enslaving as an active interface with a down link [ 205.659156][T14753] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2538'. [ 205.662461][ T40] audit: type=1400 audit(1774071496.273:44476): avc: denied { read } for pid=14752 comm="syz.7.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.682154][T14758] overlayfs: failed to resolve './file1': -2 [ 205.808798][ T2298] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 205.829682][ T2298] usb 8-1: device descriptor read/8, error -71 [ 205.955813][ T5932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.960803][ T5932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.963946][ T5932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.966896][ T5932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.972721][ T5932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.068811][ T2298] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 206.081823][T14781] chnl_net:caif_netlink_parms(): no params data found [ 206.089810][ T2298] usb 8-1: device descriptor read/8, error -71 [ 206.132799][T14781] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.135207][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.137532][T14781] bridge_slave_0: entered allmulticast mode [ 206.141413][T14781] bridge_slave_0: entered promiscuous mode [ 206.144579][T14781] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.146868][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.149482][T14781] bridge_slave_1: entered allmulticast mode [ 206.152244][T14781] bridge_slave_1: entered promiscuous mode [ 206.168279][T14781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.173796][T14781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.190766][T14781] team0: Port device team_slave_0 added [ 206.194034][T14781] team0: Port device team_slave_1 added [ 206.199781][ T2298] usb usb8-port1: unable to enumerate USB device [ 206.210092][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.212382][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.221049][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.225301][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.227530][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.236034][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.259719][T14781] hsr_slave_0: entered promiscuous mode [ 206.262013][T14781] hsr_slave_1: entered promiscuous mode [ 206.354487][T14781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.361696][T14781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.370048][T14790] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 206.427246][T14781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.430726][T14781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.465689][T14792] validate_nla: 126 callbacks suppressed [ 206.465700][T14792] netlink: 'syz.7.2549': attribute type 1 has an invalid length. [ 206.479772][T14792] bond4: entered promiscuous mode [ 206.481853][T14792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.493273][T14792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.495633][T14792] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 206.498906][T14792] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 206.504220][T14792] bond4: (slave xfrm1): making interface the new active one [ 206.507383][T14792] xfrm1: entered promiscuous mode [ 206.510513][T14792] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 206.527427][T14781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.538739][T14781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.610220][T14781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.614401][T14781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.676820][ T40] audit: type=1400 audit(1774071497.283:44477): avc: denied { write } for pid=14805 comm="syz.7.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 206.742684][T14781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.757815][T14781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.763650][T14781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.772377][T14781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.798628][T14821] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 206.818907][T14781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.827198][T14781] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.833990][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.836125][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.841101][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.843222][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.959988][T14781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.089226][T14781] veth0_vlan: entered promiscuous mode [ 207.094424][T14781] veth1_vlan: entered promiscuous mode [ 207.097567][ T40] audit: type=1400 audit(1774071497.703:44478): avc: denied { read } for pid=14835 comm="syz.7.2557" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 207.107898][ T40] audit: type=1400 audit(1774071497.703:44479): avc: denied { open } for pid=14835 comm="syz.7.2557" path="/123/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 207.115808][T14781] veth0_macvtap: entered promiscuous mode [ 207.116255][T14838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.121501][T14781] veth1_macvtap: entered promiscuous mode [ 207.122614][T14838] block device autoloading is deprecated and will be removed. [ 207.134618][T14781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.139070][ T5291] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 207.139350][ T5944] Bluetooth: hci1: command 0xfc11 tx timeout [ 207.139979][T14781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.142997][ T6872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.143334][ T40] audit: type=1400 audit(1774071497.753:44480): avc: denied { ioctl } for pid=14835 comm="syz.7.2557" path="/123/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 207.158514][ T6872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.172265][ T6872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.175190][ T6872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.217014][ T6868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.223013][ T6868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.237090][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.240664][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.251954][ T40] audit: type=1400 audit(1774071497.863:44481): avc: denied { mounton } for pid=14781 comm="syz-executor" path="/syzkaller.JW6PXq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=66035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 207.389347][T14858] 0: renamed from hsr0 (while UP) [ 207.392575][T14858] 0: entered allmulticast mode [ 207.394213][T14858] hsr_slave_0: entered allmulticast mode [ 207.396346][T14858] hsr_slave_1: entered allmulticast mode [ 207.398500][T14858] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 207.438778][ T50] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 207.552713][T14860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.557767][T14861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.611283][ T50] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.614892][ T50] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.619084][ T50] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.619887][ T40] audit: type=1400 audit(1774071498.233:44482): avc: denied { listen } for pid=14873 comm="syz.6.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.622052][ T50] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.622069][ T50] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.623625][ T50] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.642015][ T50] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.644777][ T50] usb 12-1: Product: syz [ 207.646202][ T50] usb 12-1: Manufacturer: syz [ 207.654530][ T50] cdc_wdm 12-1:1.0: skipping garbage [ 207.656328][ T50] cdc_wdm 12-1:1.0: skipping garbage [ 207.661336][ T50] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 207.666376][ T50] cdc_wdm 12-1:1.0: Unknown control protocol [ 207.685799][T14878] 9p: Invalid gid '0x00000000ffffffff' [ 207.728412][T14887] Failed to initialize the IGMP autojoin socket (err -2) [ 207.804028][ T40] audit: type=1400 audit(1774071498.413:44483): avc: denied { create } for pid=14892 comm="syz.6.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 207.910329][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 207.912559][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 207.916295][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 207.918474][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 207.921597][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 207.923769][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 207.925927][ T6381] usb 12-1: USB disconnect, device number 4 [ 208.020253][ T5291] Bluetooth: hci5: command tx timeout [ 208.028231][T14910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=174 sclass=netlink_route_socket pid=14910 comm=syz.4.2576 [ 208.036413][T14910] fuse: Bad value for 'user_id' [ 208.038054][T14910] fuse: Bad value for 'user_id' [ 208.224694][T14924] netlink: 'syz.4.2582': attribute type 1 has an invalid length. [ 208.534582][T14945] __nla_validate_parse: 8 callbacks suppressed [ 208.534598][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 208.692764][T14955] netlink: 'syz.4.2591': attribute type 13 has an invalid length. [ 208.710500][T14955] gretap0: refused to change device tx_queue_len [ 208.713423][T14955] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.816943][T14968] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2595'. [ 208.856545][T14976] syzkaller0: entered promiscuous mode [ 208.863502][T14976] syzkaller0: entered allmulticast mode [ 208.877385][ T6005] IPVS: starting estimator thread 0... [ 208.989036][T14982] IPVS: using max 44 ests per chain, 105600 per kthread [ 209.048913][ T6005] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 209.171138][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.180342][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.185749][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.196324][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.200304][T15005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.205988][T15006] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 209.215981][T15010] gfs2: error -5 reading superblock [ 209.220465][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.226948][ T6005] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 209.233426][ T6005] usb 11-1: config 1 has no interface number 0 [ 209.235449][ T6005] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 209.238522][ T6005] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.243371][ T6005] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.254454][ T6005] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 209.257733][ T6005] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.260945][ T6005] usb 11-1: Product: syz [ 209.262357][ T6005] usb 11-1: Manufacturer: syz [ 209.263978][ T6005] usb 11-1: SerialNumber: syz [ 209.267601][T14971] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 209.274936][T15002] Failed to initialize the IGMP autojoin socket (err -2) [ 209.276464][ T6005] usb 11-1: Error in usbnet_get_endpoints (-22) [ 209.484521][ T54] usb 11-1: USB disconnect, device number 10 [ 209.591169][T15002] chnl_net:caif_netlink_parms(): no params data found [ 209.711445][T15002] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.714083][T15002] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.716702][T15002] bridge_slave_0: entered allmulticast mode [ 209.720856][T15002] bridge_slave_0: entered promiscuous mode [ 209.726591][T15002] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.731012][T15002] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.733316][T15002] bridge_slave_1: entered allmulticast mode [ 209.736027][T15002] bridge_slave_1: entered promiscuous mode [ 209.779154][ T50] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 209.796868][T15002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.821998][T15002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.860038][T15002] smc: adding net device veth1_to_team with user defined pnetid S [ 209.920264][T15002] team0: Port device team_slave_0 added [ 209.931708][T15002] team0: Port device team_slave_1 added [ 209.944888][ T50] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.948580][ T50] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.951735][ T50] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 209.954800][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.959559][ T50] usb 9-1: config 0 descriptor?? [ 209.981058][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 209.983369][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 209.990135][T15002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.992378][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.002727][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 210.015380][T15002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.019127][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 210.026403][T15002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.027168][ T50] usb 9-1: media controller created [ 210.034746][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.038647][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.047531][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 210.052312][T15002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.054256][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 210.060582][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input17 [ 210.070826][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 210.070836][ T40] audit: type=1400 audit(1774071500.683:44488): avc: denied { write } for pid=15075 comm="syz.7.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.095189][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 210.099253][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 210.108783][ T5944] Bluetooth: hci5: command tx timeout [ 210.220445][T15002] hsr_slave_0: entered promiscuous mode [ 210.223812][T15002] hsr_slave_1: entered promiscuous mode [ 210.226103][T15002] debugfs: 'hsr0' already exists in 'hsr' [ 210.227934][T15002] Cannot create hsr debugfs directory [ 210.262076][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 210.264274][ T50] dvb-usb: error while querying for an remote control event. [ 210.429591][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 210.431488][ T50] dvb-usb: error while querying for an remote control event. [ 210.458191][T15002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.552369][T15002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.599103][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 210.601005][ T50] dvb-usb: error while querying for an remote control event. [ 210.621579][T15002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.685893][ T10] usb 9-1: USB disconnect, device number 7 [ 210.731755][T15002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.738977][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 210.743552][T15092] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2622'. [ 210.892569][T15002] netdevsim netdevsim3 netdevsim0: renamed from eth14 [ 210.906617][T15002] netdevsim netdevsim3 netdevsim1: renamed from eth15 [ 210.920065][T15002] netdevsim netdevsim3 netdevsim2: renamed from eth16 [ 210.930576][T15002] netdevsim netdevsim3 netdevsim3: renamed from eth17 [ 211.092301][T15002] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.115512][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.118635][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.135200][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.137515][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.298992][ T5944] Bluetooth: hci1: command tx timeout [ 211.329279][T15114] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.385076][T15002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.412603][ T40] audit: type=1400 audit(1774071502.023:44489): avc: denied { mount } for pid=15119 comm="syz.4.2629" name="/" dev="ramfs" ino=68652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 211.420701][T15120] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.423025][T15120] overlayfs: failed to set xattr on upper [ 211.424847][T15120] overlayfs: ...falling back to redirect_dir=nofollow. [ 211.427040][T15120] overlayfs: ...falling back to index=off. [ 211.429081][T15120] overlayfs: ...falling back to uuid=null. [ 211.438389][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2628'. [ 211.439003][T15120] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 211.471275][T15002] veth0_vlan: entered promiscuous mode [ 211.476304][T15002] veth1_vlan: entered promiscuous mode [ 211.508907][T15122] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 211.543675][T15002] veth0_macvtap: entered promiscuous mode [ 211.560589][T15124] veth0: entered promiscuous mode [ 211.565060][ T40] audit: type=1400 audit(1774071502.173:44490): avc: denied { shutdown } for pid=15119 comm="syz.4.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.565411][T15002] veth1_macvtap: entered promiscuous mode [ 211.621056][T15002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.642806][T15002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.653670][T15002] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.662410][T15002] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 211.669009][T15002] wireguard: wg0: Could not create IPv4 socket [ 211.673705][T15002] wireguard: wg1: Could not create IPv4 socket [ 211.677142][T15002] wireguard: wg2: Could not create IPv4 socket [ 211.809729][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2632'. [ 211.812752][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2632'. [ 211.964195][T15119] veth0: left promiscuous mode [ 211.981138][T15132] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2632'. [ 212.050495][T15142] tmpfs: Bad value for 'mpol' [ 212.189771][ T5291] Bluetooth: hci5: command tx timeout [ 212.628946][ T6381] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 212.662669][ T5291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.665841][ T5291] Bluetooth: hci4: Injecting HCI hardware error event [ 212.669986][ T5291] Bluetooth: hci4: hardware error 0x00 [ 212.798805][ T6381] usb 9-1: Using ep0 maxpacket: 8 [ 212.802340][ T6381] usb 9-1: config 5 has an invalid interface number: 56 but max is 1 [ 212.805065][ T6381] usb 9-1: config 5 has an invalid interface number: 16 but max is 1 [ 212.807640][ T6381] usb 9-1: config 5 has an invalid descriptor of length 146, skipping remainder of the config [ 212.811036][ T6381] usb 9-1: config 5 has no interface number 0 [ 212.813035][ T6381] usb 9-1: config 5 has no interface number 1 [ 212.814987][ T6381] usb 9-1: config 5 interface 56 altsetting 128 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 212.818325][ T6381] usb 9-1: config 5 interface 56 altsetting 128 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 212.822793][ T6381] usb 9-1: config 5 interface 56 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 212.826239][ T6381] usb 9-1: config 5 interface 56 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 212.831353][ T6381] usb 9-1: config 5 interface 56 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 212.834975][ T6381] usb 9-1: config 5 interface 56 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 212.838627][ T6381] usb 9-1: config 5 interface 56 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 212.842826][ T6381] usb 9-1: config 5 interface 16 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 16 [ 212.845853][ T6381] usb 9-1: config 5 interface 16 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 212.849151][ T6381] usb 9-1: config 5 interface 16 altsetting 129 has a duplicate endpoint with address 0x5, skipping [ 212.852463][ T6381] usb 9-1: config 5 interface 16 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 212.856609][ T6381] usb 9-1: config 5 interface 56 has no altsetting 0 [ 212.858822][ T6381] usb 9-1: config 5 interface 16 has no altsetting 0 [ 212.862577][ T6381] usb 9-1: New USB device found, idVendor=ed10, idProduct=7636, bcdDevice= 0.01 [ 212.865456][ T6381] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.867939][ T6381] usb 9-1: Product: 鉈娷蓼ؙ铁⿦ᨮ [ 212.869867][ T6381] usb 9-1: Manufacturer: 䝾盈ﳀ볠憟ዒ蓢ꗋ䇱䔹玤毒뛥鮩 [ 212.872880][ T6381] usb 9-1: SerialNumber: 渋ᦝ博ŵ䘤ﴉᅻ⼌ⶀ⏸惰㷙க࣊㒆通㇜춇੝㺂軾ᚁ랅ṛ [ 212.890890][T15163] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.037446][T15197] ubi31: attaching mtd0 [ 213.041697][T15197] ubi31: scanning is finished [ 213.043266][T15197] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 213.100514][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2636'. [ 213.114804][T15199] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2640'. [ 213.154860][ T6381] usb-storage 9-1:5.56: USB Mass Storage device detected [ 213.162014][ T6381] usb-storage 9-1:5.56: Quirks match for vid ed10 pid 7636: 80 [ 213.209494][T15197] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 213.247186][ T40] audit: type=1400 audit(1774071503.853:44491): avc: denied { ioctl } for pid=15210 comm="syz.7.2641" path="socket:[69706]" dev="sockfs" ino=69706 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.281568][ T6381] usb-storage 9-1:5.16: USB Mass Storage device detected [ 213.292203][ T6381] usb-storage 9-1:5.16: Quirks match for vid ed10 pid 7636: 80 [ 213.351049][ T6381] usb 9-1: USB disconnect, device number 8 [ 213.381080][ T5932] Bluetooth: hci1: command tx timeout [ 213.709874][ T40] audit: type=1400 audit(1774071504.313:44492): avc: denied { mount } for pid=15235 comm="syz.4.2645" name="/" dev="pstore" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 214.085712][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2648'. [ 214.119045][T15264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15264 comm=syz.7.2648 [ 214.258807][ T5932] Bluetooth: hci5: command tx timeout [ 214.334265][ T40] audit: type=1400 audit(1774071504.943:44493): avc: denied { mounton } for pid=15281 comm="syz.4.2652" path="/syzcgroup/unified/syz4" dev="pstore" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 214.349984][T15284] XFS (loop4): SB validate failed with error -5. [ 214.361408][T15284] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 214.692845][T15314] Failed to initialize the IGMP autojoin socket (err -2) [ 214.739025][ T5291] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 214.797680][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 214.841033][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2660'. [ 214.946305][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 214.979910][T15338] dlm: no locking on control device [ 215.035119][T15338] program syz.4.2662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.225563][T15351] gfs2: error -5 reading superblock [ 215.271378][T15360] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2666'. [ 215.479406][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2669'. [ 215.600017][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 215.734737][T15396] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.271004][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'. [ 216.274272][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2688'. [ 216.416462][T15476] syzkaller0: entered promiscuous mode [ 216.418216][T15476] syzkaller0: entered allmulticast mode [ 216.468736][ T10] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 216.620342][ T10] usb 12-1: unable to get BOS descriptor or descriptor too short [ 216.624196][ T10] usb 12-1: not running at top speed; connect to a high speed hub [ 216.628799][ T10] usb 12-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 216.632534][ T10] usb 12-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 216.639640][ T10] usb 12-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.643942][ T10] usb 12-1: config 1 interface 0 has no altsetting 0 [ 216.647659][ T10] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.651042][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.653638][ T10] usb 12-1: Product: syz [ 216.655121][ T10] usb 12-1: Manufacturer: syz [ 216.656686][ T10] usb 12-1: SerialNumber: syz [ 216.661446][T15463] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 216.663841][T15463] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 216.832140][ T40] audit: type=1400 audit(1774071507.433:44494): avc: denied { mounton } for pid=15500 comm="syz.4.2692" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 216.969674][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 218.130460][T15512] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 218.134702][T15518] macvlan0: entered promiscuous mode [ 218.144630][ T10] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 218.169195][ T10] usb 12-1: USB disconnect, device number 5 [ 218.269654][T15574] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 218.414215][T15588] 9pnet_fd: Insufficient options for proto=fd [ 218.429371][ T40] audit: type=1400 audit(1774071509.043:44495): avc: denied { accept } for pid=15587 comm="syz.4.2699" path="socket:[69893]" dev="sockfs" ino=69893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.823001][T15621] netlink: 'syz.4.2705': attribute type 27 has an invalid length. [ 218.842159][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.845453][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.891559][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.896370][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.935184][T15621] macvlan0: left promiscuous mode [ 218.988851][ T9] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 219.031275][T15624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.036239][T15624] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.045067][T15624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.052761][ T6849] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.062094][ T6849] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.065983][ T6849] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.070040][ T6849] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.152161][ T9] usb 12-1: config 0 has no interfaces? [ 219.154375][ T9] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 219.157370][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.165831][ T9] usb 12-1: config 0 descriptor?? [ 219.169003][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 219.322013][ T10] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 219.328878][ T10] usb 9-1: can't read configurations, error -22 [ 219.377184][ T50] usb 12-1: USB disconnect, device number 6 [ 219.459046][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 219.611873][ T10] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 219.614581][ T10] usb 9-1: can't read configurations, error -22 [ 219.616835][ T10] usb usb9-port1: attempt power cycle [ 219.958760][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 219.973711][T15670] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.980678][ T10] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 219.983290][ T10] usb 9-1: can't read configurations, error -22 [ 220.061433][ T40] audit: type=1326 audit(1774071510.673:44496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15678 comm="syz.7.2708" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f962119c799 code=0x0 [ 220.108817][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 220.131563][ T10] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 220.135024][ T10] usb 9-1: can't read configurations, error -22 [ 220.137967][ T10] usb usb9-port1: unable to enumerate USB device [ 220.956561][ T40] audit: type=1400 audit(1774071511.563:44497): avc: denied { write } for pid=15724 comm="syz.7.2710" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 221.393868][ T2298] hid (null): report_id 0 is invalid [ 221.398509][T15756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15756 comm=syz.7.2716 [ 221.404680][ T2298] hid-generic 0009:0FFF:001E.0005: unknown main item tag 0x1 [ 221.407121][ T2298] hid-generic 0009:0FFF:001E.0005: unknown main item tag 0x5 [ 221.412106][ T2298] hid-generic 0009:0FFF:001E.0005: unknown main item tag 0x3 [ 221.414482][ T2298] hid-generic 0009:0FFF:001E.0005: unexpected long global item [ 221.417153][ T2298] hid-generic 0009:0FFF:001E.0005: probe with driver hid-generic failed with error -22 [ 221.513930][T15759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15759 comm=syz.7.2717 [ 221.591681][T15763] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 221.598564][T15763] romfs: unable to set blocksize [ 221.598564][T15763] [ 221.636538][ T40] audit: type=1400 audit(1774071512.243:44498): avc: denied { read write } for pid=15764 comm="syz.7.2720" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.648873][ T40] audit: type=1400 audit(1774071512.253:44499): avc: denied { open } for pid=15764 comm="syz.7.2720" path="/190/file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.956321][T15778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15778 comm=syz.7.2724 [ 222.192593][ T40] audit: type=1400 audit(1774071512.803:44500): avc: denied { read } for pid=15808 comm="syz.4.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.307901][T15822] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 222.320554][T15822] bond1: entered promiscuous mode [ 222.322570][T15822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.335855][T15822] bond1: (slave bridge5): making interface the new active one [ 222.339721][T15822] bridge5: entered promiscuous mode [ 222.342989][T15822] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 222.353963][T15823] ntfs3(sr0): try to read out of volume at offset 0x0 [ 222.362106][T15822] ntfs3(sr0): try to read out of volume at offset 0x0 [ 222.385466][T15830] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2736' resets device [ 222.397225][T15830] netlink: 'syz.4.2736': attribute type 21 has an invalid length. [ 222.462505][T15834] __nla_validate_parse: 2 callbacks suppressed [ 222.462516][T15834] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2736'. [ 222.741840][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2737'. [ 223.249421][T15874] CUSE: info not properly terminated [ 223.506388][ T40] audit: type=1400 audit(1774071514.113:44501): avc: denied { write } for pid=15897 comm="syz.4.2743" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 223.544425][T15905] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2744'. [ 223.958938][ T2298] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 224.117450][ T2298] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid maxpacket 252, setting to 64 [ 224.121032][ T2298] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.124867][ T2298] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.127796][ T2298] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.130852][ T2298] usb 9-1: Product: syz [ 224.132252][ T2298] usb 9-1: Manufacturer: syz [ 224.133741][ T2298] usb 9-1: SerialNumber: syz [ 224.136512][ T2298] usb 9-1: config 0 descriptor?? [ 224.144603][ T2298] usb 9-1: selecting invalid altsetting 0 [ 224.348612][ T2298] usb 9-1: USB disconnect, device number 13 [ 224.970767][T15976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15976 comm=syz.4.2748 [ 225.025469][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.032441][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.036397][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.048021][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.055862][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.084112][T15979] Failed to initialize the IGMP autojoin socket (err -2) [ 225.181680][T15991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 225.184445][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.187729][T15991] vhci_hcd vhci_hcd.0: Device attached [ 225.198070][T15996] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 225.200204][T15996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.203617][T15996] vhci_hcd vhci_hcd.0: Device attached [ 225.206245][T15997] vhci_hcd: connection closed [ 225.206401][ T46] vhci_hcd vhci_hcd.4: stop threads [ 225.206424][T15992] vhci_hcd: connection closed [ 225.207983][ T46] vhci_hcd vhci_hcd.4: release socket [ 225.208001][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 225.217671][ T219] vhci_hcd vhci_hcd.4: stop threads [ 225.220472][ T219] vhci_hcd vhci_hcd.4: release socket [ 225.222293][ T219] vhci_hcd vhci_hcd.4: disconnect device [ 225.338462][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.343136][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.347108][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.354106][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.356849][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.376393][T16005] Failed to initialize the IGMP autojoin socket (err -2) [ 225.685102][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.689185][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.693907][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.698594][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.702079][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.726215][T16021] Failed to initialize the IGMP autojoin socket (err -2) [ 225.810462][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.815460][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.820708][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 225.926082][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.930186][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.935666][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 225.956221][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2759'. [ 225.965042][T16052] team0: Failed to send options change via netlink (err -105) [ 225.967592][T16052] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 225.971196][T16052] team0: Port device team_slave_0 removed [ 226.073483][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.077567][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.082536][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.086218][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.086250][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.090393][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 226.097449][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.101692][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.117159][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2761'. [ 226.133790][T16062] Failed to initialize the IGMP autojoin socket (err -2) [ 226.175144][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.180289][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.184812][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 226.361387][T16076] can: request_module (can-proto-5) failed. [ 226.642685][ T46] batman_adv: batadv0: Removing interface: gretap1 [ 226.662674][ T46] bond4 (unregistering): (slave geneve2): Releasing active interface [ 226.747693][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.754131][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.761443][ T46] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 226.766922][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 226.772211][ T46] bond0 (unregistering): Released all slaves [ 226.780447][ T46] bond1 (unregistering): Released all slaves [ 226.790294][ T46] bond2 (unregistering): Released all slaves [ 226.800782][ T46] bond3 (unregistering): Released all slaves [ 226.810393][ T46] bond4 (unregistering): Released all slaves [ 226.821557][ T46] bond5 (unregistering): Released all slaves [ 226.832742][ T46] bond6 (unregistering): Released all slaves [ 226.850222][ T46] bond7 (unregistering): Released all slaves [ 227.108230][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.114961][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.119113][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.123670][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.127585][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.151153][T16110] Failed to initialize the IGMP autojoin socket (err -2) [ 227.356128][ T46] hsr_slave_0: left promiscuous mode [ 227.360176][ T46] hsr_slave_1: left promiscuous mode [ 227.362489][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.365129][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.368433][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.371298][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.378338][ T46] veth1_macvtap: left promiscuous mode [ 227.380787][ T46] veth0_macvtap: left promiscuous mode [ 227.382856][ T46] veth1_vlan: left promiscuous mode [ 227.384682][ T46] veth0_vlan: left promiscuous mode [ 227.527421][ T46] team0 (unregistering): Port device team_slave_1 removed [ 227.535970][ T46] team0 (unregistering): Port device team_slave_0 removed [ 227.548916][ T5932] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 227.552260][ T5932] Bluetooth: hci5: Injecting HCI hardware error event [ 227.557716][ T5291] Bluetooth: hci5: hardware error 0x00 [ 227.677462][T16142] 9p: Bad value for 'rfdno' [ 228.313053][T16180] exFAT-fs (nbd4): unable to read boot sector [ 228.316119][T16180] exFAT-fs (nbd4): failed to read boot sector [ 228.320705][T16180] exFAT-fs (nbd4): failed to recognize exfat type [ 228.321911][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.333302][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.337050][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.340649][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.343299][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.367001][T16181] Failed to initialize the IGMP autojoin socket (err -2) [ 228.385242][T16189] overlayfs: missing 'lowerdir' [ 228.539494][T16196] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.200727][ T40] audit: type=1400 audit(1774071519.803:44502): avc: denied { mounton } for pid=16275 comm="syz.7.2778" path="/203/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 229.201950][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.210301][ T40] audit: type=1400 audit(1774071519.803:44503): avc: denied { read } for pid=16275 comm="syz.7.2778" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 229.221757][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.225015][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.229969][ T40] audit: type=1400 audit(1774071519.843:44504): avc: denied { unmount } for pid=13236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 229.235782][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.240070][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.251554][T16280] block nbd7: NBD_DISCONNECT [ 229.271891][T16280] bond5: ARP target 9.0.0.0 is already present [ 229.273998][T16280] bond5: option arp_ip_target: invalid value (9) [ 229.276795][T16280] bond5 (unregistering): Released all slaves [ 229.291412][T16277] Failed to initialize the IGMP autojoin socket (err -2) [ 229.372880][T16283] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2780'. [ 229.378074][ T40] audit: type=1400 audit(1774071519.983:44505): avc: denied { listen } for pid=16282 comm="syz.7.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 229.446325][ T40] audit: type=1400 audit(1774071520.053:44506): avc: denied { create } for pid=16290 comm="syz.7.2782" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.618895][ T5291] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 230.233011][T16299] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2783'. [ 230.299726][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.303137][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.307531][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.318989][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.323200][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.343567][T16306] Failed to initialize the IGMP autojoin socket (err -2) [ 230.373803][T16298] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2784'. [ 230.457099][T16319] Failed to initialize the IGMP autojoin socket (err -2) [ 230.510579][T16322] netlink: 'syz.7.2788': attribute type 4 has an invalid length. [ 230.513098][T16322] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2788'. [ 230.628792][ T2298] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 230.788857][ T2298] usb 9-1: Invalid ep0 maxpacket: 64 [ 230.938780][ T2298] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 231.108832][ T2298] usb 9-1: Invalid ep0 maxpacket: 64 [ 231.113160][ T2298] usb usb9-port1: attempt power cycle [ 231.410084][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.414825][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.418586][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.423652][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.428522][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.443152][T16349] Failed to initialize the IGMP autojoin socket (err -2) [ 231.468727][ T2298] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 231.501733][ T2298] usb 9-1: Invalid ep0 maxpacket: 64 [ 231.638794][ T2298] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 231.659360][ T2298] usb 9-1: Invalid ep0 maxpacket: 64 [ 231.663282][ T2298] usb usb9-port1: unable to enumerate USB device [ 232.621376][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.626852][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.631897][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.640410][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.644481][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.659504][T16362] Failed to initialize the IGMP autojoin socket (err -2) [ 232.712752][T16367] netlink: 'syz.7.2797': attribute type 1 has an invalid length. [ 232.726505][T16367] bond5: entered promiscuous mode [ 232.728420][T16367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.911105][ T40] audit: type=1400 audit(1774071524.523:44507): avc: denied { map } for pid=16384 comm="syz.7.2800" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.922969][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.925455][ T40] audit: type=1400 audit(1774071524.523:44508): avc: denied { read write } for pid=16384 comm="syz.7.2800" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.936476][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.945595][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.950687][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.953217][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.967926][T16387] Failed to initialize the IGMP autojoin socket (err -2) [ 235.357308][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.361572][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.364692][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.373617][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.377125][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.399260][T16431] Failed to initialize the IGMP autojoin socket (err -2) [ 235.417915][T16439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2805'. [ 235.506693][ T40] audit: type=1400 audit(1774071526.113:44509): avc: denied { unmount } for pid=16447 comm="syz.4.2807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 236.845269][T16487] netlink: 'syz.4.2810': attribute type 1 has an invalid length. [ 236.861135][T16487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.873430][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.880425][T16487] bond3: (slave geneve2): Opening slave failed [ 236.880550][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.887550][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.892537][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.895297][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.907068][T16490] Failed to initialize the IGMP autojoin socket (err -2) [ 237.081097][ T40] audit: type=1400 audit(1774071527.693:44510): avc: denied { recv } for pid=16481 comm="syz-executor" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.109044][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 237.270473][ T24] usb 12-1: config 0 has no interfaces? [ 237.272492][ T24] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 237.275439][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.280119][ T24] usb 12-1: config 0 descriptor?? [ 237.513168][T16483] tmpfs: Cannot change global quota limit on remount [ 237.686013][ T5992] usb 12-1: USB disconnect, device number 7 [ 238.439389][T16510] netlink: 'syz.7.2813': attribute type 1 has an invalid length. [ 238.472657][ T5291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.479231][ T5291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.482693][ T5291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.486453][ T5291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.490648][ T5291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.509915][T16511] Failed to initialize the IGMP autojoin socket (err -2) [ 240.150811][ T40] audit: type=1400 audit(1774071530.763:44511): avc: denied { write } for pid=16584 comm="syz.4.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.164986][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.169798][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.173093][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.175828][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.178250][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.201681][T16589] Failed to initialize the IGMP autojoin socket (err -2) [ 240.228856][T16600] 9p: Bad value for 'wfdno' [ 240.488793][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 240.648918][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 240.651728][ T24] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 240.654590][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.662483][ T24] usb 9-1: config 0 descriptor?? [ 240.673906][ T24] as10x_usb: device has been detected [ 240.675919][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 240.690052][ T24] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 240.712323][ T24] as10x_usb: error during firmware upload part1 [ 240.714570][ T24] Registered device nBox DVB-T Dongle [ 240.869052][ T7176] usb 9-1: USB disconnect, device number 18 [ 240.888590][ T7176] Unregistered device nBox DVB-T Dongle [ 240.890573][ T7176] as10x_usb: device has been disconnected [ 241.893990][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2827'. [ 241.902755][T16678] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 241.906042][T16678] gretap1: entered promiscuous mode [ 241.907659][T16678] gretap1: entered allmulticast mode [ 241.959536][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.964266][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.967081][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.970058][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.973352][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.979754][T16689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2829'. [ 242.001240][T16686] Failed to initialize the IGMP autojoin socket (err -2) [ 242.153155][T16685] netfs: Couldn't get user pages (rc=-14) [ 242.155580][ T40] audit: type=1400 audit(1774071532.763:44512): avc: denied { ioctl } for pid=16698 comm="syz.4.2831" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=73447 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.299727][T16685] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2828'. [ 243.851065][T16783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2832'. [ 243.877263][ T40] audit: type=1400 audit(1774071534.483:44513): avc: denied { write } for pid=16782 comm="syz.7.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.891848][T16792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 243.904446][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.909293][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.913199][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.920622][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.926651][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.946795][T16793] Failed to initialize the IGMP autojoin socket (err -2) [ 244.016035][T16805] bond0: (slave nr0): Error: Device type is different from other slaves [ 245.878602][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.883294][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.886913][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.889705][T16889] netlink: 208 bytes leftover after parsing attributes in process `syz.7.2838'. [ 245.892919][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.896320][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.896392][T16889] overlayfs: failed to resolve './file0': -2 [ 245.904419][T16889] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.909407][T16889] overlayfs: missing 'lowerdir' [ 245.912663][T16899] Failed to initialize the IGMP autojoin socket (err -2) [ 246.030057][T16905] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 247.996352][ T40] audit: type=1400 audit(1774071538.603:44514): avc: denied { accept } for pid=16924 comm="syz.4.2845" path="socket:[72545]" dev="sockfs" ino=72545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.015421][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.022168][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.026134][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.030725][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.034332][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.052596][T16933] Failed to initialize the IGMP autojoin socket (err -2) [ 248.144082][ T40] audit: type=1400 audit(1774071538.753:44515): avc: denied { ioctl } for pid=16949 comm="syz.4.2850" path="socket:[73643]" dev="sockfs" ino=73643 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.138271][T16955] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2851'. [ 250.200906][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.205851][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.216638][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.232133][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.236865][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.262977][T16960] Failed to initialize the IGMP autojoin socket (err -2) [ 250.312943][T16973] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2859'. [ 250.316063][T16973] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2859'. [ 250.322011][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2859'. [ 250.324216][T16974] overlayfs: failed to resolve './file0': -2 [ 250.429904][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2860'. [ 252.490998][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 252.524759][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.528094][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.531728][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.535604][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.541575][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.563025][T16997] vivid-004: disconnect [ 252.563286][T16993] Failed to initialize the IGMP autojoin socket (err -2) [ 252.572302][T16996] vivid-004: reconnect [ 252.583786][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.587151][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.597644][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.600795][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.603486][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.628543][T16999] Failed to initialize the IGMP autojoin socket (err -2) [ 252.780168][ T40] audit: type=1400 audit(1774071543.393:44516): avc: denied { listen } for pid=17006 comm="syz.7.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.011020][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 253.062070][ T40] audit: type=1400 audit(1774071543.673:44517): avc: denied { create } for pid=17006 comm="syz.7.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 253.077107][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.082613][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.085612][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.088503][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.091187][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.115744][T17041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.121068][T17036] Failed to initialize the IGMP autojoin socket (err -2) [ 253.138893][T17041] block device autoloading is deprecated and will be removed. [ 253.159376][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'. [ 253.163246][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'. [ 253.168490][ T40] audit: type=1400 audit(1774071543.773:44518): avc: denied { write } for pid=17006 comm="syz.7.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 253.194739][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2868'. [ 253.264749][T17006] [ 253.265603][T17006] ========================= [ 253.267090][T17006] WARNING: held lock freed! [ 253.268594][T17006] syzkaller #0 Tainted: G L [ 253.270614][T17006] ------------------------- [ 253.272089][T17006] syz.7.2865/17006 is freeing memory ffff88802dba4000-ffff88802dba47ff, with a lock still held there! [ 253.275546][T17006] ffff88802dba4260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x244/0x690 [ 253.279066][T17006] 3 locks held by syz.7.2865/17006: [ 253.280747][T17006] #0: ffff888057635288 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 253.284120][T17006] #1: ffff88802b4a6260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP/2){+.+.}-{0:0}, at: l2cap_sock_release+0x61/0x280 [ 253.287838][T17006] #2: ffff88802dba4260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x244/0x690 [ 253.291500][T17006] [ 253.291500][T17006] stack backtrace: [ 253.293408][T17006] CPU: 3 UID: 0 PID: 17006 Comm: syz.7.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.293424][T17006] Tainted: [L]=SOFTLOCKUP [ 253.293428][T17006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.293435][T17006] Call Trace: [ 253.293438][T17006] [ 253.293442][T17006] dump_stack_lvl+0x100/0x190 [ 253.293460][T17006] debug_check_no_locks_freed+0x115/0x120 [ 253.293478][T17006] ? __sk_destruct+0x8ab/0xbb0 [ 253.293489][T17006] kfree+0x18b/0x6b0 [ 253.293503][T17006] __sk_destruct+0x8ab/0xbb0 [ 253.293514][T17006] ? do_raw_spin_lock+0x128/0x260 [ 253.293526][T17006] sk_destruct+0xc8/0xf0 [ 253.293537][T17006] __sk_free+0xf4/0x3e0 [ 253.293549][T17006] sk_free+0x61/0x90 [ 253.293560][T17006] bt_accept_unlink+0x1e4/0x2f0 [ 253.293572][T17006] bt_accept_dequeue+0x576/0x690 [ 253.293584][T17006] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 253.293599][T17006] l2cap_sock_release+0x69/0x280 [ 253.293615][T17006] __sock_release+0xb3/0x260 [ 253.293629][T17006] ? __pfx_sock_close+0x10/0x10 [ 253.293643][T17006] sock_close+0x1c/0x30 [ 253.293656][T17006] __fput+0x3ff/0xb40 [ 253.293669][T17006] task_work_run+0x150/0x240 [ 253.293681][T17006] ? __pfx_task_work_run+0x10/0x10 [ 253.293693][T17006] exit_to_user_mode_loop+0x100/0x4a0 [ 253.293705][T17006] do_syscall_64+0x67c/0xf80 [ 253.293719][T17006] ? clear_bhb_loop+0x40/0x90 [ 253.293731][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.293742][T17006] RIP: 0033:0x7f962119c799 [ 253.293752][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.293762][T17006] RSP: 002b:00007fff0e6b06f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 253.293772][T17006] RAX: 0000000000000000 RBX: 00007fff0e6b07e0 RCX: 00007f962119c799 [ 253.293779][T17006] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 253.293785][T17006] RBP: 000000000003da52 R08: 0000000000000001 R09: 0000000000000000 [ 253.293792][T17006] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007fff0e6b0820 [ 253.293798][T17006] R13: 00007f9621415fac R14: 000000000003dd13 R15: 00007f9621415fa0 [ 253.293808][T17006] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.376282][T16993] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 253.381652][ T40] audit: type=1400 audit(1774071543.983:44519): avc: denied { write } for pid=5871 comm="syz-executor" path="pipe:[6551]" dev="pipefs" ino=6551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 253.383147][T17006] ================================================================== [ 253.391624][T17006] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 253.394158][T17006] Read of size 4 at addr ffff88802dba41cc by task syz.7.2865/17006 [ 253.396689][T17006] [ 253.397499][T17006] CPU: 3 UID: 0 PID: 17006 Comm: syz.7.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.397516][T17006] Tainted: [L]=SOFTLOCKUP [ 253.397520][T17006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.397527][T17006] Call Trace: [ 253.397531][T17006] [ 253.397535][T17006] dump_stack_lvl+0x100/0x190 [ 253.397554][T17006] print_report+0x156/0x4c9 [ 253.397570][T17006] ? __virt_addr_valid+0x81/0x620 [ 253.397587][T17006] ? __phys_addr+0xe8/0x180 [ 253.397602][T17006] ? do_raw_spin_lock+0x23b/0x260 [ 253.397614][T17006] kasan_report+0xdf/0x1e0 [ 253.397625][T17006] ? do_raw_spin_lock+0x23b/0x260 [ 253.397638][T17006] do_raw_spin_lock+0x23b/0x260 [ 253.397650][T17006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.397663][T17006] ? sk_destruct+0xcd/0xf0 [ 253.397676][T17006] release_sock+0x21/0x220 [ 253.397690][T17006] bt_accept_dequeue+0x564/0x690 [ 253.397703][T17006] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 253.397721][T17006] l2cap_sock_release+0x69/0x280 [ 253.397736][T17006] __sock_release+0xb3/0x260 [ 253.397751][T17006] ? __pfx_sock_close+0x10/0x10 [ 253.397765][T17006] sock_close+0x1c/0x30 [ 253.397778][T17006] __fput+0x3ff/0xb40 [ 253.397792][T17006] task_work_run+0x150/0x240 [ 253.397804][T17006] ? __pfx_task_work_run+0x10/0x10 [ 253.397817][T17006] exit_to_user_mode_loop+0x100/0x4a0 [ 253.397828][T17006] do_syscall_64+0x67c/0xf80 [ 253.397843][T17006] ? clear_bhb_loop+0x40/0x90 [ 253.397856][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.397867][T17006] RIP: 0033:0x7f962119c799 [ 253.397876][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.397887][T17006] RSP: 002b:00007fff0e6b06f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 253.397899][T17006] RAX: 0000000000000000 RBX: 00007fff0e6b07e0 RCX: 00007f962119c799 [ 253.397906][T17006] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 253.397912][T17006] RBP: 000000000003da52 R08: 0000000000000001 R09: 0000000000000000 [ 253.397919][T17006] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007fff0e6b0820 [ 253.397926][T17006] R13: 00007f9621415fac R14: 000000000003dd13 R15: 00007f9621415fa0 [ 253.397936][T17006] [ 253.397939][T17006] [ 253.473847][T17006] Allocated by task 5939: [ 253.475275][T17006] kasan_save_stack+0x30/0x50 [ 253.476825][T17006] kasan_save_track+0x14/0x30 [ 253.478366][T17006] __kasan_kmalloc+0xaa/0xb0 [ 253.479879][T17006] __kmalloc_noprof+0x301/0x850 [ 253.481464][T17006] sk_prot_alloc+0x10b/0x2a0 [ 253.482983][T17006] sk_alloc+0x36/0xe80 [ 253.484325][T17006] bt_sock_alloc+0x3b/0x3a0 [ 253.485803][T17006] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 253.487687][T17006] l2cap_sock_new_connection_cb+0x101/0x260 [ 253.489628][T17006] l2cap_connect_cfm+0x4e2/0x1050 [ 253.491271][T17006] hci_remote_features_evt+0x4f4/0x9b0 [ 253.493044][T17006] hci_event_packet+0xa86/0x11c0 [ 253.494679][T17006] hci_rx_work+0x451/0xfc0 [ 253.496140][T17006] process_one_work+0xa23/0x19a0 [ 253.497749][T17006] worker_thread+0x5ef/0xe50 [ 253.499248][T17006] kthread+0x370/0x450 [ 253.500593][T17006] ret_from_fork+0x754/0xd80 [ 253.502116][T17006] ret_from_fork_asm+0x1a/0x30 [ 253.503684][T17006] [ 253.504504][T17006] Freed by task 17006: [ 253.505826][T17006] kasan_save_stack+0x30/0x50 [ 253.507349][T17006] kasan_save_track+0x14/0x30 [ 253.508900][T17006] kasan_save_free_info+0x3b/0x70 [ 253.510559][T17006] __kasan_slab_free+0x5f/0x80 [ 253.512133][T17006] kfree+0x1f6/0x6b0 [ 253.513416][T17006] __sk_destruct+0x8ab/0xbb0 [ 253.514942][T17006] sk_destruct+0xc8/0xf0 [ 253.516334][T17006] __sk_free+0xf4/0x3e0 [ 253.517694][T17006] sk_free+0x61/0x90 [ 253.518985][T17006] bt_accept_unlink+0x1e4/0x2f0 [ 253.520583][T17006] bt_accept_dequeue+0x576/0x690 [ 253.522204][T17006] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 253.524006][T17006] l2cap_sock_release+0x69/0x280 [ 253.525682][T17006] __sock_release+0xb3/0x260 [ 253.527183][T17006] sock_close+0x1c/0x30 [ 253.528566][T17006] __fput+0x3ff/0xb40 [ 253.530039][T17006] task_work_run+0x150/0x240 [ 253.531631][T17006] exit_to_user_mode_loop+0x100/0x4a0 [ 253.533400][T17006] do_syscall_64+0x67c/0xf80 [ 253.534913][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.536834][T17006] [ 253.537633][T17006] The buggy address belongs to the object at ffff88802dba4000 [ 253.537633][T17006] which belongs to the cache kmalloc-2k of size 2048 [ 253.542050][T17006] The buggy address is located 460 bytes inside of [ 253.542050][T17006] freed 2048-byte region [ffff88802dba4000, ffff88802dba4800) [ 253.546390][T17006] [ 253.547171][T17006] The buggy address belongs to the physical page: [ 253.549221][T17006] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802dba3000 pfn:0x2dba0 [ 253.552398][T17006] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.555219][T17006] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 253.557895][T17006] page_type: f5(slab) [ 253.559185][T17006] raw: 00fff00000000240 ffff88801b842f00 ffffea0001637210 ffffea0000a57610 [ 253.561877][T17006] raw: ffff88802dba3000 0000000800080006 00000000f5000000 0000000000000000 [ 253.564653][T17006] head: 00fff00000000240 ffff88801b842f00 ffffea0001637210 ffffea0000a57610 [ 253.567416][T17006] head: ffff88802dba3000 0000000800080006 00000000f5000000 0000000000000000 [ 253.570179][T17006] head: 00fff00000000003 ffffea0000b6e801 00000000ffffffff 00000000ffffffff [ 253.572946][T17006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 253.575815][T17006] page dumped because: kasan: bad access detected [ 253.577882][T17006] page_owner tracks the page as allocated [ 253.579721][T17006] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6872, tgid 6872 (kworker/u32:35), ts 206515335739, free_ts 206440258164 [ 253.586500][T17006] post_alloc_hook+0x153/0x170 [ 253.588100][T17006] get_page_from_freelist+0x111d/0x3140 [ 253.589918][T17006] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 253.591845][T17006] new_slab+0xa6/0x6b0 [ 253.593195][T17006] refill_objects+0x26b/0x400 [ 253.594741][T17006] __pcs_replace_empty_main+0x1ab/0x660 [ 253.596547][T17006] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 253.598619][T17006] kmalloc_reserve+0xe8/0x350 [ 253.600169][T17006] pskb_expand_head+0x246/0xfe0 [ 253.601788][T17006] netlink_trim+0x22d/0x2f0 [ 253.603293][T17006] netlink_broadcast_filtered+0xd7/0xf50 [ 253.605157][T17006] nlmsg_notify+0xb1/0x290 [ 253.606569][T17006] rtmsg_ifinfo+0x177/0x1b0 [ 253.607999][T17006] netif_state_change+0x17f/0x380 [ 253.609534][T17006] linkwatch_do_dev+0xdb/0x110 [ 253.611059][T17006] __linkwatch_run_queue+0x3a9/0x900 [ 253.612725][T17006] page last free pid 14789 tgid 14789 stack trace: [ 253.614799][T17006] __free_frozen_pages+0x7e1/0x10d0 [ 253.616477][T17006] qlist_free_all+0x47/0xe0 [ 253.617966][T17006] kasan_quarantine_reduce+0x1a0/0x1f0 [ 253.619715][T17006] __kasan_slab_alloc+0x69/0x90 [ 253.621368][T17006] kmem_cache_alloc_noprof+0x241/0x6e0 [ 253.623167][T17006] taskstats_exit+0x650/0xbd0 [ 253.624751][T17006] do_exit+0x659/0x2b60 [ 253.626131][T17006] do_group_exit+0xd5/0x2a0 [ 253.627635][T17006] __x64_sys_exit_group+0x3e/0x50 [ 253.629297][T17006] x64_sys_call+0x102c/0x1530 [ 253.630852][T17006] do_syscall_64+0x106/0xf80 [ 253.632387][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.634355][T17006] [ 253.635168][T17006] Memory state around the buggy address: [ 253.637016][T17006] ffff88802dba4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.639587][T17006] ffff88802dba4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.642174][T17006] >ffff88802dba4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.644755][T17006] ^ [ 253.646854][T17006] ffff88802dba4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.649469][T17006] ffff88802dba4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.652078][T17006] ================================================================== [ 253.654729][T17006] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.657075][T17006] CPU: 3 UID: 0 PID: 17006 Comm: syz.7.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.660595][T17006] Tainted: [L]=SOFTLOCKUP [ 253.662034][T17006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.665511][T17006] Call Trace: [ 253.666621][T17006] [ 253.667607][T17006] dump_stack_lvl+0x100/0x190 [ 253.669185][T17006] vpanic+0x552/0x970 [ 253.670508][T17006] ? __pfx_vpanic+0x10/0x10 [ 253.672018][T17006] ? __pfx_vprintk_emit+0x10/0x10 [ 253.673671][T17006] ? rcu_is_watching+0x12/0xc0 [ 253.675262][T17006] ? do_raw_spin_lock+0x23b/0x260 [ 253.676926][T17006] panic+0xd1/0xe0 [ 253.678172][T17006] ? __pfx_panic+0x10/0x10 [ 253.679646][T17006] ? check_panic_on_warn+0x1f/0x90 [ 253.681336][T17006] check_panic_on_warn.cold+0x19/0x34 [ 253.683107][T17006] end_report.part.0+0x3a/0x90 [ 253.684718][T17006] kasan_report.cold+0xe/0x18 [ 253.686243][T17006] ? do_raw_spin_lock+0x23b/0x260 [ 253.687899][T17006] do_raw_spin_lock+0x23b/0x260 [ 253.689491][T17006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.691259][T17006] ? sk_destruct+0xcd/0xf0 [ 253.692751][T17006] release_sock+0x21/0x220 [ 253.694234][T17006] bt_accept_dequeue+0x564/0x690 [ 253.695899][T17006] l2cap_sock_cleanup_listen+0x5c/0x2d0 [ 253.697681][T17006] l2cap_sock_release+0x69/0x280 [ 253.699279][T17006] __sock_release+0xb3/0x260 [ 253.700769][T17006] ? __pfx_sock_close+0x10/0x10 [ 253.702360][T17006] sock_close+0x1c/0x30 [ 253.703688][T17006] __fput+0x3ff/0xb40 [ 253.704972][T17006] task_work_run+0x150/0x240 [ 253.706423][T17006] ? __pfx_task_work_run+0x10/0x10 [ 253.708036][T17006] exit_to_user_mode_loop+0x100/0x4a0 [ 253.709789][T17006] do_syscall_64+0x67c/0xf80 [ 253.711299][T17006] ? clear_bhb_loop+0x40/0x90 [ 253.712811][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.714704][T17006] RIP: 0033:0x7f962119c799 [ 253.716178][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.722295][T17006] RSP: 002b:00007fff0e6b06f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 253.724954][T17006] RAX: 0000000000000000 RBX: 00007fff0e6b07e0 RCX: 00007f962119c799 [ 253.727452][T17006] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 253.729968][T17006] RBP: 000000000003da52 R08: 0000000000000001 R09: 0000000000000000 [ 253.732462][T17006] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007fff0e6b0820 [ 253.734938][T17006] R13: 00007f9621415fac R14: 000000000003dd13 R15: 00007f9621415fa0 [ 253.737435][T17006] [ 253.739121][T17006] Kernel Offset: disabled [ 253.740524][T17006] Rebooting in 86400 seconds..