last executing test programs: 1m0.282685826s ago: executing program 0 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) fgetxattr(r4, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/72, 0x48) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) 1m0.281674736s ago: executing program 0 (id=866): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4500000010004b0401800000002300007a000000", @ANYRESHEX=r0, @ANYBLOB="4800000000000000240012", @ANYRESHEX=r1, @ANYRES32=r1], 0x44}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(hmac(sha256),cts(cbc(aes)))\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5c", 0x47}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="14001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f40000000011400005320446ba02a3255709e0476c5e6562af309b5d9fa38a048fa3fe1a405fe285eb3c70caeda9597efff", @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x88080}, 0x20004000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) r5 = socket$inet6(0xa, 0xa, 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x24242, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000002c0)=0xc868) setns(0xc9, 0x8000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0003210000a99a00080004000025000008001b"], 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x15, 0x1, 0x0, 0x1, 0x81, 0x8002}, 0x20) 1m0.151171062s ago: executing program 0 (id=867): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000300)={0x200002, 0x200003, 0x804, 0x4, 0x107}) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @opaque="0097985b"}}}}}}, 0x32) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2}}) r4 = syz_io_uring_setup(0x208b, &(0x7f0000000200)={0x0, 0xcb12, 0x10100, 0x3, 0x4001bb}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c616e616d653d9e01680acdf183336791ab5099f456ba50a939a84e092ef50b97c5c4f476e2a65e5c1a2084c72ae3f259c6b8a0a4602607912f9d71b5c253efcf12962be8d0ffff1dc684cfcbab71ca4621332c00"]) r6 = socket$inet(0x2, 0x4, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x8, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xf3, &(0x7f00000005c0)=""/243, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x1, 0x3be}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000840)=r7, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000280)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r8, &(0x7f0000000880)=""/100, 0x64, 0x0, &(0x7f0000000900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80) 59.882576069s ago: executing program 0 (id=868): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000001300)={0x7}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d022abd7700fedbdf2501000000050006008200000005000500040000000800030006000000080004"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 59.882121534s ago: executing program 0 (id=869): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1467, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x0, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x4, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021d, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r9, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r2, 0x100101) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) accept4(r2, 0x0, 0x0, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, &(0x7f0000000200)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x2, 0x0) write(r12, &(0x7f0000000280)='1\n\x00', 0x2) r13 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x3, 0x80) write(r13, &(0x7f0000000300)='bfq\n\x00', 0x4) r14 = syz_io_uring_setup(0xf01, &(0x7f0000000340)={0x0, 0x6005, 0x4, 0x3, 0xffffffff, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) timer_create(0x8, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r15, r16, r17, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) io_uring_enter(r14, 0x1, 0x1, 0x1, 0x0, 0x0) 59.442841458s ago: executing program 0 (id=875): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xc}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe0ced}]}}}]}, 0x50}}, 0x20040040) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) (async, rerun: 64) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async, rerun: 64) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) syz_clone3(&(0x7f0000000680)={0x24184000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) (async) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (rerun: 64) 52.350438037s ago: executing program 1 (id=955): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) 51.442398632s ago: executing program 1 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e", 0x14}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102}}}], 0x20}, 0x24000090) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="41000000de6100001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}}, 0x2006004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setitimer(0x2, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) (async) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') setns(0xc9, 0x0) r7 = socket(0x15, 0x5, 0x5) (async) r8 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000340)={0x0, 0x1c43, 0x2, 0x2, 0xf1}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r8, 0x8000000) (async) listns(&(0x7f0000000b80)={0x20, 0x0, 0xffffffffffffffff, 0x20000}, 0x0, 0xa00, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x42000004, 0x0, 0x0) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r11, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) read$FUSE(r6, &(0x7f00000082c0)={0x2020}, 0x2020) 51.392679326s ago: executing program 1 (id=971): getegid() syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) io_setup(0x2278, &(0x7f0000000180)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c677665000000004400058005001b"], 0x7c}}, 0x24000004) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_GET_IO_FLUSHER(0x3a) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, &(0x7f0000000080), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'veth1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x6c, 0xce, 0x1, 0x50}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ipv6header={{0x28}, {0xa0, 0xac, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x2, 0x1}, {0x1, 0x6, 0x2}, {0x0, 0x5, 0x4}, 0x2, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9, 0xff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'dvmrp1\x00', 'rose0\x00', {}, {0xff}, 0x21, 0x4, 0x4, 0x3}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd23b}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tos={{0x28}, {0xcd, 0x6}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@private=0xa010102, 0x3d, 0x10, 0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffffff, 0xffff00], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'bond_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x6c, 0x5d, 0x5, 0x48}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x67, 0x8, 0x6, 0x4, 0xff, 0x1491, 0x800}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 51.255418525s ago: executing program 1 (id=977): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/iommu\x00', 0x2, 0x0) dup2(r4, 0x64) ioctl(r3, 0x3b76, &(0x7f00000003c0)="10000000000000006400000000") r5 = eventfd(0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000106, 0x0, 0x80000006}]}) dup2(r5, 0x65) ioctl(r3, 0x3b6e, &(0x7f0000000400)="180000002400000002000000000000000100000065") ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl(r3, 0x3b6e, &(0x7f0000000480)="140000002100000002") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 51.014543809s ago: executing program 1 (id=982): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200, 0x1}}, './file0\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x580, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0x7) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0xff01, 0x2) 50.712766413s ago: executing program 1 (id=986): r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x202001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000180)) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c4) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) 50.669105109s ago: executing program 32 (id=986): r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x202001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000180)) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c4) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) 45.069075137s ago: executing program 2 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f00000003c0)) 45.068589534s ago: executing program 2 (id=1053): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x8001, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x7, 0x100, 0xfff, {{0x21, 0x4, 0x0, 0x1a, 0x84, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x7, [{@empty, 0x80}, {@multicast1, 0x6}, {@loopback, 0x7}, {@private=0xa010101, 0xfb}, {@private=0xa010100, 0x9}, {@private=0xa010102, 0x8314}, {@remote, 0x8}, {@multicast2, 0x6}]}, @timestamp={0x44, 0x18, 0x70, 0x0, 0x7, [0xe0a00000, 0x400, 0x865, 0x10001, 0x10]}, @generic={0x86, 0x12, "659043d87315161780d2f6aeff7b9821"}]}}}}}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r8}, 0xffffffa3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x2) 44.912751406s ago: executing program 2 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000800)={0x0, 0x0, 0x1000, 0x40001, 0x7c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0xe680216ac509bf3d) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xb0053, r3, 0x4b5e1000) 44.908345361s ago: executing program 2 (id=1058): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x48}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="66b80500000066b9000001000f01c1ba4000b01a8826d9f6baa100b872513e3667670f01c966b93903000066b803000000baf80c66b8a01b428e66efbafc0ced0f1866b8010000000f32b80c018ec80f20520f326635004000000f30", 0x5c}], 0x1, 0x30, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) r5 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001580)={0x8, 0x0, [{0xa06, 0x0, 0x9}, {0x40000050, 0x0, 0xfffffffffffffffc}, {0x11, 0x0, 0xffffffff81e5d211}, {0x2e5, 0x0, 0xafd1}, {0x2f6, 0x0, 0x5}, {0x972, 0x0, 0x99}, {0x89a, 0x0, 0x8}, {0x865, 0x0, 0x8}]}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) (async) read$eventfd(r6, &(0x7f0000000080), 0x8) write$UHID_INPUT(r4, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bdad, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x62401}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x9}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bdad, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x62401}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x9}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.822622647s ago: executing program 2 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0xffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="73937d34c401b8501aac1ce4ce30c655713dba78a96ffe8e0dba03be3598f397bff2567ffadbc5baa3402550c62c2c5f30a13d18b78611f60323b744cc7f8edd7d9bdcd2e5a31e6c6f174d336bed8085b31d52cf6a186f2ed49a41016c5e1af19fb70c4339b87760", &(0x7f00000002c0), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000e3459d3d000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000010000000000a00000000000000e57c7f25e6dc1ab7ec05392a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000300000000000000fcffffffffffffffffffffffffffffff000000000000000000000000000000000100000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000008400050000000000000000000000000000000000000004d36c0000000200000000000000000000000000000000000000073500000103f90100000001000000000000000064010101000000000000000000000000000004d36c0000000a00000000000000000000000000ffffac1414aa033500000200000009000000470200000f000000"], 0x13c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/48, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7200030000000300", @ANYRES32=r6, @ANYBLOB="10005a800c0000800500020009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r8, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) mprotect(&(0x7f0000114000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000380)='ip6gretap0\x00'}) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x4e22, @remote}}}, 0x88) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ppoll(&(0x7f0000000040)=[{r3, 0x2624}], 0x1, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') lseek(r10, 0x1, 0x0) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000180)) 44.541968123s ago: executing program 2 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x35303553, 0xd93f}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x170, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6c, 0xc, 0x1, 0x1, 0x60, 0x36, 0x36, 0x2, 0x12, 0x12, 0x3, 0x48, 0x9, 0xc, 0x1, 0x5, 0x6, 0x63, 0x1b]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0x2, 0x0, 0x16, 0x60, 0x2, 0x3, 0x33, 0xc0, 0x16, 0x5, 0x16, 0x3, 0x16, 0x5, 0x6, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x1b, 0x9, 0x48, 0x36, 0xc, 0x9, 0x48, 0x60, 0x3, 0x12, 0x60, 0x31, 0x6, 0x1, 0x6, 0x5, 0x60, 0x2, 0x4, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x7, 0x6}, {0x3, 0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xf9b, 0x7, 0x6, 0x37, 0x0, 0x387]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7ff, 0x8, 0x8, 0x9, 0x7, 0x8, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x7}, {0x2, 0x4}, {0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0xe}, {0x4, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x4}, {0x4}, {0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x1, 0x1}]}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x44040) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$CDROMVOLCTRL(r6, 0x309, &(0x7f0000000040)={0x22, 0xfe, 0xdc}) 44.477776534s ago: executing program 33 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x35303553, 0xd93f}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x170, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6c, 0xc, 0x1, 0x1, 0x60, 0x36, 0x36, 0x2, 0x12, 0x12, 0x3, 0x48, 0x9, 0xc, 0x1, 0x5, 0x6, 0x63, 0x1b]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0x2, 0x0, 0x16, 0x60, 0x2, 0x3, 0x33, 0xc0, 0x16, 0x5, 0x16, 0x3, 0x16, 0x5, 0x6, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x1b, 0x9, 0x48, 0x36, 0xc, 0x9, 0x48, 0x60, 0x3, 0x12, 0x60, 0x31, 0x6, 0x1, 0x6, 0x5, 0x60, 0x2, 0x4, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x7, 0x6}, {0x3, 0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xf9b, 0x7, 0x6, 0x37, 0x0, 0x387]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7ff, 0x8, 0x8, 0x9, 0x7, 0x8, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x7}, {0x2, 0x4}, {0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0xe}, {0x4, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x4}, {0x4}, {0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x1, 0x1}]}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40800}, 0x44040) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$CDROMVOLCTRL(r6, 0x309, &(0x7f0000000040)={0x22, 0xfe, 0xdc}) 44.416560973s ago: executing program 34 (id=875): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xc}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe0ced}]}}}]}, 0x50}}, 0x20040040) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) (async, rerun: 64) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async, rerun: 64) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) syz_clone3(&(0x7f0000000680)={0x24184000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) (async) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (rerun: 64) 38.460331604s ago: executing program 4 (id=1126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x201}, @void, @eth={@link_local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xf, 0x2a, 0x64, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xff, 0x0, 0x1}, {"59e0"}}}}}}}, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x201}, @void, @eth={@link_local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xf, 0x2a, 0x64, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xff, 0x0, 0x1}, {"59e0"}}}}}}}, 0x3c) (async) 38.459490293s ago: executing program 4 (id=1128): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x381410c, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x1e) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000088c0)=@getchain={0x2c, 0x66, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe}, {0xb, 0x1}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x8000}]}, 0x2c}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006fc0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xe}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_QUANTUM={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000001}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "3b5788169ab6e92c79dd7552ab620828ca7730060a55db79a98488c74eb82d7b", "1bde893bf37d4e957fee4f3668ea869fc7ebfe084a78dd617e66055e158293bd", "cfe0bd2e327cba312ddff6e60ee84a465107ceedc50cd7ac5779685444ebff16", "fba4fbe79ad928ecddecd03ee81ab5877c03cd11536197c0eb39a4d305621517", "e03c6d77d45ba2fa91779202c68fa76698a73cbf435fbf2d48634c706576e95c", "ee4eb70314e01247c164076d", 0x3171, 0x3, 0x6, 0x0, 0x2}}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f00000004c0)=0xa, 0x4) ftruncate(r8, 0xfffffffffffffff6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffd93860aa7c1bd6117d63144632ffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r8], 0x100}}, 0x0) recvmmsg(r8, &(0x7f0000007b80)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000002580)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x5, &(0x7f0000002600)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003600)=@ethernet, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000003680)=""/170, 0xaa}, {&(0x7f0000003740)=""/58, 0x3a}, {&(0x7f0000003780)=""/234, 0xea}, {&(0x7f0000003880)}, {&(0x7f00000038c0)=""/128, 0x80}, {&(0x7f0000003940)=""/61, 0x3d}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000049c0)=""/206, 0xce}], 0x9, &(0x7f0000004b80)=""/71, 0x47}, 0x5}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004c00)=""/24, 0x18}], 0x1}, 0xb}, {{&(0x7f0000004c80)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000004d00)=""/1, 0x1}, {&(0x7f0000004d40)=""/181, 0xb5}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/185, 0xb9}], 0x5}, 0x10001}, {{&(0x7f0000006f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000007200)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000007040)=""/148, 0x94}, {&(0x7f0000007100)=""/213, 0xd5}], 0x3, &(0x7f0000007240)=""/98, 0x62}, 0xfffffff3}, {{&(0x7f00000072c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007340)=""/66, 0x42}], 0x1, &(0x7f0000007400)=""/124, 0x7c}, 0x8}, {{0x0, 0x0, &(0x7f0000007a00)=[{&(0x7f0000007480)=""/40, 0x28}, {&(0x7f00000074c0)=""/27, 0x1b}, {&(0x7f0000007500)=""/55, 0x37}, {&(0x7f0000007540)=""/144, 0x90}, {&(0x7f0000007600)=""/194, 0xc2}, {&(0x7f0000007700)=""/51, 0x33}, {&(0x7f0000007740)=""/204, 0xcc}, {&(0x7f0000007840)=""/238, 0xee}, {&(0x7f0000007940)=""/132, 0x84}], 0x9, &(0x7f0000007ac0)=""/165, 0xa5}, 0x400}], 0x7, 0x2000, &(0x7f0000007d40)={0x77359400}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f0000007f40)={{&(0x7f0000000380)=[{0x6, 0x40000000, 0x245, {0x5, 0x3b}, 0x8, 0x9, 0x5}, {0x0, 0x2beb, 0x8000, {0x1, 0x6}, 0xaa9, 0x401, 0x9529}, {0x2, 0x1122, 0x94, {0x3, 0x2}, 0x49, 0x0, 0x6}, {0x732, 0x8c, 0x80000001, {0x4}, 0x9dbd, 0xa, 0x7}, {0x2, 0xa, 0x80000000, {0x6, 0xb871}, 0x1, 0x3, 0x92}], 0x5, 0x40, 0xf, 0x9}, {&(0x7f0000007d80)=[{0x3, 0x3}, {0x10000, 0x42}, {0x8, 0x5}, {0x2, 0x7}, {0xffff, 0x5}, {0x2, 0xa}, {0xffffffffffffffff, 0x2}, {0x1, 0x7}, {0x1, 0x6}], 0x9, 0x10, 0x0, 0x7fffffff}, {&(0x7f0000007e40)=[0x62, 0x6], 0x2, 0x8, 0x5, 0x9}, {&(0x7f0000007e80)=[{0x200, 0x9, 0x7, 0x7fffffff, 0xf}, {0xffffffff, 0x0, 0x7fffffff, 0x4, 0x662}, {0x9, 0x8000, 0xfffffffffffffffb, 0x3, 0xbb01}], 0x3, 0x28, 0xc5c, 0x7}, {&(0x7f0000007f00)=[0x4], 0x1, 0x8, 0x4d9, 0xb000000000000000}}) 37.59263137s ago: executing program 4 (id=1133): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') connect$llc(r1, &(0x7f0000000100)={0x1a, 0x30c, 0x7, 0x2, 0x7, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) getdents64(r1, &(0x7f0000000240)=""/44, 0x7a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x10, 0x80800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x7fffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="59884535e16468be92ec7f8af6ec0d76f6d26d5754542fdf5386bacdb7594e92d0c50664a08880e6df78751feaf8227fc917de5f2f4d478f0d9d2c1a0ff082c1a311014f665b4be6f384c2e8cf7a472e18a7950dc38118161bd91b1d586e495f5c365ef2bed75a4f728ee5115951521af2b5f0", 0x73) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) getdents64(r1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x17, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) listen(r0, 0x200) accept4$llc(r0, 0x0, 0x0, 0x80000) 37.542705388s ago: executing program 4 (id=1134): r0 = socket(0x10, 0x803, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2004, 0x15) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x3b, 0x107, 0x70bd31, 0x25dfdbfb, {0x12, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4080) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffdbd, &(0x7f0000000080)={0x0, 0x7c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000390400000000fcffffff00000000", @ANYRES32, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414bb05001500010000000500010100000000"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='inet 2', 0x6) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x2) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x8014) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) 37.54209562s ago: executing program 4 (id=1135): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20002000, 0x0, 0x3a, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x20002000, 0x0, 0x3a, 0x0, 0x0, 0x0) (async) 37.322618796s ago: executing program 4 (id=1136): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0xa, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={r1, "bf04b7570afd29a5854b8e303536c4d8"}) (async) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/221, 0xdd}, {&(0x7f00000016c0)=""/221, 0xdd}], 0x4, 0xffffff80, 0xfff) (async) r2 = accept$phonet_pipe(r0, &(0x7f0000001800), &(0x7f0000001840)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000001880)={0x1, 'veth0_to_hsr\x00', {}, 0x4}) connect$rds(r0, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) fremovexattr(r0, &(0x7f0000001900)=@known='trusted.overlay.upper\x00') ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000001940)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000001980)={0x7, 'bridge_slave_0\x00', {0x7}, 0xe0da}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) fstatfs(r3, &(0x7f00000019c0)=""/98) getdents64(r0, &(0x7f0000001a40)=""/42, 0x2a) (async) r4 = syz_open_dev$mouse(&(0x7f0000001a80), 0x0, 0x21c803) (async) timer_create(0x2, &(0x7f0000001c80)={0x0, 0x2e, 0x1, @thr={&(0x7f0000001ac0)="8a630f0cba6d1ae7fc49f553cd5d05e54f4ac65aecfe0edd1918f885d7403cf015c469a18429b3d0d7bfbcb1035591ce72740549b0a5304bb779b5e2c231ad38a5f1b7e2656b8431d83523a00cb154175d794917daea8efc6f2bbff05350f5701bc0f9e83f1866bd8e6b182d8e7192ee95a39dddc1f1ceb613da0ca0c946a484f50505e64cb7734894439992bedc5b754fb1be168f9e7195c2b08b013e003ccc238cba6e6198c93bce6eb3764ca8b2bdf9fe2be2b387a3f7f0f7e23504c8d973482c7c3e622cde0edac1f27db3941995cdab9e77eb5c1a73f96c", &(0x7f0000001bc0)="d43b7a3919d96b3a2e7666b8057ff3476a970e1f1105f6b5955634dfb6ad3485b63c61f0a0161c91930b48f708ac176428081d723672908ab11f089aec6481e849bc146a357241ee8b8d9e44540eade6c1b3c29db300b577966ae9c2b23863b94318ba10c8629cb2d2ebf5dedb7f42ec122f250a5a81628a003e77c31fe6e98cf27b549d351d3a26b41fc6798a89d1d81a3683d9645df1b536ee2f2801d444caf89135db"}}, &(0x7f0000001cc0)=0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000001d40)={{0x8, 0x2, &(0x7f0000001d00)=[{0x5, 0x0, 0x10000}, {0x2, 0x0, 0x2000000}]}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x92a0, 0xc3, 0xffffffffffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000001d80)={r6}) (async) timer_settime(r5, 0x1, &(0x7f0000001dc0)={{0x77359400}, {0x77359400}}, &(0x7f0000001e00)) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = getuid() quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, r8, &(0x7f0000001e40)={0x7, 0x2, 0x8000000000000001, 0xe, 0x5, 0x8a83, 0xffffffffffffffff, 0x51ee, 0x4}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000001f00)={0x2, 0xfffffffb, &(0x7f0000001ec0)}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000002100)={&(0x7f0000001f40)=[0x0, 0x0, 0x0], &(0x7f0000001f80)=[{}, {}, {}], &(0x7f0000002080)=[0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000002180)={0x40, 0x0, r9, 0xe0e0e0e0}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x48, 0x140e, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000002380)={r10, 0x3, r0}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000023c0)={0x0, @reserved}) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000002480)=@assoc_value={0x0, 0x3}, 0x8) 37.280088539s ago: executing program 35 (id=1136): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0xa, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={r1, "bf04b7570afd29a5854b8e303536c4d8"}) (async) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/221, 0xdd}, {&(0x7f00000016c0)=""/221, 0xdd}], 0x4, 0xffffff80, 0xfff) (async) r2 = accept$phonet_pipe(r0, &(0x7f0000001800), &(0x7f0000001840)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000001880)={0x1, 'veth0_to_hsr\x00', {}, 0x4}) connect$rds(r0, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) fremovexattr(r0, &(0x7f0000001900)=@known='trusted.overlay.upper\x00') ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000001940)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000001980)={0x7, 'bridge_slave_0\x00', {0x7}, 0xe0da}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) fstatfs(r3, &(0x7f00000019c0)=""/98) getdents64(r0, &(0x7f0000001a40)=""/42, 0x2a) (async) r4 = syz_open_dev$mouse(&(0x7f0000001a80), 0x0, 0x21c803) (async) timer_create(0x2, &(0x7f0000001c80)={0x0, 0x2e, 0x1, @thr={&(0x7f0000001ac0)="8a630f0cba6d1ae7fc49f553cd5d05e54f4ac65aecfe0edd1918f885d7403cf015c469a18429b3d0d7bfbcb1035591ce72740549b0a5304bb779b5e2c231ad38a5f1b7e2656b8431d83523a00cb154175d794917daea8efc6f2bbff05350f5701bc0f9e83f1866bd8e6b182d8e7192ee95a39dddc1f1ceb613da0ca0c946a484f50505e64cb7734894439992bedc5b754fb1be168f9e7195c2b08b013e003ccc238cba6e6198c93bce6eb3764ca8b2bdf9fe2be2b387a3f7f0f7e23504c8d973482c7c3e622cde0edac1f27db3941995cdab9e77eb5c1a73f96c", &(0x7f0000001bc0)="d43b7a3919d96b3a2e7666b8057ff3476a970e1f1105f6b5955634dfb6ad3485b63c61f0a0161c91930b48f708ac176428081d723672908ab11f089aec6481e849bc146a357241ee8b8d9e44540eade6c1b3c29db300b577966ae9c2b23863b94318ba10c8629cb2d2ebf5dedb7f42ec122f250a5a81628a003e77c31fe6e98cf27b549d351d3a26b41fc6798a89d1d81a3683d9645df1b536ee2f2801d444caf89135db"}}, &(0x7f0000001cc0)=0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000001d40)={{0x8, 0x2, &(0x7f0000001d00)=[{0x5, 0x0, 0x10000}, {0x2, 0x0, 0x2000000}]}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x92a0, 0xc3, 0xffffffffffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000001d80)={r6}) (async) timer_settime(r5, 0x1, &(0x7f0000001dc0)={{0x77359400}, {0x77359400}}, &(0x7f0000001e00)) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = getuid() quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, r8, &(0x7f0000001e40)={0x7, 0x2, 0x8000000000000001, 0xe, 0x5, 0x8a83, 0xffffffffffffffff, 0x51ee, 0x4}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000001f00)={0x2, 0xfffffffb, &(0x7f0000001ec0)}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000002100)={&(0x7f0000001f40)=[0x0, 0x0, 0x0], &(0x7f0000001f80)=[{}, {}, {}], &(0x7f0000002080)=[0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000002180)={0x40, 0x0, r9, 0xe0e0e0e0}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x48, 0x140e, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000002380)={r10, 0x3, r0}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000023c0)={0x0, @reserved}) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000002480)=@assoc_value={0x0, 0x3}, 0x8) 15.032106203s ago: executing program 5 (id=1437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x5, {0x100000000, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="6464460f090f3348a80000c0fe0000000f23c00f21f835030008000f23f8", 0x1f}], 0x1, 0x5e, 0x0, 0x4c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r5, &(0x7f00000001c0)=""/64, 0xfdef) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000080c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14.749094814s ago: executing program 5 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r0, 0x1277, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r2 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) sendfile(r2, r2, 0x0, 0x800000020) 14.748610243s ago: executing program 5 (id=1443): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) 14.681885801s ago: executing program 5 (id=1445): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@in_dx={0x69, 0x20, {0xf069, 0x1}}], 0x20}) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000600)=""/228, 0xe4, 0x10000, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f00000000c0)=@usbdevfs_driver={0x3, 0x7, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x8400, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x10000000001, 0x8, 0xf30, 0x5, 0x400000000000004, 0x2, 0x10, 0x200000000004, 0x8000000000000000, 0x1, 0x6, 0xd, 0x80000001, 0x4], 0x0, 0x1c4c11}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.592119001s ago: executing program 5 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01e317000000000000534d00000010070000020f000000000000000001050000000000fd000000"], 0x0, 0x2a, 0x0, 0x1}, 0x20) (async) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001"], 0x30}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async, rerun: 64) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) close_range(r8, r7, 0x0) r9 = dup2(r0, r1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r8, 0x1, 0x3, r9}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2}, 0x94) (rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x200000, 0x1000, &(0x7f0000103000/0x1000)=nil}) (async) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r11, 0x8008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="6b24fff9c8733017595328cfdfa4c8b08ab0b028299ad0f13439c8ddf148b8b671cf13c80bd68c5d30ff3e1265bca391fadf62997338a9abc74aa384f4edcb829e9639b051700759f0aca76f9bb8e744ef9075e8e3716ce35ddb5d2421dbf2f0d3e3f523bec9c8e52b2814ebe5675d456f714281a2eac882fabc0bf5b6af73dfa7ab71181544e9ce3da60bbc5717f7f8405674a054517d1e348e2b24bfd2f926f3178af4ab23a4bf06a6f1c15cd7aabc1105804cf93e53442f18c7b718f760d7e2f0241efa14bf93fcc092c1a65e21286d43f1fb01ee143d79d7b9b889965697eb5fc92e33a4a0d69ef4385f967c47e0182edca75bb750878e55db7655b2ba4f9b9d56151db0efb09e83767b186931404b41f8e9a2b5e1f503eb97f126c79bf3fe1031e1"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000000)={0x4, 0x747, 0x0, 0x3}, 0xc) (async, rerun: 32) r13 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) (rerun: 32) ioctl$FE_SET_PROPERTY(r13, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) 14.11211222s ago: executing program 5 (id=1458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010df010000000000000000000a94d6edc1b4d399eafdfa2654d8ff7da72c000000"], 0x28}}, 0x0) r0 = socket(0x2c, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0x2, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r8, &(0x7f0000000040), 0x0}, 0x20) 14.076854994s ago: executing program 36 (id=1458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010df010000000000000000000a94d6edc1b4d399eafdfa2654d8ff7da72c000000"], 0x28}}, 0x0) r0 = socket(0x2c, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0x2, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r8, &(0x7f0000000040), 0x0}, 0x20) 3.981051131s ago: executing program 6 (id=1574): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRESOCT=r0, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000080)={&(0x7f00000000c0)=[r3], 0x0, 0x1, 0x9}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mlock(&(0x7f0000320000/0x3000)=nil, 0x3000) write$sysctl(r4, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffff75, 0x20000) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 2.642239991s ago: executing program 6 (id=1586): setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), 0x4) r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'nicvf0\x00', {0x8}}) read(r0, &(0x7f0000000080)=""/20, 0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2fbf0b0f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) close_range(r3, r0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x242022, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000001580)={&(0x7f0000002000)={[{&(0x7f0000000440)="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", 0x1000, 0x2}, {&(0x7f0000001440)="8c6abccd03bb72ada8ca7eb9db4d41d93291a676e26d6ba9fd9a6b40722c048fcbf85060584c28109b02c2d4ff6a0b76ec08587c867110d7512bc5847b9e7e6da88e423593a59f6ba55103a6a11567590b0689b8ac2b2483374d88fd4a009d945564ca58518a6f5f29c128a958c5b68ba4056cdef9ba4aad6ad263b005300e046e348407c2c004404c2f15b51af37f40172cb518b52f7ed1d7bb5a3f7ad42b9d7daf52824efd4abe5a1fb6c1c02f7c8c1683ba", 0xb3, 0x2}, {&(0x7f0000001500)="b5a214e80cad9a01965b646ebe6781466d585bcb59c2f79df7eabeb9c009f234c550028f244e6789915c235e1db17da2bad6df49316e81ea9df3f9a3add5709fe1e5af55d8dc205588853e4b3b0b", 0x4e, 0x2}]}, 0x3, 0x1, 0x1}, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000015c0)={0x1, [0x0]}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000001600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r4) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x68, r6, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1000, 0x9, 0x4, 0x8}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x90) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000018c0)={r7}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000001900)={0x43, 0x3, 0x2}, 0x10) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000019c0)={&(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000001a80)={0x2, 0x0, &(0x7f0000001a40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001b40)={&(0x7f0000001b00)=[0x0, r10, r11, r12], 0x4, 0x800}) 2.59243423s ago: executing program 6 (id=1588): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0xfffffffffffffc72, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {}, {0x36, 0x6, "0bb6ce1d6756e42707f5ef393c11c44dbe42fe9aa254f66a13365873e4fe6ee4f1901f02d5347d4388ae9950f3d6e1e8c35a"}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellinkprop={0x48, 0x6d, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc020, 0x40080}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4004845) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) (async) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$kcm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f00000000c0)}, 0x20) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x9}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x20004000) (async) socket$netlink(0x10, 0x3, 0x15) 2.528817089s ago: executing program 3 (id=1590): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xb294, 0xc00, 0x5, 0xfd}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="190000001c000104000000010012000002000000", @ANYRES32=0x0, @ANYBLOB="2000ee000a0001000180c2000000000008000f0001000000"], 0x30}}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f00000001c0)={{0x0, @empty, 0x100, 0x80000, 'lc\x00', 0x8, 0x2, 0x1ffffff}, {@private=0xa010106, 0x0, 0x0, 0x4, 0x6, 0xab19}}, 0x44) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x304, 0x6005, 0x6, 0x4, 0x3, @broadcast, "ab7309fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "785321db"}}}}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffaf) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)="303132333a616263643a3010276b", 0xe) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x5, 0x0, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7) 2.527661216s ago: executing program 6 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402900, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0xbcd) 2.431134704s ago: executing program 6 (id=1595): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0xe68, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x9, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe76, 0x1d}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd4c0}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x2}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x2cc6a718}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000440)=""/136, 0x88}], 0x1}, 0x10000003}], 0x1, 0x40010021, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r6 = syz_open_pts(r5, 0x900) r7 = dup3(r6, r5, 0x80000) read$watch_queue(r7, &(0x7f0000000e00)=""/4095, 0xfff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x37, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x29, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}, {"8c"}}}}}}, 0x0) 2.430756067s ago: executing program 3 (id=1596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/212, 0xd4, 0x0, &(0x7f0000000180)=""/233, 0xe9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 2.380477063s ago: executing program 3 (id=1598): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000400)={0x0, 0x0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000300)='devpts\x00', 0x3c94ea, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) write(r1, &(0x7f0000000440)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) (async) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x243, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)="c1e220d8e43b10eefb0386fb", 0xc}, 0x1, 0x0, 0x0, 0x10011}, 0x24002094) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="150000005200090100000000000000001c000000"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="150000005200090100000000000000001c000000"], 0x14}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000002c0)=[@clear_death], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 2.321903963s ago: executing program 3 (id=1600): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @multicast1}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_dest={0x18, 0x114, 0x2, {0x5}}], 0xfffffffffffffd83}, 0x0) 2.251469407s ago: executing program 3 (id=1603): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) r8 = dup(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async, rerun: 64) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r10 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r10, 0x1, 0x1, 0x1, 0x0, 0x0) (async) listen(r0, 0x20010001) 1.652278167s ago: executing program 3 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0xfffffc44, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e25}]}, 0x24}, 0x1, 0x0, 0x0, 0x60044831}, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x7, 0xd29, 0x10, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x66, 0x0, 0x64, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x14, 0x85, 0x0, 0x0, [0x2, 0xff, 0x7f, 0x7ff]}]}}}}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008854) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x4000e, 0x2f) getsockopt$inet6_int(r3, 0x29, 0x48, 0x0, &(0x7f00007d0000)) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='tcp 2049\n', 0x9) 1.551921931s ago: executing program 6 (id=1612): openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0), 0x101000, 0x0) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0), 0x101000, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x80015b1b, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001940)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001940)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) (async) pwritev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pwritev(r8, &(0x7f0000001600)=[{&(0x7f0000000000)="0e7d69d5db4b438c0f", 0x9}, {&(0x7f0000000040)="b8f801288a8784e5fc8196abf5acff28dc41447a", 0x14}, {&(0x7f0000000080)="28b356e290ca34da6f73b56b4925a42091ac22ed2a4a7b24de3fb28823af89e9ced439f7aa16c4573480cd9cdc8314013057de2f6a86b5f91855a29a7ee6054ac572e3c74bb4ca3901708d0c0c52462df3c9d48f618758be5fdea8fd234c9f372faa384ebd4d3337dba0ed27bd1df376bde8d796c2c0f4b446c45aeacdb9b59b08a25876c15e009b6f1537aaac775acad3358a9d0f4df0f014189bbb194b4101cf8049a9074e632081003a982136ab35c6cd941ca52423a3450351918e3ee99045b5fe3e04976c1227e20964d8174528a85061893090fce26b560b92d722dd9acfc16d3b4fc5a602182f043d4a45198ec7b7d434644b", 0xf6}, {&(0x7f0000000300)="5541f5e7fd58748ed91ff2638f05a0868d6979ae138c93766dc81294af234152f9fdca8d29351297d71d984d3c4f51a51a94c3fbbf972d894f285cc3d37a2a1e2a56baab5aad18c18c2b55501cb27a34b35827", 0x53}, {&(0x7f0000000380)="47136c374a1b0f27520d33c3f780f7", 0xf}, {&(0x7f00000003c0)="6a6d524af5a5378a230029c5384f01197c59265b8e8a41bf78368a9726c78d0e337ff9d3a7fa0bfa036bf99040beddaaac4efea0925023137977d235204159f821f6a56e43d9f58393164098cea15bcac6b0f555fbe86e9775d7b3a1d54fe7f000724f05d69c7c03ac8f94e7114647b21ce58ee7aa7164028d15e57085500270641072f665d9c31199fbb09811864007a77d0196643bc9dfe2b637e4e17e9a8c9f0981be58bf3dda0bd975911fe877c361a3dd83b8245ab0c955c91f26309098aaa008097d271e3bc914aaf80a9dbe1087215a7f7775eda3315b9ed279286d08d592b56c8a118fe2172c7e4432df92154323d64bfc1bdb5676f7d279a63138fa6a4fc81550ea96c5c29f0d1d2517b45a0b57989cc61a84763dab24d84f211dd55274033d20e5bfc18d15120dab28f7e5ec62ea8089a112619c9eeadf958b83508d7399b36bcb5294a18584247c4d3523ccb0572dc60138d42b90398c3705d00603146e438933c30e859d94d0954b0ccfc796340ffa8ae2405e975c4d9cad4eea0b93a6ece746e17a3a37c15dca4f2438fb021fc0e755eddbac5414fbd91355c15150844ff984bcc91a7bd86d9016446820bbafa5e2fc05402c9c67b47aaf2e2cc29fa775f0ca4b3dba2e2ee1644ed8e0fa34d09806609374465beccdd6a56d807ec3711f267a8e1da76ea6e4ec07f024dd09f700287864e4240c137c9da76e6b34358665509ca168bff0a5e5063aa7a6c37ce37738923d8fc38d2c365338ae8b78a4a4d5eb18c09e0b00a7e36f7cab6dfeaf38d6b74a04ea1847c06dbbc4e9841041b3063203d6c5b9c3c025efdc9ef087d78fa9dabdd9855799057c472a369f911efa4dd2fd8c5cd4545572db381f4d5f2a70fccdcaf23c440f34bb972259404fc16adc0a0684e6ac57279d0b7a57fa380934383d0b595af20c6de19f2448452ea070629adcd881f2ecede39d35de1b7146a68037681c32a1cd1cadbd770645da70c185415effb1cfc08479fbc2624b12508752e754cdd852a09fb33267bf3df06d2b3571c9712c6ff7f4fd5316ac14fd7f59d55bef5a71d3df53876286938f2d5ec750c0655370be9a9e3265156bcf0f11b93f89ab4d6bbe8910cc1696d25246cb85619f56cd07a46e8537d4124836add3231c4bd9bbf1faa9d3200cdd858000b31bc3e8472d1b16978cf34c4ed92ca7e68caf220d5a4cbd8c3c665727d7093f4fece09370829c2564b62b93fb8441f72abbc1685674ca07f82ca593f90e71c2626790e28d8c7f51571de0e38f0746a33a41f37d1c6821849737bc288fcae56ed1bd9f048f9ffbdf7630e92fd44714f586cd3764d3b103112c7924e86e3be130df892fb4fb77a2cf369db1f9ca47cedb0f80bb0f249f5e482c0e202749ac6ddeb83d6e99c8cf071014fd690356a0ba40102e128b5fa51d8184f2cd10a9d8fe6582cf535917b974ecac4de39da7eeb34bdc03aa4dc5a57f0d254f19e294422d6fb787a909d5e8089aec6a751aef76cd8617638cc133cb1462903b5bdc4192c7f91ef34a97daf66360a08ebf27fc016289f8b4443b4d2c522829132a9bbaba0d622d4bdd4cc4761a3c637242a0fece9a8522c72572d1004629519b09634287fce59bffa7d928f57fcbaedc9c213f660d20fa391fdae677a4c712c4d9a4cc131788564074f753e121e544bd2799c77f52bcfe7b975cdd15f694e5f277136574d933f0d3a034f12f8658679e555d07bb9a0ba0dc57faa637bbb204f135d4530a979045eb8ac1940a4cb570c91a9b7e44e57713f07b79f323c1147df69c8e4b9ccf5ab073c8ef64e0970a6e679002eec54a450c0207bb764a5a4109590a5aa4ecc9240c6145084d777540929f4adb44df547df60a6efed7ad3ba839a09ddcda2c673ab14dd555325f3b0b578d8f7289568f4752f34e39f14bca42b327f046ba8c2ec0514875a98ebeebedc65c7940068ac91f1c6cd5899a3034a34c2f88d9735014660b83667c40d8a4b5af88701bac7834d009b84b809419ef299ecee979a6bf66c03cbd216708028d3c540611277ef8bafd1506638252a09fae22ab144f70d0bea1a9df0f08df7a3a5b4a10867398a76b03eeb23bf6a9bb367f850c324e6c797dfd7330bee487268913cfe5d4c5db99aed1d13969a62ab58fe3ed2df2a96564b2b734b2f50b18ee023844672571d560915528e8d79ba168f2c3849350fe3ed0f529cf3bb70232181a90dfbb53d4a273c8d8a4c87169a7abc0a14fb2c69388b2be0cbb64a337cddfbe4fa5a3a3f37d946c7868c4d935fa50e1c0fe259e394b87bc1116a64d66f26538769096c598356ed70bc4fb953a4f0ecc103cdf3e0d8233f981a7c576ab72a2ca200ec24a775040d72cca97449947553b34f10b65b2ad737253c3534f2577f87a8fb75ef6e67b09495e7581f96f935b2ab7507fa1cbe18c5be849f25327f86cdd0320654c131d0b56e069cf51e00926a38cf75473c8fa958c0702958b63ec2886e55b212e71b5799a7836920ba45c2cee9bd7a98aa0d8f22204124631bd884b9ad4a114c6b928b721b132cb0ed2200f82e82abc7b8be5ae938228c91cc9ca27c05a61d9f157b9d8dc950626365d39eeca1e81148fa6df39030ec32e8a0674f361306b694e45d86d29d1fd36de965a8ff33b454231ef8f4cef1deb30b33d16925b50278e288dfe95cdc8141d61c3b04ca741d09af16a84fe93e46d0904e2b2c54f5eb087bb83ecd6b1f08b15c44e58ad4a04c0ab9e24a4b87a88799fec77f9836192c2807eef083dbac447118d4070413a2db7a8a4b173a9c99ba7ea2b882d7e48f014c9bfa856aaab77541f7ced572c102a32a83ebf6432716164cf4b92b8addb5315676f1f412e6596bf4e16207ddb5224b4459bd5311c3ad63658f914a6e96843a2e8d0089993f0370b75c8835d27fabd7fb563378ae659ca9041d4ee4c5b6bcdf8b12f133251b1813564c0c58401a6456794285ed037d54fc6c40bbd84c3019a0455d96a408d0bd5482dd5b4bc04d74e5d5d12b3a98a245e83f241f7845dc738a36bb3074f21a11805c3cc54a60856dfe4778c665ef3bf9c04cc2094dbcbdd86fc236f93dd4dd637acdf73ac8e72669e11761b4336aae36c552f4c922d17fdf0a7649f1cb91030e24d53d5e7c7db4360b761bac977c54fd16b94777fa5a9b8cbc47d40d91f4ab58e973d247b96f98f85d052d742dc502c523dcbcaee8f224d1eec7d208eff3b5e3cf8a96993e7f3e2cc5e7a191d93b38228ea0e738d18f76b0a83aa2b16de7a7baf582fc78d6fd1a1b8c344b4b194f47c3a2a5e9dc0f03a2a1a22cbc98142e0c7c29ae221dd14f0e862216c792aa8bf58b417c0c8acee0be702679505ded86ab00ce2d16867e9735fd8438ef6b25d62921d1b79ea5d0057d8786324173b6bca3b572a92c562060745f2f51ef699b5e2a4cae1228c977c6663b8b9d5cf463f3a89c5c33b295982a5e95e9b8bca4fcde05b9a6636e5e7a0efa3d1075fbcf3b1607be1a233c5a72121524232d9532e68a82d1b130091eb7a222b6beee0efb85e448e64eecc5828cc4cea8965b5e8c5d7b22e23979b20d740e558400c8bd6c3198d41b7680119239bda270dc98ba2c4477ac4d8dce52062174986a54ddc69225b4d78c93a774ee4cf532523b2275c9ec0a816229983b7f50cb8c2b68283ec0a5c406cd15aa64bf5ed00645dc3608b2db3b4422c92e574da8bef43fdca918cbb590d5617032de1458841309b47026a36fa1241e664dbe50f5151b601c113968f464e9a9d93e4fd4885fa14582ec75ba221c595cb98fe8012bd72d53ea3253129ea6764d92fa1e7119822acca4ce133a07e158a4f89cff8ae1c843fedb475f60bddd8b5a3c73beaa1eb773d002f1a13657ed6beffd4e42b4a04e85af6aee6e0a2500ac132dedf5537f3d0010fe27b464dac1de092300f6133f3aad3e7acd549c512aeeadb020a47ae49a68369b628cf0c6efcfa96e7b593463a99cace7168a75bd4775d112bb1cde73e5aa93e0607a5e0e7ab1ee35eb2f6f48d871ee9a1f2017ce97636ad60befe4def9b3d920859c5c85b8892a99c2494db183a1e51dbe3ef8b6911f03ad5fb795ccd6dbca277e3af1f6edb36402576bafa3df34bb346731949b175c299152c6855e1f30a794575c52b84c288c4fb30a5ed83b0143624f7489e83e9872faebadc9403a5d4f7ab1d4fdae8421c7b9af74dd61c7f24136051bf0b0b2e216c21f136e2227c5c837caa27536d6ff6d11db198eaf8c4f0a02447557e30b92de891994632524ada4f14a47f9585f4d5a2546b76d29e5688bbe5b2c2868735e2a4ce5a69e3d9dd086e72772517a56d485011e8f2e79dec788bc8721b816ceade9dcaac5cb4688ddcfda7c5970f0402937012bc9c470a69c5981ef6bf0425750f0db0b6dbc3417810849f89b7d92f1899ce4880963e3347db4a1ddf1dde569c40faaab54830b63f48e8dc7ea836052de9cc20f65e90a55312097ee1050b6de6a571b7745b8a4e6217fedba211d9f1c7985c1dcc21740da3a98cfc3280216bf193e26a472692ede80ed796b025fb53c5151a152294678446a39e8838d8a8e83f591fa97c3dd5184c1b6b16cb88ba1e4d14864707018834d87d1e96123a6ea1070d89b51afa1ee40c1c1e6780e97743c585c6e712ac04a427897e7546ce69fde9ce04433c7c0ff44a21d59c1853409b11856b73c609866819cbbde3698202ef5b110f8cfb89de5fdbeda8a5dcd899572beab281f5f7619dc2838ae38767e71ac535725068f390180c79a81365436c210508401c11eace6d145fbd5ae94eca8719f39cd8902fdfe5b7b19272edec8bdb513227b03efc82c9810eb95183da7dae633e157eedde9deb4e91191124c2edb68cca0323ae68e8116d4cb8f0dd1efb502774f81a1b1a10104a35b2e5c2fbdbaafe9a2f07ff233ecd0c39e9bb863b8e0d43ffeb168f7f61d540e81a82385847831e7f7f9664767ac9630062de2f14392fe0e72ab2b05ce27c3e52c3935b3ebe302acc09ba5b077dcef8434116b01e6c60cbf43380c3a6afaa791f349bc420b7ac196568fb9113998f185e81265c245e6fbc7ea75daaa92b02c59c47670bbcf072e52c2ec125e582a24f7b11effa5a085385137c4cc82749ab7812982f631deddcef688addc73a91e7a1c75e5bd6ebcaa204a9d69b85f5c4ac7683d2358000f437d06a0484cb77cccc5e427a058e6e5976b9eefcd40cf36410a67eb67ee993de7f41d451d11a35e806b1e6b00fd129e762c6997abafe71aa6022f2ec41a8b64d13e9f5bd79b05a4e57ec95539202a15278ebf945e54f30d97d15f5156763bd41bbf71020e2752024b5e84a67fc8843c52d289036f3f1eec5dce161db04f0090500c83d04f6d325698625ca4ff5137da9afc40d3650e0edf565dcd0d9f13bab713176e60a56142a2bf64d17a86c746c08f605390ee438672be6aa84754cae1643ab8342c5ae5f32dd047fe3335aa1795ef8806fe248bb43ca8fbf6ee391d9719ecdd94cfa8ef8cccb7134f687defdcc1bd6aaf3acc75ad62edc08766377ae1786dc27701d9da40b5dde7733663bb783f05049dff6000ea9d7a7b907e756de28c684606c70f2cb6d90279330623de6d1ada4b4b324b9c5aa4ef48059fa15533d4aed6b06b68ba4cddfbfbfdf4dd590723e670785ce4da8904005097f08407e8e7ca3ab13a984e1d2fa5a8ccf469941e16ba4fa0c8e0ec0120b7347025b8cbe75f951f72cb3e55cd9ff33299952b823ec592d74c1582011e336b4bbd8b011f1ef27a74af4", 0x1000}, {&(0x7f00000013c0)="1ebb019ec68c602cc9b9b53162fc99d576006bdf689ae0c5bbf0277584cf725bb3318fe60c63a561e8462492adf4760a42af1b5642768e9860aa89c489293d503812c2d2008594b046d26ac20dcdbe35a877449069914cfeb478343c13ef3edaf365473b899cc09c0c86435acfcdc746cf0d22", 0x73}, {&(0x7f0000001440)="72f8a8f6d67d77a11be5904b2623cbf7e1b0e67b4c97dcb838191519083a2b5fc55bd3ad9c0d3f91ecf45791efbcdeb4d1001edf4f9741a13b81697a56429214cdd685aa0ed10b0a99c5755d9e47838597afd7043692a8e7b57746e2a0d9424e2f2c2060ac784bdea943a819bc5af7112cb5a6d8bfeb72e6b257063a212515dbfb6f71004323313a087a5f3b224a0f6ab2b2436712a08fd96466", 0x9a}, {&(0x7f0000001500)="f6b42ef01d6e85b0c5524471b9fa2ce8b5466522248ae819b7ac77c060219012f0c21154ae67e80e6196a4c89b74c8d4e6a6388a0c42106e96fbda092b469eef93acf2c04021784850cd63e2e9609ec45c38d605b907ab7e6d4af728a506da10ccb0d64bd6dfb70a86207d2df924d48d05ae1a3ceb57a076465fc05c5faf200b95075dd0524fb45598926ab105e5874effc20a5d9276aa5890b906ecc223349a65205662e887fa07bfb4de4647de47f189a9cdcc50c7d5f4eec80b18439c1c17a52ed963bf755b64a3029ab323086e76", 0xd0}], 0x9, 0x72, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x8000000, 0x8, 0x6, 0x5, 0x4, 0x46, 0x7, 0x0, 0x34, 0x9, 0x4}, {0x100000, 0xb000, 0xc, 0x76, 0x3, 0x42, 0x7f, 0x46, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x10000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0x7, 0xb, 0x1}, {0x200000, 0x100000, 0x10, 0x6, 0x7, 0x5, 0xfd, 0x5, 0x2, 0xa0, 0x9, 0xf1}, {0x1000, 0xb000, 0xd, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0xf4, 0x7}, {0x2000, 0xa000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x7b, 0x13, 0x5}, {0x6000, 0xba845000, 0x10, 0x5, 0x0, 0x4, 0x1, 0xff, 0x3, 0x7d, 0x2, 0x7}, {0x2000, 0x30000, 0x10, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xfd, 0x18, 0xee, 0x9}, {0x60000, 0x3}, {0x58000, 0x2}, 0x80000001, 0x0, 0xdddd0000, 0x42064, 0x400000006, 0x0, 0x25000, [0xd1, 0x6, 0x3, 0x7]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 982.245342ms ago: executing program 7 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) 981.281309ms ago: executing program 7 (id=1617): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1aa) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="610f05", 0x3}], 0x1}, 0x240280d1) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/201, 0xc9) 932.222809ms ago: executing program 7 (id=1618): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110001, 0x0}) (async) ioctl$KVM_SET_ONE_REG(r1, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110001, 0x0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101, 0x0, 0x8000000000000000}]}) (async) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101, 0x0, 0x8000000000000000}]}) 771.579073ms ago: executing program 7 (id=1620): r0 = socket$inet6(0xa, 0x4, 0x101) r1 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435002c0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b00200009078000004022204914f13128098cf85c2289e0000000000bcfdfea9"], 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x4, 0x3, &(0x7f0000000f00)}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e20, @private=0xa010100}}}, 0x84) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) 672.117694ms ago: executing program 7 (id=1621): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000100000003000000000000002e000000000000000fc400000000000001010000000000000000000000000000000000000000000000000000000000000700000001000000ff03000000000000040000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f67873213d951186f988a26e35a8a242a4b7eebb081d281e14bc9b735a1c21cc95e8ef1bd1b44de805528c60667ee56cb669"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xff, 0x20440) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/233, &(0x7f00000001c0)=0xe9) socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 670.801158ms ago: executing program 7 (id=1622): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) (async) close(0x3) (async) r3 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 424.722296ms ago: executing program 8 (id=1629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x40, &(0x7f0000000000)=[@flags={0x3, 0x80100}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x96}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040014}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000db000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) 212.310509ms ago: executing program 8 (id=1630): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) (async) r7 = dup(r6) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0x32600) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) (async) sendmsg$inet_sctp(r7, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000003c0)="1767c139e8766e254beaf53f8deb209e7a03c0f34f67b75443fafae88ab1f776f4f98739812523616e079bba4602a42b7004e7bbb6aa3f0331c4ce04ff2ae34ea4e84a182d446e45e7fd46f16fdd8714e154684a2d7da43b26b274ca2613140feb8f4d036bc4dda97dbe726b1d1fb92a63ba06fd64796e5f2169403a984d96879342163a74e0f2759f182ebacc32c950f55d77030efc301d7978fca1a98c027b430e5617a0a04fd6c40e043cb0916ba6a5dd7646974a515d21a20a6f03", 0xbd}], 0x1, 0x0, 0x0, 0x8800}, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 211.523616ms ago: executing program 8 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1, 0x0, 0x2000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) pipe(&(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x8, 0x2, 0x1000, 0x5}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'vlan0\x00', 0x57e9}) 62.204889ms ago: executing program 8 (id=1632): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2161c2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x38}, 0x9}}}, 0x7) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x103, {0x1000006, 0x2, 0x0, 0xc6, 0x4, 0xe4, {0x40, 0x1, 0xffffffffffff826c, 0x40010000, 0x5002, 0x0, 0x800, 0x81, 0x3, 0x2000, 0x75, r3, r4, 0x440, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x800002, 0x14c0348, 0x7ff, 0x1, 0xfffffbf1, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x12, r6, 0x0) (async, rerun: 32) write$binfmt_misc(r6, &(0x7f0000000b00), 0x91) (async, rerun: 32) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000000c0)="cbea22d969", 0x5}], 0x1, 0x1) (async) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000000)={0xffffffffffffffed}) 61.367291ms ago: executing program 8 (id=1633): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x502a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9848}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8128}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3491}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x621}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffeffff}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x0) io_getevents(0x0, 0xc, 0x1, &(0x7f0000000600)=[{}], &(0x7f0000000640)={0x77359400}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000680)=0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x20800, 0x2) r4 = openat(r3, &(0x7f0000000700)='./file0\x00', 0x18100, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000001480)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000000800)={0xc18, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x608, 0x111, 0x0, 0x1, {0x604, 0x5, 0x0, 0x1, [{0x3ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x364, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x17c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfad4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x156}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1df}]}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfbbf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x584, 0x111, 0x0, 0x1, {0x580, 0x5, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xece}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x206}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x358, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6e9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf91}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10000}, @NL80211_ATTR_PEER_MEASUREMENTS={0x34, 0x111, 0x0, 0x1, {0x30, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa}]}, 0xc18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001640)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000001740)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0}, &(0x7f00000017c0)=0xc) mount$9p_virtio(&(0x7f00000014c0), &(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540), 0x201480, &(0x7f0000001800)={'trans=virtio,', {[{@aname={'aname', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@access_client}, {@cache_none}, {@version_9p2000}, {@access_client}, {@noxattr}, {@afid={'afid', 0x3d, 0x4}}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r9}}], [{@smackfsroot}, {@measure}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '-(}-*-#,'}}, {@euid_gt={'euid>', r10}}, {@permit_directio}, {@flag='silent'}]}}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6ae8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sync_file_range(r1, 0x100000001, 0x40, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r12, &(0x7f0000001c80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xe8, r13, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x9f}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xd3}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x59}}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x80}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffe3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x97}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x42}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xc0}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffbff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8c0}, 0x8e5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd4, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc8}, 0x4010) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001ec0), r5) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x80, r15, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xef1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x100, 0x200, 0x730a, 0x5, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x2]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x6, 0xfffffffb]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0xee]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000002000)=0x2, 0x4) chdir(&(0x7f0000002040)='./file0\x00') 0s ago: executing program 8 (id=1634): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4243, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x543b03, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 8 (id=1635): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000000080)='control/class/ss/h\x00', &(0x7f0000001500)='streaming/header/h/u\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400baa6b6f7083f949ba7fac1", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c00028008000400010001000800040000000000"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): _slave_0): Enslaving as an active interface with an up link [ 139.283524][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.298760][ T9371] team0: Port device team_slave_0 added [ 139.301949][ T9371] team0: Port device team_slave_1 added [ 139.316380][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.318548][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.326547][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.330838][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.333142][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.341216][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.368153][ T9371] hsr_slave_0: entered promiscuous mode [ 139.369045][ T10] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 139.370524][ T9371] hsr_slave_1: entered promiscuous mode [ 139.375029][ T9371] debugfs: 'hsr0' already exists in 'hsr' [ 139.376844][ T9371] Cannot create hsr debugfs directory [ 139.482524][ T9371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.486369][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.489179][ T9371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.492995][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.495767][ T9371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.500815][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.503534][ T9371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.507344][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.509944][ T10] usb 8-1: device descriptor read/64, error -71 [ 139.522492][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.524752][ T9371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.527039][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.529270][ T9371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.558551][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.567107][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.572229][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.578622][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.585702][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.587953][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.595418][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.597652][ T8971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.619202][ T10] usb usb8-port1: attempt power cycle [ 139.816096][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.841041][ T41] audit: type=1400 audit(1785183557.183:871): avc: denied { create } for pid=9411 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 139.894781][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 139.960010][ T10] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 139.974883][ T9371] veth0_vlan: entered promiscuous mode [ 139.979710][ T10] usb 8-1: device descriptor read/8, error -71 [ 139.979738][ T9371] veth1_vlan: entered promiscuous mode [ 139.997486][ T9371] veth0_macvtap: entered promiscuous mode [ 140.006259][ T9371] veth1_macvtap: entered promiscuous mode [ 140.016062][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.022180][ T41] audit: type=1400 audit(1785183557.363:872): avc: denied { bind } for pid=9428 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.029228][ T41] audit: type=1400 audit(1785183557.363:873): avc: denied { name_bind } for pid=9428 comm="syz.2.995" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 140.030107][ T9429] /dev/loop2: Can't lookup blockdev [ 140.032023][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.036222][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.042402][ T9429] netlink: 'syz.2.995': attribute type 8 has an invalid length. [ 140.047010][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 140.049113][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.053410][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.056831][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.126042][ T8997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.128749][ T8997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.148762][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.155787][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.224962][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 140.230077][ T10] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 140.239571][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 140.250164][ T10] usb 8-1: device descriptor read/8, error -71 [ 140.266952][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 140.270070][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 140.273275][ T9439] syzkaller0: entered promiscuous mode [ 140.275019][ T9439] syzkaller0: entered allmulticast mode [ 140.360048][ T10] usb usb8-port1: unable to enumerate USB device [ 140.949068][ T5746] Bluetooth: hci0: command tx timeout [ 141.774538][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. [ 142.519174][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 142.534559][ T9537] nfs: Bad value for 'source' [ 142.564563][ T9541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 142.566805][ T9541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.571332][ T9541] vhci_hcd vhci_hcd.0: Device attached [ 142.573715][ T5746] Bluetooth: hci2: unexpected cc 0x080f length: 90 > 1 [ 142.581422][ T5746] Bluetooth: hci2: unexpected event for opcode 0x080f [ 142.615154][ T9543] vhci_hcd: connection closed [ 142.615509][ T5789] vhci_hcd vhci_hcd.2: stop threads [ 142.619249][ T5789] vhci_hcd vhci_hcd.2: release socket [ 142.620981][ T5789] vhci_hcd vhci_hcd.2: disconnect device [ 142.670365][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.673837][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.676862][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.680137][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.684784][ T9517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.688633][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.892575][ T7339] usb 9-1: USB disconnect, device number 2 [ 143.029030][ T5746] Bluetooth: hci0: command tx timeout [ 143.258785][ T9550] gfs2: error -5 reading superblock [ 143.263457][ T9551] gfs2: error -5 reading superblock [ 143.349210][ T7339] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 143.425692][ T34] libceph: mon0 (1)[c::]:6789 socket error on write [ 143.435397][ T5826] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 143.452739][ T9571] ceph: No mds server is up or the cluster is laggy [ 143.509281][ T7339] usb 9-1: Invalid ep0 maxpacket: 64 [ 143.579045][ T7335] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 143.639024][ T7339] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 143.732156][ T7335] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 143.735007][ T7335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.737503][ T7335] usb 8-1: Product: syz [ 143.738815][ T7335] usb 8-1: Manufacturer: syz [ 143.740403][ T7335] usb 8-1: SerialNumber: syz [ 143.789277][ T7339] usb 9-1: Invalid ep0 maxpacket: 64 [ 143.791762][ T7339] usb usb9-port1: attempt power cycle [ 143.916786][ T9588] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 143.959564][ T7335] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 143.963224][ T7335] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 143.966907][ T7335] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 143.970735][ T7335] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 143.985767][ T7335] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 143.994185][ T7335] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 144.001781][ T7335] usb 8-1: USB disconnect, device number 15 [ 144.010284][ T9595] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 144.050742][ T9600] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 144.065795][ T9600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.085399][ T9600] bond6: (slave geneve2): making interface the new active one [ 144.088774][ T9600] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 144.139243][ T7339] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 144.159977][ T7339] usb 9-1: Invalid ep0 maxpacket: 64 [ 144.211331][ T9615] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 144.213662][ T9614] nbd: must specify a device to reconfigure [ 144.216650][ T9616] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 144.297030][ T9623] raw_sendmsg: syz.2.1050 forgot to set AF_INET. Fix it! [ 144.299449][ T7339] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 144.319454][ T7339] usb 9-1: Invalid ep0 maxpacket: 64 [ 144.321347][ T7339] usb usb9-port1: unable to enumerate USB device [ 144.521692][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 144.521738][ T41] audit: type=1400 audit(1785183561.863:884): avc: denied { execute } for pid=9644 comm="syz.2.1056" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.546527][ T41] audit: type=1400 audit(1785183561.883:885): avc: denied { mounton } for pid=9646 comm="syz.3.1057" path="/292/file0" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.567733][ T41] audit: type=1400 audit(1785183561.903:886): avc: denied { mounton } for pid=9648 comm="syz.2.1058" path="/305/file1/file1/file0" dev="autofs" ino=34102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 144.706249][ T9653] __nla_validate_parse: 2 callbacks suppressed [ 144.706261][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 144.712930][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1060'. [ 144.913405][ T5817] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.917220][ T5817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.975959][ T5817] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.979124][ T5817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.081468][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.083177][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.100309][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.101164][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.104198][ T5817] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.106299][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.110223][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.110477][ T5750] Bluetooth: hci0: command tx timeout [ 145.111667][ T5817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.114796][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.122397][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.122677][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.128481][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.195686][ T5817] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.204652][ T5817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.304470][ T9689] syzkaller1: entered promiscuous mode [ 145.306192][ T9689] syzkaller1: entered allmulticast mode [ 145.352552][ T41] audit: type=1400 audit(1785183562.693:887): avc: denied { read } for pid=9693 comm="syz.4.1069" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.361323][ T41] audit: type=1400 audit(1785183562.693:888): avc: denied { open } for pid=9693 comm="syz.4.1069" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.371722][ T41] audit: type=1400 audit(1785183562.693:889): avc: denied { ioctl } for pid=9693 comm="syz.4.1069" path="/dev/input/mice" dev="devtmpfs" ino=940 ioctlcmd=0x7506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.490470][ T41] audit: type=1400 audit(1785183562.833:890): avc: denied { write } for pid=9698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.544460][ T41] audit: type=1400 audit(1785183562.883:891): avc: denied { write } for pid=9704 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.553465][ T5817] team0: Port device xfrm0 removed [ 145.587432][ T5817] bond6 (unregistering): (slave geneve2): Releasing active interface [ 145.612732][ T5817] bond0 (unregistering): Released all slaves [ 145.617291][ T5817] bond1 (unregistering): Released all slaves [ 145.628580][ T5817] bond2 (unregistering): Released all slaves [ 145.638373][ T5817] bond3 (unregistering): Released all slaves [ 145.645313][ T5817] bond4 (unregistering): Released all slaves [ 145.652090][ T5817] bond5 (unregistering): Released all slaves [ 145.658891][ T5817] bond6 (unregistering): Released all slaves [ 145.672920][ T8997] tipc: Resetting bearer [ 145.678188][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.699117][ T5826] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 145.739905][ T7335] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 145.800772][ T5817] tipc: Disabling bearer [ 145.809515][ T5817] tipc: Disabling bearer [ 145.817988][ T41] audit: type=1400 audit(1785183563.153:892): avc: denied { write } for pid=9710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.818881][ T5817] tipc: Left network mode [ 145.856807][ T41] audit: type=1400 audit(1785183563.193:893): avc: denied { write } for pid=9713 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.869111][ T5826] usb 9-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.873407][ T5826] usb 9-1: config 1 interface 0 has no altsetting 0 [ 145.891390][ T7335] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.894980][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 145.898482][ T5826] usb 9-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.40 [ 145.904149][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.907377][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.912703][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 145.916855][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 145.919386][ T5826] usb 9-1: Product: 싢낚쀙ﻡ뷄蒺⊤萸悷᳀ℋ굔榟ḱ밅䟲횙᥀‐询颊⸑챚△묏쮢ꦂ廛퇋电ｗ碂뺹梨窟ຑ㫾㹁娧ͬ怿嘳䨗诐譋陓㓣뺥ᯭ퉑ꌼ鉠䫞㈏⼜흎溜꥿㹂ᲨᠻɌﲮ뵫汾픗ﹾ쮞䈕庫褼択‧ố䖇ʡি▣ʹ瓼䄾熜庅乄퀽왠㋐࿈谰醋掤씼皭 [ 145.930717][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 145.933919][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 145.940670][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 145.943835][ T5826] usb 9-1: Manufacturer: ^ [ 145.947633][ T5826] usb 9-1: SerialNumber: syz [ 145.952367][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 145.973406][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 145.976758][ T7335] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.980320][ T7335] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.983394][ T7335] usb 8-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 145.992190][ T7335] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 145.995142][ T7335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.998257][ T7335] usb 8-1: Product: syz [ 146.002439][ T7335] usb 8-1: Manufacturer: syz [ 146.003983][ T7335] usb 8-1: SerialNumber: syz [ 146.016022][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.018520][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.021043][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.023446][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.025821][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.030384][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.033104][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.035487][ T9701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.050272][ T7335] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 146.053584][ T7335] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 146.058490][ T7335] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 146.067942][ T7335] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 146.085962][ T7335] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 146.089182][ T7335] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 146.091663][ T7335] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 146.098677][ T7335] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 146.191934][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.194255][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.196831][ T9665] bridge_slave_0: entered allmulticast mode [ 146.200175][ T9665] bridge_slave_0: entered promiscuous mode [ 146.223555][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 146.227287][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.229801][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.232232][ T9665] bridge_slave_1: entered allmulticast mode [ 146.235622][ T9665] bridge_slave_1: entered promiscuous mode [ 146.253371][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.257497][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.260446][ T9667] bridge_slave_0: entered allmulticast mode [ 146.264622][ T9667] bridge_slave_0: entered promiscuous mode [ 146.279442][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.281757][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.284011][ T9667] bridge_slave_1: entered allmulticast mode [ 146.286649][ T9667] bridge_slave_1: entered promiscuous mode [ 146.295384][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.302654][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.355551][ T9667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.374266][ T9665] team0: Port device team_slave_0 added [ 146.378032][ T9667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.398683][ T9665] team0: Port device team_slave_1 added [ 146.423922][ T34] usb 8-1: USB disconnect, device number 16 [ 146.466058][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 146.475969][ T9667] team0: Port device team_slave_0 added [ 146.478596][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.481188][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.489488][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.490042][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 146.495477][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.499401][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.507793][ T34] keyspan 8-1:1.0: device disconnected [ 146.509098][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.515113][ T9667] team0: Port device team_slave_1 added [ 146.584634][ T5817] hsr_slave_0: left promiscuous mode [ 146.587326][ T5817] hsr_slave_1: left promiscuous mode [ 146.602885][ T5817] veth1_macvtap: left promiscuous mode [ 146.605380][ T5817] veth0_macvtap: left promiscuous mode [ 146.607923][ T5817] veth1_vlan: left promiscuous mode [ 146.609870][ T5817] veth0_vlan: left promiscuous mode [ 146.672559][ T5826] usbhid 9-1:1.0: can't add hid device: -71 [ 146.675475][ T5826] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 146.691075][ T5826] usb 9-1: USB disconnect, device number 7 [ 146.738705][ T9740] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.759791][ T9740] program syz.4.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.910508][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.913332][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.924186][ T9667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.948413][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 146.952968][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.960843][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.974399][ T9667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.985059][ T9665] hsr_slave_0: entered promiscuous mode [ 146.989516][ T9665] hsr_slave_1: entered promiscuous mode [ 146.993829][ T9665] debugfs: 'hsr0' already exists in 'hsr' [ 146.996900][ T9665] Cannot create hsr debugfs directory [ 147.000887][ T9752] trusted_key: encrypted_key: insufficient parameters specified [ 147.082216][ T9667] hsr_slave_0: entered promiscuous mode [ 147.085268][ T9667] hsr_slave_1: entered promiscuous mode [ 147.087848][ T9667] debugfs: 'hsr0' already exists in 'hsr' [ 147.091764][ T9667] Cannot create hsr debugfs directory [ 147.128508][ T9760] netlink: 'syz.3.1076': attribute type 16 has an invalid length. [ 147.131210][ T9760] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1076'. [ 147.159672][ T9760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9760 comm=syz.3.1076 [ 147.172099][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 147.192526][ T64] Bluetooth: hci4: command tx timeout [ 147.196382][ T5749] Bluetooth: hci0: command tx timeout [ 147.197993][ T5750] Bluetooth: hci2: command tx timeout [ 147.271210][ T9763] CIFS: Attempting to mount //127.0.0.1/share [ 147.290511][ T9763] CIFS: VFS: Error connecting to socket. Aborting operation. [ 147.292762][ T9763] CIFS: VFS: cifs_mount failed w/return code = -111 [ 147.299670][ T9768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.374017][ T9665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.378539][ T9665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.382373][ T9665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.387119][ T9665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.390309][ T9665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.395384][ T9665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.401728][ T9665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.424768][ T9665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.427833][ T9773] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.433186][ T8971] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.433782][ T5817] IPVS: stop unused estimator thread 0... [ 147.518888][ T9667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.523193][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.526036][ T9667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.530237][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.534051][ T9667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.538434][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.543177][ T9667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.548495][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.580481][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.602093][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.612414][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.615294][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.626657][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.629751][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.671786][ T9667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.684857][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.691460][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.693951][ T8969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.705341][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.708172][ T8982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.887851][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.945362][ T9667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.040346][ T9665] veth0_vlan: entered promiscuous mode [ 148.045446][ T9665] veth1_vlan: entered promiscuous mode [ 148.061264][ T9665] veth0_macvtap: entered promiscuous mode [ 148.068224][ T9665] veth1_macvtap: entered promiscuous mode [ 148.091055][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.097352][ T9667] veth0_vlan: entered promiscuous mode [ 148.101878][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.108251][ T5819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.113454][ T5819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.118671][ T9667] veth1_vlan: entered promiscuous mode [ 148.123129][ T5819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.126297][ T5819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.181026][ T9667] veth0_macvtap: entered promiscuous mode [ 148.193382][ T9667] veth1_macvtap: entered promiscuous mode [ 148.196546][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.202328][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.226845][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.241678][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.244070][ T8969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.246553][ T8969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.252130][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.255393][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.262255][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.265205][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.350737][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.358745][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.380811][ T9825] netlink: 'syz.4.1082': attribute type 21 has an invalid length. [ 148.403577][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1065'. [ 148.428324][ T9828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9828 comm=syz.5.1065 [ 148.430583][ T8969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.436878][ T8969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.477427][ T9831] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.607067][ T9845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.725268][ T9856] netlink: 'syz.6.1089': attribute type 13 has an invalid length. [ 148.974793][ T9872] tipc: Enabling of bearer rejected, failed to enable media [ 149.211539][ T9876] netlink: 'syz.4.1095': attribute type 62 has an invalid length. [ 149.214882][ T9876] binder: 9875:9876 ioctl c018620c 2000000001c0 returned -22 [ 149.242089][ T9878] vivid-000: ================= START STATUS ================= [ 149.244639][ T9878] vivid-000: Test Pattern: 75% Colorbar [ 149.250828][ T9878] vivid-000: Fill Percentage of Frame: 100 [ 149.253319][ T9878] vivid-000: Horizontal Movement: No Movement [ 149.255282][ T9878] vivid-000: Vertical Movement: No Movement [ 149.257341][ T9878] vivid-000: OSD Text Mode: All [ 149.259000][ T9878] vivid-000: Show Border: false [ 149.260738][ T9878] vivid-000: Show Square: false [ 149.262321][ T9878] vivid-000: Sensor Flipped Horizontally: false [ 149.264301][ T9878] vivid-000: Sensor Flipped Vertically: false [ 149.266416][ T9878] vivid-000: Insert SAV Code in Image: false [ 149.268331][ T9878] vivid-000: Insert EAV Code in Image: false [ 149.269337][ T5750] Bluetooth: hci2: command tx timeout [ 149.270647][ T9878] vivid-000: Insert Video Guard Band: true [ 149.274620][ T9878] vivid-000: Reduced Framerate: false [ 149.276577][ T9878] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 149.279086][ T9878] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 149.279478][ T5750] Bluetooth: hci4: command tx timeout [ 149.281578][ T9878] vivid-000: Enable Capture Cropping: true [ 149.281593][ T9878] vivid-000: Enable Capture Composing: true [ 149.281604][ T9878] vivid-000: Enable Capture Scaler: true [ 149.281616][ T9878] vivid-000: Timestamp Source: End of Frame [ 149.281627][ T9878] vivid-000: Colorspace: Rec. 709 [ 149.281638][ T9878] vivid-000: Transfer Function: Default [ 149.281649][ T9878] vivid-000: Y'CbCr Encoding: Default [ 149.281661][ T9878] vivid-000: HSV Encoding: Hue 0-179 [ 149.281672][ T9878] vivid-000: Quantization: Default [ 149.281683][ T9878] vivid-000: Apply Alpha To Red Only: false [ 149.281694][ T9878] vivid-000: Standard Aspect Ratio: 4x3 [ 149.281706][ T9878] vivid-000: DV Timings Signal Mode: Current DV Timings [ 149.281718][ T9878] vivid-000: DV Timings: 640x480p59 inactive [ 149.281732][ T9878] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 149.281743][ T9878] vivid-000: Maximum EDID Blocks: 2 [ 149.281755][ T9878] vivid-000: Limited RGB Range (16-235): true [ 149.281767][ T9878] vivid-000: Rx RGB Quantization Range: Automatic [ 149.281778][ T9878] vivid-000: Power Present: 0x00000001 [ 149.281791][ T9878] tpg source WxH: 1280x720 (Y'CbCr) [ 149.283108][ T9878] tpg field: 1 [ 149.365664][ T9878] tpg crop: (0,0)/1280x720 [ 149.371388][ T9878] tpg compose: (0,0)/1280x720 [ 149.375439][ T9878] tpg colorspace: 3 [ 149.377905][ T9878] tpg transfer function: 0/1 [ 149.380763][ T9878] tpg Y'CbCr encoding: 0/2 [ 149.383583][ T9878] tpg quantization: 0/2 [ 149.386604][ T9878] tpg RGB range: 0/1 [ 149.387923][ T9878] vivid-000: ================== END STATUS ================== [ 149.429221][ T5750] Bluetooth: hci5: command 0x1003 tx timeout [ 149.439164][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.709573][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1103'. [ 149.720030][ T9896] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.148429][ T9919] 9pnet: Found fid 0 not clunked [ 150.159053][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 150.189855][ T7070] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 150.312071][ T10] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 150.315063][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.318469][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.321772][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.325860][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.328692][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.335969][ T10] usb 10-1: config 0 descriptor?? [ 150.350475][ T7070] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 150.482732][ T5846] hid (null): global environment stack underflow [ 150.497775][ T5846] hid-generic 616F:20C2607D:F72986D9.0003: global environment stack underflow [ 150.503513][ T5846] hid-generic 616F:20C2607D:F72986D9.0003: item 0 1 1 11 parsing failed [ 150.507047][ T5846] hid-generic 616F:20C2607D:F72986D9.0003: probe with driver hid-generic failed with error -22 [ 150.519192][ T5849] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 150.538207][ T9939] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1116'. [ 150.602418][ T9944] fuse: Bad value for 'fd' [ 150.659509][ T5849] usb 11-1: device descriptor read/64, error -71 [ 150.743621][ T10] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 150.783727][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 150.836748][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 150.840560][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 150.867598][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 150.867869][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 150.870423][ T9968] openvswitch: netlink: Flow actions attr not present in new flow. [ 150.875816][ T9969] openvswitch: netlink: Flow actions attr not present in new flow. [ 150.908174][ T9976] loop5: detected capacity change from 0 to 7 [ 150.909628][ T5849] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 150.911063][ T9976] Dev loop5: unable to read RDB block 7 [ 150.917695][ T9976] loop5: unable to read partition table [ 150.922441][ T9976] loop5: partition table beyond EOD, truncated [ 150.924850][ T9976] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 151.008984][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 151.015265][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 151.015276][ T41] audit: type=1400 audit(1785183568.353:904): avc: denied { read } for pid=9986 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.059223][ T5849] usb 11-1: device descriptor read/64, error -71 [ 151.179255][ T5849] usb usb11-port1: attempt power cycle [ 151.262003][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805706dc00: rx timeout, send abort [ 151.349048][ T64] Bluetooth: hci4: command tx timeout [ 151.349072][ T5750] Bluetooth: hci2: command tx timeout [ 151.519463][ T5849] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 151.539655][ T5849] usb 11-1: device descriptor read/8, error -71 [ 151.556951][ T9991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.755923][ T9998] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.762079][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805706d800: rx timeout, send abort [ 151.765710][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805706dc00: abort rx timeout. Force session deactivation [ 151.771706][ T7335] usb 10-1: USB disconnect, device number 2 [ 151.777126][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 151.779046][ T5849] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 151.799601][ T5849] usb 11-1: device descriptor read/8, error -71 [ 151.893188][T10003] netlink: 'syz.4.1134': attribute type 21 has an invalid length. [ 151.909287][ T5849] usb usb11-port1: unable to enumerate USB device [ 152.126716][ T5817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.209645][ T5817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.242242][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.249505][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.253401][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.256685][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.260674][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.265162][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805706d800: abort rx timeout. Force session deactivation [ 152.333749][ T5817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.413299][ T5817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.577369][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1139'. [ 152.585747][ T5817] bridge_slave_1: left allmulticast mode [ 152.588360][ T5817] bridge_slave_1: left promiscuous mode [ 152.595155][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.607822][ T5817] bridge_slave_0: left allmulticast mode [ 152.610969][ T5817] bridge_slave_0: left promiscuous mode [ 152.613773][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.644016][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1139'. [ 152.647690][T10023] nbd: nbd64 already in use [ 152.773863][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.777959][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.782931][ T5817] bond0 (unregistering): Released all slaves [ 152.872847][ T41] audit: type=1400 audit(1785183570.203:905): avc: denied { write } for pid=10034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.915945][ T41] audit: type=1400 audit(1785183570.243:906): avc: denied { write } for pid=10038 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.944964][T10042] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 152.974763][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 152.994765][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.997058][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.001909][T10005] bridge_slave_0: entered allmulticast mode [ 153.004644][T10005] bridge_slave_0: entered promiscuous mode [ 153.007821][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.010629][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.012977][T10005] bridge_slave_1: entered allmulticast mode [ 153.017538][T10005] bridge_slave_1: entered promiscuous mode [ 153.056635][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.063467][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.106134][ T41] audit: type=1400 audit(1785183570.443:907): avc: denied { block_suspend } for pid=10051 comm="syz.6.1144" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.114607][T10046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10046 comm=syz.3.1143 [ 153.123465][T10005] team0: Port device team_slave_0 added [ 153.128758][T10005] team0: Port device team_slave_1 added [ 153.140628][ T5817] hsr_slave_0: left promiscuous mode [ 153.142838][ T5817] hsr_slave_1: left promiscuous mode [ 153.146535][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.150311][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.154329][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.156714][ T41] audit: type=1400 audit(1785183570.493:908): avc: denied { write } for pid=10056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.164662][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.173682][ T5817] veth1_macvtap: left promiscuous mode [ 153.175412][ T5817] veth0_macvtap: left promiscuous mode [ 153.177158][ T5817] veth1_vlan: left promiscuous mode [ 153.178819][ T5817] veth0_vlan: left promiscuous mode [ 153.225790][ T41] audit: type=1400 audit(1785183570.563:909): avc: denied { write } for pid=10065 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.302417][T10073] befs: (loop6): No write support. Marking filesystem read-only [ 153.305186][T10073] befs: (loop6): unable to read superblock [ 153.392977][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 153.400324][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 153.428998][ T5750] Bluetooth: hci4: command tx timeout [ 153.439040][ T5750] Bluetooth: hci2: command tx timeout [ 153.477017][ T41] audit: type=1400 audit(1785183570.813:910): avc: denied { write } for pid=10076 comm="syz.6.1149" name="functions" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.500251][T10069] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 153.531143][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 153.545487][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.549090][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.556936][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.561570][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.566263][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.579978][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.703785][T10005] hsr_slave_0: entered promiscuous mode [ 153.706251][T10106] loop2: detected capacity change from 0 to 7 [ 153.724120][T10005] hsr_slave_1: entered promiscuous mode [ 153.733321][T10005] debugfs: 'hsr0' already exists in 'hsr' [ 153.735101][T10005] Cannot create hsr debugfs directory [ 153.746389][T10106] Dev loop2: unable to read RDB block 7 [ 153.748448][T10106] loop2: AHDI p1 p2 p3 [ 153.760868][T10106] loop2: partition table partially beyond EOD, truncated [ 153.766249][T10106] loop2: p1 start 1601398130 is beyond EOD, truncated [ 153.772545][T10106] loop2: p2 start 1702059890 is beyond EOD, truncated [ 153.826919][ T41] audit: type=1400 audit(1785183571.163:911): avc: denied { write } for pid=10109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.831287][T10114] MPI: mpi too large (16392 bits) [ 153.888479][T10120] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 153.889073][ T41] audit: type=1400 audit(1785183571.223:912): avc: denied { write } for pid=10117 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.890557][T10120] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 153.904650][T10120] vhci_hcd vhci_hcd.0: Device attached [ 153.921348][T10118] XFS (loop5): SB validate failed with error -5. [ 153.921546][T10121] vhci_hcd: connection closed [ 153.933056][ T9738] vhci_hcd vhci_hcd.6: stop threads [ 153.936239][ T9738] vhci_hcd vhci_hcd.6: release socket [ 153.938042][ T9738] vhci_hcd vhci_hcd.6: disconnect device [ 153.961116][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 154.047488][ T41] audit: type=1400 audit(1785183571.383:913): avc: denied { write } for pid=10142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.074365][T10005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.080556][T10005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.083273][T10005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.087024][T10005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.089716][T10005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.093525][T10005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.098034][T10005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.103099][T10005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.153040][T10005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.167533][T10005] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.175129][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 154.181317][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.183557][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.201314][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.203569][ T9155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.319015][ T5750] Bluetooth: hci0: command tx timeout [ 154.326805][T10168] input: syz0 as /devices/virtual/input/input24 [ 154.384153][T10173] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 154.464885][T10005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.608130][T10005] veth0_vlan: entered promiscuous mode [ 154.617584][T10005] veth1_vlan: entered promiscuous mode [ 154.634633][T10005] veth0_macvtap: entered promiscuous mode [ 154.638458][T10005] veth1_macvtap: entered promiscuous mode [ 154.648372][T10005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.653960][T10005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.659915][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.662958][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.671653][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.675137][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.737483][T10188] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(0) [ 154.739611][T10188] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.745219][T10188] vhci_hcd vhci_hcd.0: Device attached [ 154.757483][ T8981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.761421][ T8981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.784437][ T8981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.786908][ T8981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.827103][T10203] __nla_validate_parse: 6 callbacks suppressed [ 154.827114][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1137'. [ 154.859259][T10201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.868696][T10201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.912283][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1171'. [ 155.010735][ T34] usb 44-1: SetAddress Request (2) to port 0 [ 155.013492][ T34] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 155.026983][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1174'. [ 155.032270][T10214] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1174'. [ 155.035043][T10214] tipc: Invalid UDP bearer configuration [ 155.035065][T10214] tipc: Enabling of bearer rejected, failed to enable media [ 155.150228][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1176'. [ 155.169546][T10223] can0: slcan on ttynull. [ 155.249692][T10223] can0 (unregistered): slcan off ttynull. [ 155.273815][T10192] vhci_hcd: connection reset by peer [ 155.282011][ T9738] vhci_hcd vhci_hcd.3: stop threads [ 155.284120][ T9738] vhci_hcd vhci_hcd.3: release socket [ 155.295133][ T9738] vhci_hcd vhci_hcd.3: disconnect device [ 155.410457][T10250] overlayfs: failed to resolve './file0': -2 [ 155.425105][T10245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.427113][T10245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.443001][T10245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.459499][T10245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.474116][T10245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.478043][T10245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.481706][T10245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.506640][T10245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.515765][T10245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.534830][T10245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.539020][ T5846] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 155.711334][ T5846] usb 11-1: Using ep0 maxpacket: 16 [ 155.717365][ T5846] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.725700][ T5846] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.730960][ T5846] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.732725][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 155.739029][ T5846] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.744344][ T5846] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.752545][ T5846] usb 11-1: config 0 descriptor?? [ 155.809218][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 155.963833][ T10] usb 10-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 155.966758][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.969628][ T10] usb 10-1: Product: 祳z [ 155.971050][ T10] usb 10-1: Manufacturer: 祳z [ 155.972622][ T10] usb 10-1: SerialNumber: 祳z [ 155.981238][ T10] etas_es58x 10-1:1.0: Starting 祳z 祳z (Serial Number 祳z) [ 156.171922][ T5846] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 156.175151][ T5846] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 156.186355][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.0005/input/input25 [ 156.284271][ T41] kauditd_printk_skb: 8 callbacks suppressed [ 156.284281][ T41] audit: type=1400 audit(1785183573.623:922): avc: denied { bind } for pid=10258 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.309539][ T5846] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 156.371733][ T41] audit: type=1400 audit(1785183573.713:923): avc: denied { watch_mount } for pid=10236 comm="syz.6.1179" path="/22/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.387613][ T5826] usb 11-1: USB disconnect, device number 6 [ 156.401079][T10282] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1185'. [ 156.473451][ T41] audit: type=1400 audit(1785183573.813:924): avc: denied { map } for pid=10285 comm="syz.3.1191" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 156.481594][ T41] audit: type=1400 audit(1785183573.813:925): avc: denied { execute } for pid=10285 comm="syz.3.1191" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 156.631142][T10302] lo speed is unknown, defaulting to 1000 [ 156.633852][T10302] lo speed is unknown, defaulting to 1000 [ 156.637765][T10302] lo speed is unknown, defaulting to 1000 [ 156.643742][T10302] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.648726][T10302] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.655448][T10302] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.661940][T10302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.671302][T10302] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.707173][T10302] lo speed is unknown, defaulting to 1000 [ 156.711356][T10302] lo speed is unknown, defaulting to 1000 [ 156.715111][T10302] lo speed is unknown, defaulting to 1000 [ 156.717928][T10302] lo speed is unknown, defaulting to 1000 [ 156.722261][T10302] lo speed is unknown, defaulting to 1000 [ 156.725047][T10302] lo speed is unknown, defaulting to 1000 [ 156.743612][T10304] SELinux: context truncated [ 156.745200][T10304] SELinux: invalid ocon [ 156.791821][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1198'. [ 156.814415][T10304] SELinux: failed to load policy [ 156.824502][T10311] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 156.826549][T10311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.829774][T10311] vhci_hcd vhci_hcd.0: Device attached [ 156.833523][T10312] vhci_hcd: connection closed [ 156.833723][ T12] vhci_hcd vhci_hcd.7: stop threads [ 156.836860][ T12] vhci_hcd vhci_hcd.7: release socket [ 156.838600][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 156.933095][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1201'. [ 157.196532][ T10] etas_es58x 10-1:1.0: could not retrieve the product info string [ 157.218445][ T41] audit: type=1400 audit(1785183574.553:926): avc: denied { write } for pid=10335 comm="syz.6.1205" name="functions" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.232509][ T41] audit: type=1800 audit(1785183574.553:927): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1205" name="c_ssize" dev="configfs" ino=41009 res=0 errno=0 [ 157.247545][ T10] usb 10-1: USB disconnect, device number 3 [ 157.251148][ T10] etas_es58x 10-1:1.0: Disconnecting 祳z 祳z [ 157.344640][ T41] audit: type=1400 audit(1785183574.683:928): avc: denied { write } for pid=10338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.385162][T10347] xt_hashlimit: size too large, truncated to 1048576 [ 157.396112][ T41] audit: type=1400 audit(1785183574.733:929): avc: denied { write } for pid=10345 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.430346][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.430363][ T5750] Bluetooth: hci3: command 0x0419 tx timeout [ 157.476924][ T41] audit: type=1400 audit(1785183574.813:930): avc: denied { write } for pid=10352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.509285][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.511227][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 157.517977][ T41] audit: type=1400 audit(1785183574.853:931): avc: denied { write } for pid=10355 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.580404][T10358] cdrom: dropping to single frame dma [ 157.773046][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 157.846446][T10378] fuse: Bad value for 'fd' [ 157.857719][T10379] kvm: user requested TSC rate below hardware speed [ 158.207707][T10395] (syz.6.1219,10395,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 158.215351][T10395] (syz.6.1219,10395,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 158.221288][T10395] (syz.6.1219,10395,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 158.224840][T10395] (syz.6.1219,10395,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 158.319017][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 158.472050][ T10] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 158.477495][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.482258][ T10] usb 12-1: Product: syz [ 158.483576][ T10] usb 12-1: Manufacturer: syz [ 158.487272][ T10] usb 12-1: SerialNumber: syz [ 158.744531][ T10] rtl8150 12-1:1.0: couldn't reset the device [ 158.745600][T10433] Bluetooth: MGMT ver 1.23 [ 158.747811][ T10] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 158.761544][ T10] usb 12-1: USB disconnect, device number 2 [ 158.806207][ T1359] Process accounting resumed [ 158.820564][ T1359] Process accounting resumed [ 158.827073][ T1359] Process accounting resumed [ 158.830036][ T5849] IPVS: starting estimator thread 0... [ 158.830430][ T1359] Process accounting resumed [ 158.835727][ T1359] Process accounting resumed [ 158.840938][ T1359] Process accounting resumed [ 158.843165][ T1359] Process accounting resumed [ 158.845552][ T1359] Process accounting resumed [ 158.862591][T10437] Process accounting resumed [ 158.887433][T10446] binder: 10440:10446 ioctl c0306201 200000000640 returned -22 [ 158.920654][T10442] IPVS: using max 43 ests per chain, 103200 per kthread [ 159.063108][T10461] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 159.067180][T10461] : (slave veth0_to_bond): Releasing backup interface [ 159.155642][T10466] securityfs: Unknown parameter 'cache' [ 159.169265][ T5817] bond5: (slave vlan2): link status definitely down, disabling slave [ 159.173450][ T5817] bond5: now running without any active interface! [ 159.334338][T10476] fuse: Bad value for 'fd' [ 159.449123][ T1359] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 159.509603][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.589064][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.599351][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 159.623956][ T1359] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.627952][ T1359] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.633716][ T1359] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.639862][ T1359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.645009][ T1359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.655266][ T1359] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.659411][ T1359] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.663082][ T1359] usb 8-1: Product: syz [ 159.664849][ T1359] usb 8-1: Manufacturer: syz [ 159.681477][ T1359] cdc_wdm 8-1:1.0: skipping garbage [ 159.685963][ T1359] cdc_wdm 8-1:1.0: skipping garbage [ 159.700642][ T1359] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 159.703766][ T1359] cdc_wdm 8-1:1.0: Unknown control protocol [ 159.723887][T10488] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 159.733494][T10488] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.886354][T10495] cgroup: Need name or subsystem set [ 160.071786][ T34] usb 44-1: device descriptor read/8, error -110 [ 160.307573][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.319140][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.320487][T10512] __nla_validate_parse: 4 callbacks suppressed [ 160.320497][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1252'. [ 160.327089][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1252'. [ 160.331292][T10512] netlink: 'syz.7.1252': attribute type 4 has an invalid length. [ 160.364900][T10510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3687100835 (7374201670 ns) > initial count (4634846402 ns). Using initial count to start timer. [ 160.372372][ T10] usb 8-1: USB disconnect, device number 17 [ 160.414353][T10519] netlink: 'syz.7.1254': attribute type 11 has an invalid length. [ 160.462756][ T34] usb usb44-port1: attempt power cycle [ 160.472262][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1254'. [ 160.751283][T10527] netlink: 'syz.7.1256': attribute type 1 has an invalid length. [ 160.763787][T10527] bond1: entered promiscuous mode [ 160.765765][T10527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.773748][T10527] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.777932][T10527] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 160.781927][T10527] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 160.788770][T10527] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 160.947048][T10534] NILFS (nbd3): device size too small [ 161.033075][ T34] usb usb44-port1: unable to enumerate USB device [ 161.414210][T10548] netlink: 'syz.3.1260': attribute type 21 has an invalid length. [ 161.441663][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.444274][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.478004][T10485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.487946][T10485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.554640][ T9738] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.557536][ T9738] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.565008][ T9738] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.568043][ T9738] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.573480][T10550] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1261'. [ 161.589098][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.669852][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1263'. [ 161.680299][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.682644][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 161.693047][T10561] syzkaller0: entered promiscuous mode [ 161.694813][T10561] syzkaller0: entered allmulticast mode [ 162.438263][ T41] kauditd_printk_skb: 16 callbacks suppressed [ 162.438354][ T41] audit: type=1400 audit(1785183579.773:948): avc: denied { setopt } for pid=10573 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.455698][T10589] lo speed is unknown, defaulting to 1000 [ 163.493998][ T41] audit: type=1400 audit(1785183580.833:949): avc: denied { transition } for pid=10588 comm="syz.5.1272" path="/35/file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 163.501332][ T41] audit: type=1400 audit(1785183580.833:950): avc: denied { entrypoint } for pid=10588 comm="syz.5.1272" path="/35/file0" dev="tmpfs" ino=221 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.508522][ T41] audit: type=1400 audit(1785183580.833:951): avc: denied { share } for pid=10588 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 163.514753][ T41] audit: type=1400 audit(1785183580.833:952): avc: denied { noatsecure } for pid=10588 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 163.752669][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 164.309196][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.575489][T10550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.596150][T10601] lo speed is unknown, defaulting to 1000 [ 164.623938][T10604] 9p: Bad value for 'port' [ 164.628565][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1278'. [ 164.687575][T10613] overlayfs: failed to resolve './bus': -2 [ 164.822791][T10632] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1283'. [ 164.918757][ T41] audit: type=1400 audit(1785183582.253:953): avc: denied { write } for pid=10636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.970112][ T41] audit: type=1400 audit(1785183582.303:954): avc: denied { write } for pid=10645 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.039979][ T41] audit: type=1400 audit(1785183582.373:955): avc: denied { write } for pid=10649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.098179][ T41] audit: type=1400 audit(1785183582.433:956): avc: denied { write } for pid=10659 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.167447][T10665] IPVS: Scheduler module ip_vs_sip not found [ 165.190423][T10665] macvtap1: entered promiscuous mode [ 165.195582][T10671] gfs2: Unknown parameter 'fD`IBx' [ 165.197749][T10665] dummy0: entered promiscuous mode [ 165.204886][T10665] team0: Device macvtap1 failed to register rx_handler [ 165.208997][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 165.241110][ T7335] dummy0: left promiscuous mode [ 165.246566][ T41] audit: type=1400 audit(1785183582.583:957): avc: denied { connect } for pid=10674 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.301798][T10684] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 165.381470][T10687] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 165.391976][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 165.395809][T10690] bridge0: port 3(syz_tun) entered disabled state [ 165.398228][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.400323][ T10] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 165.400675][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.413003][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.419660][T10687] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 165.422195][ T10] usb 10-1: config 0 descriptor?? [ 165.456099][ T10] as10x_usb: device has been detected [ 165.479907][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 165.487921][T10699] exFAT-fs (nbd6): unable to read boot sector [ 165.504018][T10699] exFAT-fs (nbd6): failed to read boot sector [ 165.504430][ T10] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 165.507590][T10699] exFAT-fs (nbd6): failed to recognize exfat type [ 165.521941][T10690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.532719][T10690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.557469][T10690] vlan0: left promiscuous mode [ 165.594482][ T10] as10x_usb: error during firmware upload part1 [ 165.601238][ T10] Registered device nBox DVB-T Dongle [ 165.628373][T10690] vlan2: left allmulticast mode [ 165.631761][T10690] veth0_to_bond: left allmulticast mode [ 165.634731][T10690] vlan3: left allmulticast mode [ 165.636305][T10690] : left allmulticast mode [ 165.679607][ T5789] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.687745][ T5789] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.694699][ T5789] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.697712][ T5789] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.720149][T10708] dvmrp0: entered allmulticast mode [ 165.756317][ T5789] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.762837][ T5789] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.771371][ T5789] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.774323][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1300'. [ 165.774873][ T5789] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.777323][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1300'. [ 165.833402][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 165.981448][ T10] usb 10-1: USB disconnect, device number 4 [ 166.001435][ T10] Unregistered device nBox DVB-T Dongle [ 166.002266][ T10] as10x_usb: device has been disconnected [ 166.030152][T10724] MPI: mpi too large (16392 bits) [ 166.190452][T10735] program syz.6.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.299854][T10746] Invalid source name [ 166.301236][T10746] UBIFS error (pid: 10746): cannot open "./file0", error -22 [ 166.367565][T10752] xt_l2tp: v2 doesn't support IP mode [ 166.550240][ T7335] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 166.674603][T10770] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 166.681513][ T5750] Bluetooth: hci2: unexpected event for opcode 0x204e [ 166.714453][ T7335] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.718008][ T7335] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.721427][ T7335] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.725426][ T7335] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.728259][ T7335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.732478][ T7335] usb 8-1: config 0 descriptor?? [ 166.798838][T10772] loop5: detected capacity change from 0 to 7 [ 166.806105][T10772] Dev loop5: unable to read RDB block 7 [ 166.807949][T10772] loop5: unable to read partition table [ 166.810033][T10772] loop5: partition table beyond EOD, truncated [ 166.812054][T10772] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 166.983285][T10784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10784 comm=syz.5.1321 [ 167.141424][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.143802][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.146069][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.148328][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.150783][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.153160][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.155421][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.157723][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.160313][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.162699][ T7335] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.168839][ T7335] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 167.402437][T10746] fuseblk: Bad value for 'fd' [ 167.405340][ T5846] usb 8-1: USB disconnect, device number 18 [ 167.599023][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 167.759625][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 167.763505][ T34] usb 11-1: config 0 has an invalid interface number: 143 but max is 0 [ 167.766168][ T34] usb 11-1: config 0 has no interface number 0 [ 167.768071][ T34] usb 11-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 167.773164][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.777859][ T34] usb 11-1: config 0 descriptor?? [ 167.848081][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 167.848094][ T41] audit: type=1400 audit(1785183585.183:967): avc: denied { setopt } for pid=10795 comm="syz.5.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.881050][T10798] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1326'. [ 167.886528][T10798] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1326'. [ 167.891414][T10798] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1326'. [ 167.894285][ T34] viperboard 11-1:0.143: version 0.00 found at bus 011 address 007 [ 167.909046][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 167.927299][ T34] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 167.931160][ T34] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 167.946960][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 167.953400][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 167.956798][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1327'. [ 167.984845][ T34] usb 11-1: USB disconnect, device number 7 [ 168.028494][T10813] loop9: detected capacity change from 0 to 255852544 [ 168.123843][ T41] audit: type=1400 audit(1785183585.463:968): avc: denied { write } for pid=10819 comm="syz.7.1331" name="core" dev="configfs" ino=6598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.141372][ T41] audit: type=1400 audit(1785183585.473:969): avc: denied { write } for pid=10819 comm="syz.7.1331" name="rd_mcp_0" dev="configfs" ino=43284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.152868][ T41] audit: type=1800 audit(1785183585.493:970): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1331" name="enable" dev="configfs" ino=42754 res=0 errno=0 [ 168.239441][T10822] openvswitch: netlink: IP tunnel dst address not specified [ 168.242216][T10822] netlink: 'syz.3.1332': attribute type 16 has an invalid length. [ 168.323368][ T41] audit: type=1400 audit(1785183585.663:971): avc: denied { bind } for pid=10824 comm="syz.7.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.329292][ T41] audit: type=1400 audit(1785183585.663:972): avc: denied { connect } for pid=10824 comm="syz.7.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.618321][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1337'. [ 168.799760][T10861] syzkaller0: entered promiscuous mode [ 168.801479][T10861] syzkaller0: entered allmulticast mode [ 168.825461][ T41] audit: type=1400 audit(1785183586.163:973): avc: denied { mounton } for pid=10862 comm="syz.5.1342" path="/51/file0" dev="rpc_pipefs" ino=43337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 169.047623][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.050984][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.117400][T10875] 9p: Bad value for 'msize' [ 169.234906][ T41] audit: type=1400 audit(1785183586.573:974): avc: denied { listen } for pid=10884 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.340622][T10892] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.375198][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1351'. [ 169.396029][T10897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10897 comm=syz.7.1351 [ 169.405564][T10890] loop8: detected capacity change from 0 to 4194304 [ 169.474952][T10890] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 169.478280][T10890] PKCS7: Only support pkcs7_signedData type [ 169.617678][T10909] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 169.656272][ T41] audit: type=1400 audit(1785183586.993:975): avc: denied { map } for pid=10914 comm="syz.7.1357" path="/45/file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.707291][T10919] tmpfs: Cannot enable quota on remount [ 169.713946][T10915] lo speed is unknown, defaulting to 1000 [ 169.995512][ T5750] Bluetooth: hci0: command 0x040f tx timeout [ 170.194462][T10964] syzkaller0: create flow: hash 3859380587 index 1 [ 170.326986][T10970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=10970 comm=syz.7.1373 [ 170.372567][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.436799][T10982] netlink: 'syz.3.1376': attribute type 2 has an invalid length. [ 170.445489][T10982] : entered promiscuous mode [ 170.500491][T10988] netlink: 'syz.6.1378': attribute type 1 has an invalid length. [ 170.514840][T10988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.590004][ T41] audit: type=1400 audit(1785183587.923:976): avc: denied { setcurrent } for pid=11000 comm="syz.7.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 170.708480][T10988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10988 comm=syz.6.1378 [ 170.714916][T10988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.803940][T11011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.879720][T11015] cgroup: release_agent respecified [ 170.949669][ T5817] syzkaller0: tun_net_xmit 76 [ 170.957122][ T5817] syzkaller0: tun_net_xmit 48 [ 170.972837][T11020] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 170.972847][T11021] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 170.980523][ T24] syzkaller0: tun_net_xmit 76 [ 171.019906][T10962] syzkaller0: delete flow: hash 3859380587 index 1 [ 171.089142][T11024] Cannot find set identified by id 65534 to match [ 172.745699][ T12] bond0: (slave bond_slave_0): interface is now down [ 172.763493][ T12] bond0: (slave bond_slave_1): interface is now down [ 172.791513][ T12] bond0: now running without any active interface! [ 172.813500][T11046] overlayfs: conflicting lowerdir path [ 172.849646][T11051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.855104][T11049] overlayfs: missing 'workdir' [ 172.855759][T11053] netlink: 'syz.5.1397': attribute type 2 has an invalid length. [ 172.866662][T11053] __nla_validate_parse: 1 callbacks suppressed [ 172.866671][T11053] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1397'. [ 172.881946][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1396'. [ 172.912358][ T41] audit: type=1400 audit(1785183590.253:977): avc: denied { connect } for pid=11054 comm="syz.3.1398" lport=60354 faddr=::ffff:100.1.1.3 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 172.922797][T11057] ref_ctr_offset mismatch. inode: 0x15d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 172.928343][ T41] audit: type=1400 audit(1785183590.263:978): avc: denied { ioctl } for pid=11054 comm="syz.3.1398" path="socket:[45618]" dev="sockfs" ino=45618 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 172.952372][T11059] fuse: Unknown parameter '֚Lfd' [ 172.967534][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 173.288320][T11089] loop7: detected capacity change from 0 to 2640 [ 173.295360][T11089] buffer_io_error: 67 callbacks suppressed [ 173.295372][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.300174][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.302640][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.305171][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.307600][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.311054][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.313474][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.315935][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.319115][T11089] ldm_validate_partition_table(): Disk read failed. [ 173.321420][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.323859][T11089] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.326475][T11089] Dev loop7: unable to read RDB block 0 [ 173.328333][T11089] loop7: unable to read partition table [ 173.330488][T11089] loop_reread_partitions: partition scan of loop7 (3 ) failed (rc=-5) [ 173.451162][T11103] loop5: detected capacity change from 0 to 7 [ 173.458084][T11103] Dev loop5: unable to read RDB block 7 [ 173.461126][T11103] loop5: AHDI p1 p2 p3 [ 173.466335][T11103] loop5: partition table partially beyond EOD, truncated [ 173.469305][T11103] loop5: p1 start 1818582900 is beyond EOD, truncated [ 173.473945][T11103] loop5: p3 start 335544320 is beyond EOD, truncated [ 173.479519][ T5149] Dev loop5: unable to read RDB block 7 [ 173.481339][ T5149] loop5: AHDI p1 p2 p3 [ 173.482705][ T5149] loop5: partition table partially beyond EOD, truncated [ 173.485520][ T5149] loop5: p1 start 1818582900 is beyond EOD, truncated [ 173.487579][ T5149] loop5: p3 start 335544320 is beyond EOD, truncated [ 173.649788][T11118] netlink: 'syz.5.1417': attribute type 10 has an invalid length. [ 173.661101][T11119] netlink: 'syz.5.1417': attribute type 10 has an invalid length. [ 173.671443][T11119] ipvlan0: entered allmulticast mode [ 173.673198][T11119] veth0_vlan: entered allmulticast mode [ 173.684334][T11119] team0: Device ipvlan0 failed to register rx_handler [ 173.698039][T11118] team0: Device ipvlan0 failed to register rx_handler [ 173.856986][T11123] bond6: Removing last arp target with arp_interval on [ 173.863113][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 173.961787][T11134] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.010350][T11136] netlink: 'syz.3.1422': attribute type 13 has an invalid length. [ 174.019085][T11140] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 174.021156][T11140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.032847][T11140] vhci_hcd vhci_hcd.0: Device attached [ 174.043031][ T5750] Bluetooth: hci0: unexpected cc 0x080f length: 90 > 1 [ 174.046804][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1424'. [ 174.049822][ T5750] Bluetooth: hci0: unexpected event for opcode 0x080f [ 174.072544][T11142] vhci_hcd: connection closed [ 174.073142][ T5789] vhci_hcd vhci_hcd.7: stop threads [ 174.082603][ T5789] vhci_hcd vhci_hcd.7: release socket [ 174.084455][ T5789] vhci_hcd vhci_hcd.7: disconnect device [ 174.241998][T11169] tcpci 1-0005: probe with driver tcpci failed with error -5 [ 174.244543][T11169] i2c i2c-1: new_device: Instantiated device tcpci at 0x05 [ 174.261038][T11155] base or size exceeds the MTRR width [ 174.291164][T11176] loop5: detected capacity change from 0 to 7 [ 174.297401][T11176] Dev loop5: unable to read RDB block 7 [ 174.299885][T11176] loop5: unable to read partition table [ 174.301985][T11176] loop5: partition table beyond EOD, truncated [ 174.303959][T11176] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 174.401696][ T5149] Dev loop5: unable to read RDB block 7 [ 174.402814][T11180] zram0: detected capacity change from 0 to 8 [ 174.404626][ T5149] loop5: unable to read partition table [ 174.413258][ T5149] loop5: partition table beyond EOD, truncated [ 174.476626][ T41] audit: type=1400 audit(1785183591.813:979): avc: denied { read } for pid=11181 comm="syz.5.1437" path="socket:[47470]" dev="sockfs" ino=47470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.501487][T11188] futex_wake_op: syz.7.1439 tries to shift op by 32; fix this program [ 174.509549][ T41] audit: type=1400 audit(1785183591.853:980): avc: denied { connect } for pid=11187 comm="syz.7.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.570697][T11193] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 174.573206][T11193] SELinux: failed to load policy [ 174.631207][ T5149] Dev loop5: unable to read RDB block 7 [ 174.633114][ T5149] loop5: unable to read partition table [ 174.639216][ T5149] loop5: partition table beyond EOD, truncated [ 174.670970][T11193] futex_wake_op: syz.7.1440 tries to shift op by -1; fix this program [ 174.686353][ T41] audit: type=1800 audit(1785183592.023:981): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1441" name="file1" dev="overlay" ino=446 res=0 errno=0 [ 174.714227][ T5149] Dev loop5: unable to read RDB block 7 [ 174.716186][ T5149] loop5: unable to read partition table [ 174.721229][ T5149] loop5: partition table beyond EOD, truncated [ 174.734532][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1443'. [ 174.741497][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1443'. [ 174.765547][ T5149] Dev loop5: unable to read RDB block 7 [ 174.767437][ T5149] loop5: unable to read partition table [ 174.771933][ T5149] loop5: partition table beyond EOD, truncated [ 174.786434][ T41] audit: type=1800 audit(1785183592.123:982): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1445" name="blocks" dev="configfs" ino=45813 res=0 errno=0 [ 174.833514][ T41] audit: type=1400 audit(1785183592.173:983): avc: denied { write } for pid=9665 comm="syz-executor" name="/" dev="configfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.841047][ T41] audit: type=1400 audit(1785183592.173:984): avc: denied { setattr } for pid=9665 comm="syz-executor" path="/76/config/thunderbolt" dev="configfs" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.848348][ T41] audit: type=1400 audit(1785183592.173:985): avc: denied { write } for pid=9665 comm="syz-executor" name="/" dev="configfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.855386][ T41] audit: type=1400 audit(1785183592.183:986): avc: denied { write } for pid=9665 comm="syz-executor" name="/" dev="configfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.001230][ T34] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 175.093207][ T5149] Dev loop5: unable to read RDB block 7 [ 175.098420][ T5149] loop5: unable to read partition table [ 175.103130][ T5149] loop5: partition table beyond EOD, truncated [ 175.145841][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1454'. [ 175.149130][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 175.155058][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1454'. [ 175.259891][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1457'. [ 175.289044][ T34] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 175.439240][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 175.441233][ T34] usb usb11-port1: attempt power cycle [ 175.452384][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.459887][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.463043][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.466445][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.476394][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.645407][T11253] lo speed is unknown, defaulting to 1000 [ 175.779749][ T34] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 175.800907][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 175.838226][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.840940][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.843241][T11253] bridge_slave_0: entered allmulticast mode [ 175.845895][T11253] bridge_slave_0: entered promiscuous mode [ 175.849062][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.851386][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.853653][T11253] bridge_slave_1: entered allmulticast mode [ 175.856286][T11253] bridge_slave_1: entered promiscuous mode [ 175.880496][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.890790][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.910575][T11253] team0: Port device team_slave_0 added [ 175.913968][T11253] team0: Port device team_slave_1 added [ 175.929107][ T34] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 175.935563][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.937818][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.946513][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.949634][ T34] usb 11-1: Invalid ep0 maxpacket: 16 [ 175.952238][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.952743][ T34] usb usb11-port1: unable to enumerate USB device [ 175.955192][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.966513][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.003245][T11253] hsr_slave_0: entered promiscuous mode [ 176.006239][T11253] hsr_slave_1: entered promiscuous mode [ 176.009172][T11253] debugfs: 'hsr0' already exists in 'hsr' [ 176.011491][T11253] Cannot create hsr debugfs directory [ 176.139160][ T7335] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 176.157328][T11253] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.163865][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.166601][T11253] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 176.174388][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.177093][T11253] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 176.182746][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.185478][T11253] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 176.189236][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.202584][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.204864][T11253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.207178][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.209419][T11253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.242592][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.249496][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.253568][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.267381][T11253] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.276953][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.280042][ T8981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.289494][ T7335] usb 12-1: Using ep0 maxpacket: 32 [ 176.294209][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.297215][ T8981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.303679][ T7335] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 176.307722][ T7335] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 176.312691][ T7335] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.316791][ T7335] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 176.325207][ T7335] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 176.329972][ T7335] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.332949][ T7335] usb 12-1: Product: syz [ 176.334540][ T7335] usb 12-1: Manufacturer: syz [ 176.336334][ T7335] usb 12-1: SerialNumber: syz [ 176.348203][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 176.358730][ T7335] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input27 [ 176.579197][ T7335] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 176.582283][ T7335] (id 0x00) [ 176.588581][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.621082][T11316] lo speed is unknown, defaulting to 1000 [ 176.629399][ T7335] rc_core: IR keymap rc-imon-pad not found [ 176.631222][ T7335] Registered IR keymap rc-empty [ 176.633099][ T7335] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 176.636359][ T7335] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 176.747217][T11253] veth0_vlan: entered promiscuous mode [ 176.754224][T11253] veth1_vlan: entered promiscuous mode [ 176.777541][T11253] veth0_macvtap: entered promiscuous mode [ 176.781558][T11330] e1000e 0000:00:02.0 eth1: removed PHC [ 176.785954][ T7335] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 176.790444][ T7335] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input28 [ 176.799722][ T7335] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:3> initialized [ 176.885475][T11330] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 176.925831][T11253] veth1_macvtap: entered promiscuous mode [ 176.940303][T11253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.946874][T11253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.952967][ T5819] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.958484][ T5819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.962482][ T5819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.970970][ T5819] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.011293][ T34] usb 12-1: USB disconnect, device number 3 [ 177.068056][T11282] imon:send_packet: packet tx failed (-71) [ 177.087242][ T8981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.091816][T11282] imon:vfd_write: send packet #0 failed [ 177.094153][ T8981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.142585][ T8997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.145357][ T8997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.192758][T11349] input: syz0 as /devices/virtual/input/input29 [ 177.519176][ T64] Bluetooth: hci2: command tx timeout [ 177.612154][T11382] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 177.615271][T11382] UDF-fs: Scanning with blocksize 2048 failed [ 177.619517][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 177.622908][T11382] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 177.625279][T11382] UDF-fs: Scanning with blocksize 4096 failed [ 177.681005][T11382] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 177.712319][T11391] FAT-fs (nbd7): unable to read boot sector [ 177.770406][ T24] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 177.775128][ T24] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.782847][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 177.789977][ T24] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.794030][ T24] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.802760][ T24] usb 13-1: Product: syz [ 177.804344][ T24] usb 13-1: Manufacturer: syz [ 177.811032][ T24] usb 13-1: SerialNumber: syz [ 177.816027][ T24] usb 13-1: config 0 descriptor?? [ 177.832976][T11400] sctp: [Deprecated]: syz.6.1481 (pid 11400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.832976][T11400] Use struct sctp_sack_info instead [ 177.835187][ T24] hub 13-1:0.0: bad descriptor, ignoring hub [ 177.848603][ T24] hub 13-1:0.0: probe with driver hub failed with error -5 [ 177.855340][ T24] usb 13-1: selecting invalid altsetting 0 [ 177.906910][T11404] syzkaller0: entered promiscuous mode [ 177.912642][T11404] syzkaller0: entered allmulticast mode [ 177.960256][ T41] kauditd_printk_skb: 118 callbacks suppressed [ 177.960268][ T41] audit: type=1400 audit(1785183595.303:1105): avc: denied { write } for pid=11405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.033065][ T41] audit: type=1400 audit(1785183595.373:1106): avc: denied { write } for pid=11415 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.043451][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.056190][T11419] xt_HMARK: spi-set and port-set can't be combined [ 178.062403][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.080739][ T64] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 178.088463][ T64] Bluetooth: hci0: Injecting HCI hardware error event [ 178.092482][ T5750] Bluetooth: hci0: hardware error 0x00 [ 178.159793][ T41] audit: type=1400 audit(1785183595.493:1107): avc: denied { write } for pid=11422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.233553][ T41] audit: type=1400 audit(1785183595.573:1108): avc: denied { write } for pid=11430 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.323605][ T41] audit: type=1400 audit(1785183595.663:1109): avc: denied { write } for pid=11448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.374800][ T41] audit: type=1400 audit(1785183595.713:1110): avc: denied { write } for pid=11453 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.437669][ T41] audit: type=1400 audit(1785183595.773:1111): avc: denied { write } for pid=11458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.486175][ T41] audit: type=1400 audit(1785183595.823:1112): avc: denied { write } for pid=11462 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.556928][ T41] audit: type=1400 audit(1785183595.893:1113): avc: denied { write } for pid=11465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.622317][ T41] audit: type=1400 audit(1785183595.963:1114): avc: denied { write } for pid=11468 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.649646][T11471] __nla_validate_parse: 6 callbacks suppressed [ 178.649656][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1496'. [ 178.784071][T11484] program syz.6.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.944072][T11493] netlink: 'syz.6.1502': attribute type 1 has an invalid length. [ 178.947037][T11493] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1502'. [ 179.279489][ T5826] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 179.329051][ T34] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 179.429404][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 179.431658][ T5826] usb 12-1: unable to get BOS descriptor or descriptor too short [ 179.431758][ T7326] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 179.434974][ T5826] usb 12-1: config 4 has an invalid interface number: 111 but max is 3 [ 179.437403][ T7326] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 179.440963][ T5826] usb 12-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 179.446560][ T5826] usb 12-1: config 4 has no interface number 0 [ 179.448487][ T5826] usb 12-1: config 4 interface 111 has no altsetting 0 [ 179.452792][ T5826] usb 12-1: New USB device found, idVendor=19d2, idProduct=ffa7, bcdDevice=3e.62 [ 179.455588][ T5826] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.458060][ T5826] usb 12-1: Product: syz [ 179.459139][ T34] usb 8-1: device descriptor read/64, error -71 [ 179.461361][ T5826] usb 12-1: Manufacturer: syz [ 179.463212][ T5826] usb 12-1: SerialNumber: syz [ 179.589110][ T64] Bluetooth: hci2: command tx timeout [ 179.660018][T11528] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.677679][ T5826] option 12-1:4.111: GSM modem (1-port) converter detected [ 179.691715][ T5826] usb 12-1: USB disconnect, device number 4 [ 179.695112][ T5826] option 12-1:4.111: device disconnected [ 179.699161][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 179.774897][T11540] syzkaller1: entered promiscuous mode [ 179.776689][T11540] syzkaller1: entered allmulticast mode [ 179.829150][ T34] usb 8-1: device descriptor read/64, error -71 [ 179.939487][ T34] usb usb8-port1: attempt power cycle [ 180.150736][ T5750] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 180.279965][ T34] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 180.299460][ T34] usb 8-1: device descriptor read/8, error -71 [ 180.479205][ T24] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 180.549643][ T34] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 180.569446][ T34] usb 8-1: device descriptor read/8, error -71 [ 180.632397][ T24] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.635193][ T24] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.638464][ T24] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.641923][ T24] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 180.645325][ T24] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 180.650282][ T24] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.653280][ T24] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.655878][ T24] usb 12-1: Product: syz [ 180.657226][ T24] usb 12-1: Manufacturer: syz [ 180.667051][ T24] cdc_wdm 12-1:1.0: skipping garbage [ 180.669475][ T24] cdc_wdm 12-1:1.0: skipping garbage [ 180.673179][ T24] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 180.675134][ T24] cdc_wdm 12-1:1.0: Unknown control protocol [ 180.679670][ T34] usb usb8-port1: unable to enumerate USB device [ 181.272025][ T5846] usb 12-1: USB disconnect, device number 5 [ 181.313259][ T847] usb 13-1: USB disconnect, device number 2 [ 181.427761][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1524'. [ 181.509436][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.512325][ T7326] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 181.515883][ T7326] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 181.589171][T11580] mmap: syz.6.1527 (11580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.650712][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 181.669120][ T5750] Bluetooth: hci2: command tx timeout [ 181.837754][T11589] netlink: 'syz.7.1533': attribute type 1 has an invalid length. [ 181.858081][T11589] bond2: (slave geneve2): making interface the new active one [ 181.862235][T11589] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 181.865026][ T5819] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.868290][ T5819] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.871734][ T5819] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.874437][ T5819] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.984205][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 182.984217][ T41] audit: type=1400 audit(1785183600.323:1124): avc: denied { write } for pid=11596 comm="syz.3.1535" name="usb_gadget" dev="configfs" ino=11158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.115646][ T41] audit: type=1400 audit(1785183600.453:1125): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 183.125553][ T41] audit: type=1400 audit(1785183600.453:1126): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 183.590789][ T7326] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 183.592865][ T7326] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 183.709305][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1537'. [ 183.841206][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'. [ 183.848632][ T41] audit: type=1326 audit(1785183601.183:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11609 comm="syz.7.1539" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae0719de99 code=0x0 [ 183.850182][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 183.850539][T11618] SELinux: ebitmap: truncated map [ 183.850591][T11618] SELinux: invalid class [ 183.861829][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1544'. [ 183.871569][T11618] SELinux: failed to load policy [ 183.904801][T11629] pim6reg: entered allmulticast mode [ 183.906684][T11629] pim6reg: left allmulticast mode [ 183.962310][T11632] pim6reg: entered allmulticast mode [ 183.963856][ T41] audit: type=1326 audit(1785183601.303:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9a79de99 code=0x0 [ 184.015868][ T41] audit: type=1326 audit(1785183601.353:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9a79de99 code=0x0 [ 184.029891][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1548'. [ 184.035732][T11638] : renamed from vlan0 (while UP) [ 184.067583][ T41] audit: type=1326 audit(1785183601.403:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9a79de99 code=0x0 [ 184.135277][ T41] audit: type=1326 audit(1785183601.473:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9a79de99 code=0x0 [ 184.148592][T11645] overlayfs: upper fs does not support file handles, falling back to index=off. [ 184.152036][T11645] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 184.211248][T11650] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1552'. [ 184.215248][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1552'. [ 184.249026][T11650] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1552'. [ 184.349013][ T7339] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 184.364908][T11652] IPv4: Oversized IP packet from 127.202.26.0 [ 184.370599][T11652] veth1_virt_wifi: mtu less than device minimum [ 184.430191][T11651] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 184.461967][T11654] netlink: 'syz.6.1554': attribute type 21 has an invalid length. [ 184.467083][T11654] program syz.6.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.499004][ T7339] usb 13-1: Using ep0 maxpacket: 32 [ 184.502341][ T7339] usb 13-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 184.507886][ T7339] usb 13-1: config 1 interface 0 has no altsetting 0 [ 184.514987][ T7339] usb 13-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.40 [ 184.518018][ T7339] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.521089][ T7339] usb 13-1: Product: О [ 184.522387][ T7339] usb 13-1: Manufacturer: 唚ꔜ䑑ᓋ弽䣩纵᧐꬧⤤Š梥̔䑒ﯺ焐⸹蓜钢嵓㺪磔᭚Ķ᫝떧ີꆬ⩒㵰阍罻ᗭ윸箉曬곜碱ड頬盾까奆㲮埊╹槇ꩥ䋤콅쓳⡹ [ 184.527920][ T7339] usb 13-1: SerialNumber: Ё [ 184.661482][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1557'. [ 184.697941][ T41] audit: type=1800 audit(1785183602.033:1132): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1558" name="bus" dev="tmpfs" ino=565 res=0 errno=0 [ 184.868050][T11680] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1561'. [ 184.888512][T11682] sit0: entered promiscuous mode [ 184.891134][T11682] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 184.936922][ T7339] usbhid 13-1:1.0: can't add hid device: -71 [ 184.940345][ T7339] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 184.958072][ T7339] usb 13-1: USB disconnect, device number 3 [ 185.140786][ T41] audit: type=1400 audit(2000000000.140:1133): avc: denied { ioctl } for pid=11695 comm="syz.3.1569" path="/442/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 185.737790][T11731] netlink: 'syz.8.1577': attribute type 2 has an invalid length. [ 185.742148][T11731] loop4: detected capacity change from 0 to 7 [ 185.752343][ C0] blk_print_req_error: 31 callbacks suppressed [ 185.752365][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 185.761244][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.765276][ C0] buffer_io_error: 11 callbacks suppressed [ 185.765288][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.770445][ T7335] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 185.774260][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.777405][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.780647][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.784541][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.789048][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.792136][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.797078][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.800951][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.805335][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.808438][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 185.941713][ T7335] usb 11-1: config index 0 descriptor too short (expected 28277, got 36) [ 185.944489][ T7335] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.947641][ T7335] usb 11-1: config 0 has no interfaces? [ 185.949713][ T7335] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 185.952564][ T7335] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.956511][ T7335] usb 11-1: config 0 descriptor?? [ 186.099980][ T40] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 186.241823][ T7339] usb 11-1: USB disconnect, device number 12 [ 186.259307][ T40] usb 13-1: Using ep0 maxpacket: 32 [ 186.262729][ T40] usb 13-1: unable to get BOS descriptor or descriptor too short [ 186.269374][ T40] usb 13-1: string descriptor 0 read error: -22 [ 186.271502][ T40] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 186.274547][ T40] usb 13-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 186.283962][ T40] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 186.286641][ T40] dw2102: su3000_power_ctrl: 1, initialized 0 [ 186.289983][ T40] dvb-usb: bulk message failed: -22 (2/0) [ 186.305679][ T40] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.310140][ T40] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 186.314471][ T40] usb 13-1: media controller created [ 186.316516][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.320619][ T40] dw2102: i2c transfer failed. [ 186.324905][T11745] dvb-usb: bulk message failed: -22 (4/0) [ 186.328049][T11745] dw2102: i2c transfer failed. [ 186.332602][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.334389][ T40] dw2102: i2c transfer failed. [ 186.335950][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.337945][ T40] dw2102: i2c transfer failed. [ 186.341201][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.344553][ T40] dw2102: i2c transfer failed. [ 186.346075][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.348083][ T40] dw2102: i2c transfer failed. [ 186.349949][ T40] dvb-usb: bulk message failed: -22 (6/0) [ 186.351978][ T40] dw2102: i2c transfer failed. [ 186.353471][ T40] dvb-usb: MAC address: 02:02:02:02:02:02 [ 186.362326][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.381017][ T40] dvb-usb: bulk message failed: -22 (3/0) [ 186.383507][ T40] dw2102: command 0x0e transfer failed. [ 186.386136][ T40] dvb-usb: bulk message failed: -22 (3/0) [ 186.388149][ T40] dw2102: command 0x0e transfer failed. [ 186.644278][T11752] fuse: Unknown parameter 'dd' [ 186.699040][ T40] dvb-usb: bulk message failed: -22 (3/0) [ 186.701058][ T40] dw2102: command 0x0e transfer failed. [ 186.703343][ T40] dvb-usb: bulk message failed: -22 (3/0) [ 186.705760][ T40] dw2102: command 0x0e transfer failed. [ 186.708125][ T40] dvb-usb: bulk message failed: -22 (1/0) [ 186.710827][ T40] dw2102: command 0x51 transfer failed. [ 186.730442][ T40] DVB: Unable to find symbol ds3000_attach() [ 186.732716][ T40] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 186.779828][ T40] rc_core: IR keymap rc-su3000 not found [ 186.781647][ T40] Registered IR keymap rc-empty [ 186.787710][ T40] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 186.794371][ T40] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input30 [ 186.800535][ T40] dvb-usb: schedule remote query interval to 150 msecs. [ 186.802760][ T40] dw2102: su3000_power_ctrl: 0, initialized 1 [ 186.804615][ T40] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 186.817165][ T40] usb 13-1: USB disconnect, device number 4 [ 186.882621][ T40] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 186.943147][T11774] openvswitch: netlink: Message has 8 unknown bytes. [ 186.963854][T11776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.969940][T11774] SELinux: failed to load policy [ 187.015640][T11780] binder: 11779:11780 unknown command 0 [ 187.017425][T11780] binder: 11779:11780 ioctl c0306201 200000000480 returned -22 [ 187.058432][T11786] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.127862][ T5738] ffs_data_put(): freeing [ 187.185490][T11804] netlink: 'syz.8.1601': attribute type 10 has an invalid length. [ 187.213030][T11805] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 187.235956][T11810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.241181][T11810] overlayfs: failed to set xattr on upper [ 187.242975][T11810] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.248193][T11810] overlayfs: ...falling back to index=off. [ 187.256136][T11810] overlayfs: ...falling back to uuid=null. [ 187.742731][T11825] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.753242][T11824] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.884592][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.888731][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.129010][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 188.214937][T11839] syzkaller0: entered promiscuous mode [ 188.217038][T11839] syzkaller0: entered allmulticast mode [ 188.259106][ T34] usb 11-1: device descriptor read/64, error -71 [ 188.414683][T11846] netlink: 'syz.7.1615': attribute type 1 has an invalid length. [ 188.417170][T11846] netlink: 'syz.7.1615': attribute type 2 has an invalid length. [ 188.509122][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 188.640911][ T34] usb 11-1: device descriptor read/64, error -71 [ 188.721391][T11865] SELinux: unknown common [ 188.723506][T11865] SELinux: invalid class [ 188.725379][T11865] SELinux: failed to load policy [ 188.728136][T11865] gfs2: gfs2 mount does not exist [ 188.750830][ T34] usb usb11-port1: attempt power cycle [ 188.768833][T11872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11872 comm=syz.7.1621 [ 188.769044][T11874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11874 comm=syz.7.1621 [ 188.845304][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 188.845317][ T41] audit: type=1400 audit(2000000003.839:1138): avc: denied { connect } for pid=11884 comm="syz.8.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 188.854550][ T41] audit: type=1400 audit(2000000003.849:1139): avc: denied { ioctl } for pid=11884 comm="syz.8.1624" path="socket:[50915]" dev="sockfs" ino=50915 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 188.865958][ T41] audit: type=1400 audit(2000000003.849:1140): avc: denied { setopt } for pid=11884 comm="syz.8.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 188.998167][T11897] loop5: detected capacity change from 0 to 7 [ 189.001555][T11897] loop5: p3 p4 [ 189.002736][T11897] loop5: partition table partially beyond EOD, truncated [ 189.023201][ T7070] udevd[7070]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 189.028858][ T6507] udevd[6507]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 189.099127][ T34] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 189.119455][ T34] usb 11-1: device descriptor read/8, error -71 [ 189.255873][T11909] syzkaller0: entered promiscuous mode [ 189.258317][T11909] syzkaller0: entered allmulticast mode [ 189.368997][ T34] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 189.389426][ T34] usb 11-1: device descriptor read/8, error -71 [ 189.466574][ T41] audit: type=1400 audit(2000000004.459:1141): avc: denied { write } for pid=11920 comm="syz.8.1635" name="h" dev="configfs" ino=32191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.471594][T11921] [ 189.473248][ T41] audit: type=1400 audit(2000000004.469:1142): avc: denied { read } for pid=11920 comm="syz.8.1635" name="h" dev="configfs" ino=32192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 189.473964][T11921] ====================================================== [ 189.480864][ T41] audit: type=1400 audit(2000000004.469:1143): avc: denied { write } for pid=11920 comm="syz.8.1635" name="h" dev="configfs" ino=32191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.482775][T11921] WARNING: possible circular locking dependency detected [ 189.482784][T11921] syzkaller #0 Tainted: G L [ 189.482791][T11921] ------------------------------------------------------ [ 189.482795][T11921] syz.8.1635/11921 is trying to acquire lock: [ 189.482801][T11921] ffffffff901d0348 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.498020][ T41] audit: type=1400 audit(2000000004.469:1144): avc: denied { write } for pid=5700 comm="syz-executor" path="pipe:[3648]" dev="pipefs" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.501373][T11921] [ 189.501373][T11921] but task is already holding lock: [ 189.501381][T11921] ffff88803a98a280 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 189.501422][T11921] [ 189.501422][T11921] which lock already depends on the new lock. [ 189.501422][T11921] [ 189.501426][T11921] [ 189.501426][T11921] the existing dependency chain (in reverse order) is: [ 189.501429][T11921] [ 189.501429][T11921] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 189.501447][T11921] lock_acquire+0x1b9/0x370 [ 189.524030][T11921] down_write+0x8b/0x1f0 [ 189.525538][T11921] configfs_depend_item_unlocked+0xf3/0x6a0 [ 189.527520][T11921] usbg_make_tpg+0x261/0x620 [ 189.529115][T11921] target_fabric_make_tpg+0xab/0x8c0 [ 189.530910][T11921] configfs_mkdir+0x51e/0xb70 [ 189.532544][T11921] vfs_mkdir+0x361/0x850 [ 189.534142][T11921] filename_mkdirat+0x48b/0x5e0 [ 189.535847][T11921] __x64_sys_mkdir+0x6b/0x90 [ 189.537439][T11921] do_syscall_64+0x115/0x870 [ 189.539032][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.540994][T11921] [ 189.540994][T11921] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 189.543340][T11921] lock_acquire+0x1b9/0x370 [ 189.544943][T11921] __mutex_lock+0x1a4/0x1bd0 [ 189.546516][T11921] tcm_set_name+0x29/0xb0 [ 189.548019][T11921] function_make+0x21c/0x3f0 [ 189.549595][T11921] configfs_mkdir+0x51e/0xb70 [ 189.551195][T11921] vfs_mkdir+0x361/0x850 [ 189.552664][T11921] filename_mkdirat+0x48b/0x5e0 [ 189.554358][T11921] __x64_sys_mkdir+0x6b/0x90 [ 189.555939][T11921] do_syscall_64+0x115/0x870 [ 189.557524][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.559509][T11921] [ 189.559509][T11921] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 189.562098][T11921] check_prev_add+0xeb/0xe60 [ 189.563722][T11921] __lock_acquire+0x136c/0x1a40 [ 189.565409][T11921] lock_acquire+0x1b9/0x370 [ 189.566981][T11921] __mutex_lock+0x1a4/0x1bd0 [ 189.568579][T11921] uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.570618][T11921] configfs_symlink+0x540/0x11f0 [ 189.572340][T11921] vfs_symlink+0x178/0x4d0 [ 189.574013][T11921] filename_symlinkat+0x2a6/0x560 [ 189.575719][T11921] __x64_sys_symlink+0x79/0xb0 [ 189.577376][T11921] do_syscall_64+0x115/0x870 [ 189.578965][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.580940][T11921] [ 189.580940][T11921] other info that might help us debug this: [ 189.580940][T11921] [ 189.583983][T11921] Chain exists of: [ 189.583983][T11921] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 189.583983][T11921] [ 189.588421][T11921] Possible unsafe locking scenario: [ 189.588421][T11921] [ 189.590679][T11921] CPU0 CPU1 [ 189.592359][T11921] ---- ---- [ 189.594031][T11921] lock(&sb->s_type->i_mutex_key#27); [ 189.595707][T11921] lock(&opts->dep_lock); [ 189.597826][T11921] lock(&sb->s_type->i_mutex_key#27); [ 189.600278][T11921] lock(gadget_subsys.su_mutex); [ 189.601869][T11921] [ 189.601869][T11921] *** DEADLOCK *** [ 189.601869][T11921] [ 189.604378][T11921] 2 locks held by syz.8.1635/11921: [ 189.605982][T11921] #0: ffff888024304450 (sb_writers#17){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 189.608864][T11921] #1: ffff88803a98a280 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 189.612176][T11921] [ 189.612176][T11921] stack backtrace: [ 189.614049][T11921] CPU: 0 UID: 0 PID: 11921 Comm: syz.8.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.614066][T11921] Tainted: [L]=SOFTLOCKUP [ 189.614070][T11921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.614077][T11921] Call Trace: [ 189.614082][T11921] [ 189.614088][T11921] dump_stack_lvl+0x100/0x190 [ 189.614103][T11921] print_circular_bug.cold+0x178/0x1c7 [ 189.614121][T11921] check_noncircular+0x146/0x160 [ 189.614133][T11921] ? audit_log_end+0x24/0x30 [ 189.614153][T11921] check_prev_add+0xeb/0xe60 [ 189.614167][T11921] __lock_acquire+0x136c/0x1a40 [ 189.614182][T11921] lock_acquire+0x1b9/0x370 [ 189.614195][T11921] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.614210][T11921] ? __pfx___might_resched+0x10/0x10 [ 189.614223][T11921] ? audit_inode_permission+0x1ea/0x2a0 [ 189.614237][T11921] __mutex_lock+0x1a4/0x1bd0 [ 189.614250][T11921] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.614264][T11921] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.614277][T11921] ? lockdep_unlock+0x5a/0xc0 [ 189.614286][T11921] ? __lock_acquire+0xd5b/0x1a40 [ 189.614300][T11921] ? __pfx___mutex_lock+0x10/0x10 [ 189.614312][T11921] ? selinux_inode_permission+0x14a/0x1130 [ 189.614327][T11921] ? __pfx___might_resched+0x10/0x10 [ 189.614339][T11921] ? make_vfsgid+0xf1/0x140 [ 189.614357][T11921] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.614370][T11921] ? security_inode_permission+0xbf/0x250 [ 189.614386][T11921] uvcg_streaming_header_allow_link+0x7c/0x650 [ 189.614399][T11921] ? inode_permission+0x374/0x620 [ 189.614414][T11921] ? mntput_no_expire+0xe7/0x220 [ 189.614425][T11921] configfs_symlink+0x540/0x11f0 [ 189.614441][T11921] ? __pfx_configfs_symlink+0x10/0x10 [ 189.614458][T11921] vfs_symlink+0x178/0x4d0 [ 189.614474][T11921] filename_symlinkat+0x2a6/0x560 [ 189.614487][T11921] ? __pfx_filename_symlinkat+0x10/0x10 [ 189.614501][T11921] ? strncpy_from_user+0x19d/0x2d0 [ 189.614516][T11921] ? do_getname+0x191/0x390 [ 189.614530][T11921] __x64_sys_symlink+0x79/0xb0 [ 189.614543][T11921] do_syscall_64+0x115/0x870 [ 189.614555][T11921] ? clear_bhb_loop+0x40/0x90 [ 189.614567][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.614578][T11921] RIP: 0033:0x7f0b3799de99 [ 189.614588][T11921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.614599][T11921] RSP: 002b:00007f0b387be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 189.614609][T11921] RAX: ffffffffffffffda RBX: 00007f0b37c25fa0 RCX: 00007f0b3799de99 [ 189.614617][T11921] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000000080 [ 189.614623][T11921] RBP: 00007f0b37a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 189.614630][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.614636][T11921] R13: 00007f0b37c26038 R14: 00007f0b37c25fa0 R15: 00007ffe84090c48 [ 189.614646][T11921] [ 189.615582][ T34] usb usb11-port1: unable to enumerate USB device [ 189.631818][ T41] audit: type=1400 audit(2000000004.629:1145): avc: denied { write } for pid=11920 comm="syz.8.1635" name="uvc.usb0" dev="configfs" ino=32165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.718523][ T41] audit: type=1400 audit(2000000004.629:1146): avc: denied { create } for pid=11920 comm="syz.8.1635" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 190.133261][ T9738] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.137476][ T9738] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.174613][ T9738] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.178836][ T9738] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.244127][ T9738] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.248321][ T9738] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.314145][ T9738] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.318371][ T9738] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.406309][ T9738] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.448891][ T41] audit: type=1400 audit(2000000005.439:1147): avc: denied { write } for pid=11925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.459037][ T9738] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.514369][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.520440][ T9738] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.578732][ T9738] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.642637][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 190.647010][ T9738] bridge_slave_1: left allmulticast mode [ 190.649427][ T9738] bridge_slave_1: left promiscuous mode [ 190.651847][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.655870][ T9738] bridge_slave_0: left allmulticast mode [ 190.657653][ T9738] bridge_slave_0: left promiscuous mode [ 190.660138][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.664219][ T9738] dvmrp0: left allmulticast mode [ 190.667003][ T9738] bridge_slave_1: left allmulticast mode [ 190.668763][ T9738] bridge_slave_1: left promiscuous mode [ 190.671192][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.674173][ T9738] bridge_slave_0: left allmulticast mode [ 190.675919][ T9738] bridge_slave_0: left promiscuous mode [ 190.677677][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.727954][ T9738] bond2 (unregistering): (slave geneve2): Releasing active interface [ 190.744691][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.748627][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.753577][ T9738] bond0 (unregistering): Released all slaves [ 190.756818][ T9738] bond1 (unregistering): Released all slaves [ 190.760583][ T9738] bond2 (unregistering): Released all slaves [ 190.797070][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.802482][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.806533][ T9738] bond0 (unregistering): Released all slaves [ 190.930599][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 191.056199][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 191.164965][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 191.237141][ T9738] hsr_slave_0: left promiscuous mode [ 191.239539][ T9738] hsr_slave_1: left promiscuous mode [ 191.241427][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.243730][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.246280][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.248698][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.253198][ T9738] hsr_slave_0: left promiscuous mode [ 191.255248][ T9738] hsr_slave_1: left promiscuous mode [ 191.257140][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.260497][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.263315][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.265960][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.274397][ T9738] veth1_macvtap: left promiscuous mode [ 191.276700][ T9738] veth0_macvtap: left promiscuous mode [ 191.282106][ T9738] veth1_vlan: left promiscuous mode [ 191.284404][ T9738] veth0_vlan: left promiscuous mode [ 191.286858][ T9738] veth1_macvtap: left promiscuous mode [ 191.288597][ T9738] veth0_macvtap: left promiscuous mode [ 191.290508][ T9738] veth1_vlan: left promiscuous mode [ 191.292200][ T9738] veth0_vlan: left promiscuous mode [ 191.405698][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 191.411185][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 191.486295][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 191.499090][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 191.545182][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 191.658051][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 191.770328][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 192.122681][ T9738] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.172911][ T9738] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.214589][ T9738] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.272482][ T9738] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.380687][ T9738] bridge_slave_1: left allmulticast mode [ 192.383101][ T9738] bridge_slave_1: left promiscuous mode [ 192.385455][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.389623][ T9738] bridge_slave_0: left allmulticast mode [ 192.391992][ T9738] bridge_slave_0: left promiscuous mode [ 192.394318][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.398787][ T9738] pim6reg: left allmulticast mode [ 192.443925][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.448548][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.452245][ T9738] bond0 (unregistering): Released all slaves [ 192.455298][ T9738] bond1 (unregistering): Released all slaves [ 192.582300][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 192.691564][ T9738] hsr_slave_0: left promiscuous mode [ 192.694049][ T9738] hsr_slave_1: left promiscuous mode [ 192.696328][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.698611][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.703795][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.706211][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.710593][ T9738] veth1_macvtap: left promiscuous mode [ 192.712900][ T9738] veth0_macvtap: left promiscuous mode [ 192.714663][ T9738] veth1_vlan: left promiscuous mode [ 192.716359][ T9738] veth0_vlan: left promiscuous mode [ 192.770272][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 192.775307][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 192.819543][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 192.949630][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 193.106728][ T9738] IPVS: stop unused estimator thread 0... [ 193.111767][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 193.990291][ T1444] ieee802154 phy1 wpan1: encryption failed: -22