last executing test programs: 3m1.656746957s ago: executing program 2 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r1) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0xffffffff, 0x6, 0x0, 0xfffffffc, '\x00', '\x00', '\x00', 0x1, 0x4, 0xfffffffe, 0x80000001, "b6855a32474ffa64f77a9dcf29c94337"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="00ffffffffff"}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000340)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xb7, &(0x7f00000004c0)=""/183, 0x40f00, 0x6c, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x4, 0x5, 0x4}], 0x10, 0x7f}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x5a, 0x4c, &(0x7f0000000700)="0294e7c813a669fb420d478666683a6ff2ea2107371d9bd612944666de32528c353c8c3233f85a1a197dac3c0d8e370be250d6219592b52f1292c1ef5bc5d7709ff1a518ffe6e7e8c1cd601170baa1f4e68ea3243e20879b9175", &(0x7f0000000780)=""/76, 0x7, 0x0, 0x50, 0x73, &(0x7f0000000800)="488e9d03136966acf33a44715798fb1b64776fda5a81baabd89d5142fd291f2e063a8e82515adfd6fd8439577e1e4c13ab40617273256262adeedd27565471e0d7b13fdd5ceda33af6f433cf05039632", &(0x7f0000000880)="f285211176c8b48bd1f7dfebb795908696162407b088b173537c3091063bc8141ff79b80cc34ad71b2a5e33f78d46ac3a7fdd5c01a8841d0102a565d0a66f5b680283f667f8cdf694e68f4fdf2b8a604fb32e1f2acdeb1dbac264a031c9815dac5ec21a539508c24a16bf5d51ef16bbf6bee5d", 0x2, 0x0, 0x3}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b1a, &(0x7f0000000040)) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x800) r10 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a40)={'pimreg1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000009c0)={0x0, 0x1}) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='-{*(\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x1, 0xfff]}, {0x0, 0x1, 0x2, 0x3}}, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 3m1.505236352s ago: executing program 2 (id=481): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd, 0x900) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 3m1.429530604s ago: executing program 2 (id=482): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='fd', 0x0, r1) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 3m1.099181433s ago: executing program 2 (id=486): r0 = epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.027124101s ago: executing program 2 (id=487): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = semget(0x1, 0x0, 0x7e0) semop(r1, &(0x7f0000000280)=[{0x1, 0x2, 0x2000}, {0x2, 0x800, 0x800}], 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f00000001c0)={0x20, r6, &(0x7f0000000000)=[{0x0, 0x3}, {0x1}], 0xdeadbeef, 0x8, 0x2}) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0xc91f5a95b8599997, 0x5}}, 0x20) 3m1.026518589s ago: executing program 2 (id=488): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4894}, 0x2) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x387, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x248, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0xac, 0xc, "a1997c69451bf9a9183a86f6cc97b6ef0327ebd627c552a50c6a1f743157878db5089e9964c81f266de775c1d0a04c758208dfcc43570ede869c543c1b974dd14877731f94ea36f7f17c9f35d968b4b6ef7ceee359d99eb9304866829e9228b1a74f96b657d7ab5e5214d7f1f5f0bb4a4bf376566b5459f043763c771664464a2170d37e4d59e46797f30d2cf0cc75fa2efe4dd8c5cd7e484a9256778ceb1a9e48eca162cf4203e2"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "133e348d3efb47e89fe48e703d7e250800d2c8a5b11900e96687b6e0a7814b2f56"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "abd1ab2918fa7c745c677041219db1a0af84eff35d41e7318ee6f3c25c20d64c430fc4fa5d65903fbbfbe2611d2c7c5df4324fb5dc6eca0c09f85a97d9be7746ac186a367e3688ab1b0828dfd2b9d57fb6966c90a292f911d94395d4b2071664da316a6c176065b83578799b5eaca5950e3b105690a38f54b7efbbc2a1c5e6069b048a0473662998c1bfd47a31a141eeee554e07ded416cb6430ddbfbaa55352a921c9fad2b11c79804b979bbf50777e3425bb4ab1b846d0d0a1d7a3a9df5774e98561566f7378ce089a8d0fa3f35d3c2d4ec39f8c06f94bfe9cc611c344775ae214837a32f5d55e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x8b, 0xd, 0x1, 0x0, "0b90f12954da4f22d3adf1f1815564c532a42b54a927b0a3ad0935f3e72a7f8f80e3850bb9d1e8c4c83137bb7061c3029aa834c8a4c4d4e83246b3e505b211941dd08b0efd9c1b9122545e4dfec01593fe47eb2c06434b742f3cf6c23000b07c4a73d8b7b04fb4724ce4a4bcc614fe15f09ac73de2df8387c9af37798baee13762d79e4eba51f4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x91829502f4ae4236}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x387, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x248, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0xac, 0xc, "a1997c69451bf9a9183a86f6cc97b6ef0327ebd627c552a50c6a1f743157878db5089e9964c81f266de775c1d0a04c758208dfcc43570ede869c543c1b974dd14877731f94ea36f7f17c9f35d968b4b6ef7ceee359d99eb9304866829e9228b1a74f96b657d7ab5e5214d7f1f5f0bb4a4bf376566b5459f043763c771664464a2170d37e4d59e46797f30d2cf0cc75fa2efe4dd8c5cd7e484a9256778ceb1a9e48eca162cf4203e2"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "133e348d3efb47e89fe48e703d7e250800d2c8a5b11900e96687b6e0a7814b2f56"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "abd1ab2918fa7c745c677041219db1a0af84eff35d41e7318ee6f3c25c20d64c430fc4fa5d65903fbbfbe2611d2c7c5df4324fb5dc6eca0c09f85a97d9be7746ac186a367e3688ab1b0828dfd2b9d57fb6966c90a292f911d94395d4b2071664da316a6c176065b83578799b5eaca5950e3b105690a38f54b7efbbc2a1c5e6069b048a0473662998c1bfd47a31a141eeee554e07ded416cb6430ddbfbaa55352a921c9fad2b11c79804b979bbf50777e3425bb4ab1b846d0d0a1d7a3a9df5774e98561566f7378ce089a8d0fa3f35d3c2d4ec39f8c06f94bfe9cc611c344775ae214837a32f5d55e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x8b, 0xd, 0x1, 0x0, "0b90f12954da4f22d3adf1f1815564c532a42b54a927b0a3ad0935f3e72a7f8f80e3850bb9d1e8c4c83137bb7061c3029aa834c8a4c4d4e83246b3e505b211941dd08b0efd9c1b9122545e4dfec01593fe47eb2c06434b742f3cf6c23000b07c4a73d8b7b04fb4724ce4a4bcc614fe15f09ac73de2df8387c9af37798baee13762d79e4eba51f4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x91829502f4ae4236}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x24, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x794, 0x4}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 2m45.967296154s ago: executing program 32 (id=488): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4894}, 0x2) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x387, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x248, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0xac, 0xc, "a1997c69451bf9a9183a86f6cc97b6ef0327ebd627c552a50c6a1f743157878db5089e9964c81f266de775c1d0a04c758208dfcc43570ede869c543c1b974dd14877731f94ea36f7f17c9f35d968b4b6ef7ceee359d99eb9304866829e9228b1a74f96b657d7ab5e5214d7f1f5f0bb4a4bf376566b5459f043763c771664464a2170d37e4d59e46797f30d2cf0cc75fa2efe4dd8c5cd7e484a9256778ceb1a9e48eca162cf4203e2"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "133e348d3efb47e89fe48e703d7e250800d2c8a5b11900e96687b6e0a7814b2f56"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "abd1ab2918fa7c745c677041219db1a0af84eff35d41e7318ee6f3c25c20d64c430fc4fa5d65903fbbfbe2611d2c7c5df4324fb5dc6eca0c09f85a97d9be7746ac186a367e3688ab1b0828dfd2b9d57fb6966c90a292f911d94395d4b2071664da316a6c176065b83578799b5eaca5950e3b105690a38f54b7efbbc2a1c5e6069b048a0473662998c1bfd47a31a141eeee554e07ded416cb6430ddbfbaa55352a921c9fad2b11c79804b979bbf50777e3425bb4ab1b846d0d0a1d7a3a9df5774e98561566f7378ce089a8d0fa3f35d3c2d4ec39f8c06f94bfe9cc611c344775ae214837a32f5d55e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x8b, 0xd, 0x1, 0x0, "0b90f12954da4f22d3adf1f1815564c532a42b54a927b0a3ad0935f3e72a7f8f80e3850bb9d1e8c4c83137bb7061c3029aa834c8a4c4d4e83246b3e505b211941dd08b0efd9c1b9122545e4dfec01593fe47eb2c06434b742f3cf6c23000b07c4a73d8b7b04fb4724ce4a4bcc614fe15f09ac73de2df8387c9af37798baee13762d79e4eba51f4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x91829502f4ae4236}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x387, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x248, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0xac, 0xc, "a1997c69451bf9a9183a86f6cc97b6ef0327ebd627c552a50c6a1f743157878db5089e9964c81f266de775c1d0a04c758208dfcc43570ede869c543c1b974dd14877731f94ea36f7f17c9f35d968b4b6ef7ceee359d99eb9304866829e9228b1a74f96b657d7ab5e5214d7f1f5f0bb4a4bf376566b5459f043763c771664464a2170d37e4d59e46797f30d2cf0cc75fa2efe4dd8c5cd7e484a9256778ceb1a9e48eca162cf4203e2"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "133e348d3efb47e89fe48e703d7e250800d2c8a5b11900e96687b6e0a7814b2f56"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "abd1ab2918fa7c745c677041219db1a0af84eff35d41e7318ee6f3c25c20d64c430fc4fa5d65903fbbfbe2611d2c7c5df4324fb5dc6eca0c09f85a97d9be7746ac186a367e3688ab1b0828dfd2b9d57fb6966c90a292f911d94395d4b2071664da316a6c176065b83578799b5eaca5950e3b105690a38f54b7efbbc2a1c5e6069b048a0473662998c1bfd47a31a141eeee554e07ded416cb6430ddbfbaa55352a921c9fad2b11c79804b979bbf50777e3425bb4ab1b846d0d0a1d7a3a9df5774e98561566f7378ce089a8d0fa3f35d3c2d4ec39f8c06f94bfe9cc611c344775ae214837a32f5d55e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x8b, 0xd, 0x1, 0x0, "0b90f12954da4f22d3adf1f1815564c532a42b54a927b0a3ad0935f3e72a7f8f80e3850bb9d1e8c4c83137bb7061c3029aa834c8a4c4d4e83246b3e505b211941dd08b0efd9c1b9122545e4dfec01593fe47eb2c06434b742f3cf6c23000b07c4a73d8b7b04fb4724ce4a4bcc614fe15f09ac73de2df8387c9af37798baee13762d79e4eba51f4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x91829502f4ae4236}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x24, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x794, 0x4}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 1m36.207430894s ago: executing program 3 (id=1435): ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x51) 1m36.206965749s ago: executing program 3 (id=1436): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x4, &(0x7f00000fd000/0x4000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x4, &(0x7f00000fd000/0x4000)=nil) 1m36.147019715s ago: executing program 3 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r4) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x6001, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48055}, 0x40848c0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 1m36.03762619s ago: executing program 3 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x800008, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xb90, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m35.94734792s ago: executing program 3 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {0x4}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m35.467881208s ago: executing program 3 (id=1456): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x1, 0x800000}, &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000000)) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0xa, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) (async) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async, rerun: 32) io_uring_enter(r1, 0x4da3, 0xd93, 0x0, 0x0, 0x0) (rerun: 32) 1m35.427700228s ago: executing program 33 (id=1456): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x1, 0x800000}, &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000000)) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0xa, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) (async) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async, rerun: 32) io_uring_enter(r1, 0x4da3, 0xd93, 0x0, 0x0, 0x0) (rerun: 32) 1m23.105652533s ago: executing program 1 (id=1599): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000040)="58cf2192ee545f1f7d1d6d7491dc0d3a583a670ac54dcf48ae34c98044e76708388de67d6eed445750afd3be25eb6e820c9469b2388b8902baa5b36bbd20b238ebcbbfdf7b959d0576598500ba46cba553d9a49f3ad0f37965ec33c50fc0fbef45f2b5ce7e7b903f7ac1660db58def6e56902cdd010f4cf9d572cbb6a0bf998652c4f61a5797b1b40415200615b2314baade005ea6f10ec8a8dc4c21f03710e9da2959af49bb0a9358e36b8b6784d6d668deaf9e8692c18fc3095691058ee3e368782ddb514ffed8bb41e77fce0d7fab0b8b4ea2815693c773b9c5", 0xdb, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={r1, 0x9f, &(0x7f0000000180)=""/159}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000002c0)={r2, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000003c0)={0x0, r3, 0x5, 0x1, 0x3}) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r1, 0xc0c0c0c0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000500)={r4, 0x6}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_clone3(&(0x7f0000000780)={0x20000000, &(0x7f0000000580)=0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600), {0x31}, &(0x7f0000000640)=""/103, 0x67, &(0x7f00000006c0)=""/127, &(0x7f0000000740)=[0x0], 0x1}, 0x58) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000008c0)={0x7, 0x0, {r6}, {r8}, 0x6, 0x6}) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000940)={0x6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r10}) r11 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0x141101, 0x109) name_to_handle_at(r11, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=@fuse_with_parent={0x18, 0x82, {{0x7, 0x0, 0x1e}, {0xcd, 0x6, 0x2}}}, &(0x7f0000000b80), 0x400) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x61, &(0x7f0000000bc0)={'filter\x00', 0x4}, 0x68) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r9, 0xc0106450, &(0x7f0000000c40)={0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000c80)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r5, 0xc0106450, &(0x7f0000000cc0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000d00)={r3, 0x17d4000, 0x80000001, 0x9, 0x1, [0x0, 0x0], [0xb1a4, 0x0, 0x0, 0x6], [0x1b, 0x8001, 0x8001, 0x7], [0x0, 0x3, 0x200000000000, 0x5e5c]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000d80)={r3, 0x0, 0x1, 0x7, 0x1, [r13, r14, r15, r16], [0x3, 0xc, 0x7, 0x3], [0xe, 0x10, 0x400, 0xe689], [0x66, 0xffff, 0x2, 0x100000001]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) preadv2(r7, &(0x7f0000000e40), 0x0, 0x3, 0x72c, 0x12) 1m22.996167824s ago: executing program 1 (id=1601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8c0204}, 0xc, &(0x7f0000001000)={&(0x7f0000001980)={0x760, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x2, 0x78a, 0x0, 0x8, 0x9e00, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x23eb, 0x7, 0x3, 0x3, 0x801e, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0xb, 0x16, 0x9, 0x4, 0x60, 0x2, 0x6c, 0x60, 0x2, 0x3, 0x48, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x7, 0x9, 0x2, 0x10, 0x4, 0x1800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x7, 0xfff, 0x7, 0x4, 0x5, 0x9]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x3, 0x36]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x2}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x5}, {0x4, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x30, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x4, 0xffcc, 0x8, 0x400, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0xc, 0x7, 0xb, 0x51, 0xf64, 0x2aa5]}}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x3}, {}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x4}, {0x7, 0x1}, {0x6, 0x9}, {0x6, 0x8}, {}, {0x2, 0xa}, {0x3, 0x3}, {0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x81, 0xfff, 0x6d, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x6}, {}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x6}, {0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0x4}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x1, 0x91, 0x5, 0x9, 0xe, 0x6]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x6b6d, 0x1, 0x1, 0x4, 0xf518, 0x7ff, 0xa03b]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x6}, {0x6, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x18}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x6}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x3, 0x0, 0x16, 0x2, 0xc, 0x3, 0x24, 0x9, 0x1, 0x48, 0x24, 0xb, 0x66, 0x6c, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x75ff, 0x7f, 0xc, 0x630, 0x2, 0x2, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x2, 0x81, 0x2, 0x800, 0x76b, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x5, 0x24, 0x4b, 0x24, 0x6c, 0x2e, 0x16, 0x3, 0x6c, 0x16, 0x12, 0x36, 0xc, 0x5, 0x3, 0x5, 0x48, 0x48, 0x9, 0xb, 0x1, 0x62, 0x4, 0x9, 0x4, 0x6, 0xc, 0x5, 0x2, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x6}, {0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x2}, {0x3, 0x7}, {0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x3}, {0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x2}, {0x0, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc7, 0xcdb, 0x1, 0x1, 0x1, 0xfdb1, 0x3f7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x12, 0x5, 0x6c, 0x12, 0x4, 0x1, 0x24, 0x2, 0x9, 0x18, 0x18, 0x2, 0x18, 0x3, 0x36, 0x2, 0x48, 0x1b, 0x5, 0x0, 0x5, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x62e, 0x2, 0x7, 0xc1, 0x4, 0x2, 0xd, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x7, 0x401, 0x7fff, 0x5ed, 0xfffc, 0x1, 0x100]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x1}, {0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1000, 0xfff9, 0x40, 0x6, 0x5, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5, 0x6, 0xa055, 0x400, 0x7, 0x6, 0x1, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1, 0x0, 0x0, 0x7, 0xe5, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x24, 0x2, 0x12, 0x24, 0x24, 0x5, 0xb, 0xb, 0x16, 0x2, 0x5, 0x3, 0x24, 0x60, 0x1b, 0x2, 0x16, 0x9, 0x3, 0x9, 0x3, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x1000, 0x8, 0x2, 0x8, 0x40, 0xc, 0xff]}}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x6, 0x3, 0x83d0, 0x9, 0x7, 0xfff8]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfb, 0xf3f5, 0x9, 0x5, 0x9, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x8}, {0x6}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x5a74, 0x3, 0x7e19, 0x5, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x2, 0xebe, 0x1ff, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x6, 0x1, 0x9, 0xfa32, 0x9, 0xa00]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x5}, {0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x7}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x7, 0xa}, {}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x6, 0x2}, {}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x2}, {0x1, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x200, 0x8, 0x2, 0x5, 0x3, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x1, 0x672, 0x9624, 0x0, 0x9, 0x80]}}]}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x5, 0x8}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x2}, {0x6, 0x4}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x3}, {0x3, 0x3}, {0x3}, {0x7}, {0x5, 0x2}, {}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x18, 0x6c, 0x6c, 0x48, 0x18, 0x4, 0x1b, 0x3b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x400, 0xa, 0x1, 0x3, 0x4, 0xe]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x1, 0x16, 0x76, 0x60, 0x1, 0x4, 0x9, 0x16, 0x48, 0x6c, 0x31cd805640224fc2, 0x6c, 0x5, 0x36, 0xc, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1002, 0x5, 0x1, 0x8001, 0xc0, 0xfffe, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0xf0bb, 0x0, 0x10, 0x5, 0x7fff, 0xf8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x5}, {}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0xa}, {0x4}, {0x5, 0x5}, {0x3, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x18, 0x1, 0x24, 0x0, 0x1, 0x5, 0x30, 0xc, 0x3, 0x3, 0x18, 0x34, 0x30, 0x12, 0xc, 0x5, 0x30, 0x6, 0x1, 0x2, 0x30, 0x48, 0x4, 0x6c, 0xe, 0x30, 0x0]}]}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x760}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010127bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a0034000202020202020000080026006c09"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = semget$private(0x0, 0x1, 0x102) semop(r4, &(0x7f0000000100)=[{0x4, 0x1, 0x1800}], 0x1) semtimedop(0x0, &(0x7f0000000800)=[{0x2, 0x5790, 0x1800}], 0x1, 0x0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0102, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000, 0x0) ioctl$DVD_WRITE_STRUCT(r7, 0x5390, &(0x7f0000001140)=@bca={0x3, 0xbc, "a8ea15a7758f1378fa43bd52dc1c58a94d49de8448ec12949600429f7a8d08980474981bb22f22d4f264ac037681501644919a07943838ed35cc7ab5e0a3676860c4c2baa7e04d00f3a86d9cd72e6170a828c20e832f1194d80a90feacd750e16c2c10e746724cadd42f5e8050bc427228a77b8eab6613c4ec47913a2c1ec03dd14b1655348984444b329241f042ba63ad1150830837fef8cdb117c746a0cc88de8503c43f07a0687dbf344b4e2c04facd54b98f2a1860b2611c0f9d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000071118400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x7800, 0x1000, 0x76, {{0x1e, 0x4, 0x1, 0x14, 0x78, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x2b, 0x29, [@local, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @lsrr={0x83, 0x7, 0x6a, [@empty]}, @timestamp_prespec={0x44, 0x14, 0x13, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x57b}]}, @timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@multicast1, 0x4}, {@remote, 0x8}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x20004880) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564233a73"], 0x54}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x380, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @remote, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58f11f3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x639}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xadac3fc1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x56e6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb55}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62c40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4004}, 0x20008084) 1m22.836364102s ago: executing program 1 (id=1602): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x80}, 0x18}}, 0x0) 1m22.835519081s ago: executing program 1 (id=1603): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r2, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x122}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x122}}, 0x0) 1m22.737730564s ago: executing program 1 (id=1604): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) close(r3) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0xd4, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0xe, 0x1ff, 0x7, 0x8}, {0x9, 0x17a0, 0xc, 0x1}, {0x48, 0x9, 0xc1, 0x200001ff}, {0x867, 0x800, 0x4, 0x8009}, {0xd0000000, 0x5, 0x6, 0x120}, {0x9, 0x2, 0x4, 0xffffff00}, {0x7fff, 0x1, 0x5, 0x3477fbe9}, {0x3}, {0xfffffffd, 0xff, 0x4, 0xffffff7d}, {0x3ff, 0x1, 0xffffbfff, 0x508c}, {0x59c, 0x3, 0x45, 0x1000}, {0x6, 0xa, 0x1, 0x2}]}}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m22.045244778s ago: executing program 1 (id=1608): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m6.62175041s ago: executing program 34 (id=1608): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 21.225665809s ago: executing program 0 (id=2286): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='ceph\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f00000000c0)="fb5033398044e9683084") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0xfffd, &(0x7f0000000080)=0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 21.076581069s ago: executing program 0 (id=2292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x585, 0x0, 0x70d7}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x14, 0xde, 0x7fff0000}, {0x3, 0x7, 0x7f, 0x9}, {0x3, 0xa4, 0x2, 0x7}]}) close_range(r5, 0xffffffffffffffff, 0x0) 21.004811871s ago: executing program 0 (id=2294): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x139, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x13d}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x10000000000000, 0x4, 0xfffffffffffffffc}, {0xfffffffffffffff4}, 0xe, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.813681175s ago: executing program 0 (id=2296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x8000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x3b5e, &(0x7f0000000200)={0x0, 0xcb14, 0x2, 0x0, 0x4001bf}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, 0x0, 0x82000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x0, 0x0, 0x39, 0x0, "919ed426ff5b75f78943814810221632d92ef22dac20c26fe00786e7bc2c75acd323779fb4fce7e1492dcd2ade6d4ad42bbbf119dafa6688bda1382ba6cf44186b58f85d211f9fbdfdb53aec47de47cd"}, 0xd8) execveat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010001", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000280)='system_u:object_r:dpkg_lock_t:s0\x00', 0x21, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r1, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 20.686836991s ago: executing program 0 (id=2298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000900000085000000a5000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000010, 0x0, 0x4}]}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000001980)={@ieee802154={0x24, @none={0x0, 0x2}}, {&(0x7f0000000940)=""/4096, 0x1000}, &(0x7f0000001940)}, 0xa0) 20.053922784s ago: executing program 0 (id=2306): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x5, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @remote, 0x3}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}], 0x38) sendto$inet(r1, &(0x7f0000000300)="e1cfa8ebbd64e08cbea8c1ae4f2b25c1e32fb4d9635d3ea662f939197a472cc0733784ed3b2d", 0x26, 0xc840, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0xa) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x8) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x4c002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x141081, 0x0) 19.863743052s ago: executing program 35 (id=2306): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x5, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @remote, 0x3}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}], 0x38) sendto$inet(r1, &(0x7f0000000300)="e1cfa8ebbd64e08cbea8c1ae4f2b25c1e32fb4d9635d3ea662f939197a472cc0733784ed3b2d", 0x26, 0xc840, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0xa) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x8) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x4c002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x141081, 0x0) 3.896196328s ago: executing program 7 (id=2553): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a020009050000000000faff0705d3"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x140) 2.432440548s ago: executing program 7 (id=2563): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2.13767607s ago: executing program 7 (id=2569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000ac0)={0x8, {"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", 0x1000}}, 0x1006) 1.573532694s ago: executing program 4 (id=2575): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)=r4) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x3}, {0x9390}, 0x48, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)="9f62fbc6019c952811edd4ad41aabe3a02132c4044", 0x15, 0x0, &(0x7f0000000300)={0x2, 0x190, {0x1, 0xc, 0xf8, "1f32d598b6ff16c493b3f00cba04c5192e9fd75e50f0e7b00d3b021e7d60eda798b3706d9b7fdc1f521da4dbd3b46bc7eda4ea9c31f9209d033db54bce6a05b1551d7fc99aa440e0d63bcb6f4dad647fc9b624bbbd046a6549152b83cc05f62840ab3a0e3e4fb6ec93cfe3a93b92c6cfefba6271259af2103fc9611acdfe4f300bcfc583442141f340f7a728e9f232b6446d8f7314cc1fcaaacfd43002aa6f7084a722dc8bb959a7e5f39c76c8bffca3e15c1dab036bdeb07b23dce5ca005724f6431cb1c53db583e0e6c9dc4160f065dcae128ca3b440ace0ea6ee29641a564899baddc89eda015af3ec6363f95565ceb93eb081ba45013", 0x8b, "579fa3e5534f362de756cc0c0b4e7fdbf32c733c6344b46dbb59b43faad48ecda1b75fbab5c8e5de8c8100674bc43af4ac25797f4d4b81be465e0aa35720e4dd5f1393b894aa15d3475192cd4af1c573cf1d793054b6777f4d879384e6ae38a6d149f895cd2527c659c59f2f9862e9d24329c472c31edd7eca87c0c843b3a4ee1a908fbefca79ddef8cc1b"}, 0xda, "0dfa21d80baac693c5916004efaae3c546d7cf3cc6d5f77350c8f2929cfbc68a8608ecefd207a6278816cce1bd0c53f889832f39b11448b1983cced5709344e8256e9c7fcbb004506c47a917b8465ee4dfa2840828653736caa6803f56dc473552d17ad2d81d06982a1a0fdf80d3d16fa89ed7572fce11404de1917e8ae06ab11901ed24a57a195032eae3332b10cc960302326129cd2a5960d3747f5479e020118cc51ae99953545dd6cfba957517129cb34285844ba2c2ec540c01e6c0066a58bc790670006765d554d30e4965be0e8ec6a01f2401522973e9"}, 0x276}) (async) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 1.465813891s ago: executing program 5 (id=2577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x65}, 0x1, 0x0, 0x0, 0x4008004}, 0x94) pwrite64(r0, &(0x7f0000000000)="fc5eeb07ea66a5f33fb5835c66b709c08cb070f91a403d181cabd99c8196cad54ec71194cbd3232e557e6a1253d4d6669f3376c45dfdf91660d92addeff7882118e5b17938b054cf59de257fc42cfad1bf645f525094296e4a0ad694df75b6a0edfbf9e86cc2e36898cfb72ece0ef8ed72", 0x71, 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x75a9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x9c}}, 0x8008006) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000580)={&(0x7f00000000c0)=0x2, 0x2, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000540)}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e0080", @ANYRES32, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (rerun: 32) 1.465567657s ago: executing program 4 (id=2578): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000200)=""/124, &(0x7f0000000280)=0x7c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}]}, 0x48}}, 0x840) 1.402698754s ago: executing program 4 (id=2579): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x21, 0x3, 0x2b8, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_gettime(r5, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, &(0x7f0000000080)) 1.397617248s ago: executing program 5 (id=2581): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/97) chdir(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) syz_clone(0x843a4600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04330affffffff0a0000"], 0xd) getpgrp(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, 0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r2 = userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) read(r2, &(0x7f0000000540)=""/158, 0x9e) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0xf, r6, 0x20, r5}, 0x10) 1.297329597s ago: executing program 4 (id=2582): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x2400) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000220000005b000000ac000000"], 0x40) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x20000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0x1b, "3eccd25569e20900"}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xf, 0x1c, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x13, 0x11, 0x4, 0x2, 0x0, r5, 0x5, '\x00', 0x0, r5, 0x0, 0x1, 0x8000000}, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r12, 0x80685600, &(0x7f00000006c0)) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x1c, 0x25, 0x109, 0x70bd2a, 0x25dfdbff, {0x16}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0x5}, 0x2) 1.296036064s ago: executing program 5 (id=2584): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xfffffffc, 0x30}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x2, 0x0, 0x7, 0x9, 0xca, 0x8, 0x1, 0xf2}, {0x2, 0x0, 0x3, 0x5, 0x400, 0x8, 0xc, 0x2}, {0x1, 0x0, 0x7fffffffffffffff, 0x3, 0x1, 0x5, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x7, 0x8, 0x6, 0x2, 0x1}, {0x2, 0x0, 0x75fd73ec, 0x4, 0x2, 0x6, 0x2, 0xffffffff9cf96fa2}], 0x5, 0x38, 0x1, 0x80000001}) (async) r2 = syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2) syncfs(r2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000002c0)={0x9c0000, 0x3e7, 0x751, r0, 0x0, &(0x7f0000000280)={0x0, 0x80000001, '\x00', @ptr=0x6}}) (async, rerun: 32) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000300)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000003c0)={0xa, 0x4, 0x7}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) (async) r5 = getpgrp(0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000480), 0x7, 0x8003) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x5}) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000540)={0xa, 0x1, 0x5, 0x10, '\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000580)={0x2, 0x5, 0x7ff, 0x8, 'syz1\x00', 0x5}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r8, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c000) (async, rerun: 64) fallocate(0xffffffffffffffff, 0x12, 0xad18, 0x101) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000740)={0x8479, 0x15, [{}, {0x8, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x2}, {0x1, 0x1}, {0xe, 0x1}, {0xa}, {0x5, 0x1}, {0xc}, {0x4, 0x1}, {0x9, 0x1}, {0xb}, {0x3}, {0x1}, {0x0, 0x1}, {0x8, 0x1}, {0x4}, {0x2}, {0x7, 0x1}, {0xf, 0x1}]}) r10 = memfd_secret(0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000780)={0x1, 0xa, 0x4, 0x100000, 0x80000001, {0x77359400}, {0x1, 0x8, 0xa, 0x1, 0x6, 0x0, "42d4d9f7"}, 0xe, 0x4, {0xffffffffffffffff}, 0x9, 0x0, r10}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) landlock_create_ruleset(&(0x7f0000000840)={0x6226, 0x2, 0xa25f4c188d8af0ab}, 0x18, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r10, 0x40405514, &(0x7f0000000880)={0x1, 0x0, 0x9c8c, 0x2, 'syz1\x00', 0x1}) (async) ioctl$BTRFS_IOC_INO_PATHS(r11, 0xc0389423, &(0x7f0000000900)={0x1, 0x8, [0x0, 0x3, 0xfffffffffffffffb, 0x3], &(0x7f00000008c0)=[0x0]}) 1.201071571s ago: executing program 5 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x14) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01f4300018000003000000003c0000180b36003c000000020000000000724fe6c6ca5de5d19dcf6573af6ca7eeeba3a61c4617870397ca90f58da84fb4d1bfabb58ff21078a819de8125ecaff00b23b7345087b1298f7fa02540a04061e60b2e53b0b254da80839ac32743093a0d382fb7de15d472f3d0b874101010a26112d2630dfad0038d3456b65757808879cc95945fbc768a1acbc6c0eca8989d7e5902644874af978b2ec467dd5c3ae70702d98e2e7100"/193], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r4, 0x6f51, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000200)=@filename='./file1\x00', r5, &(0x7f0000000640)={0x100000001, 0x4, 0x1, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) unlink(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fstat(r1, 0x0) 1.20079134s ago: executing program 4 (id=2586): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, 0x2}, 0x1c) semget$private(0x0, 0x6, 0x524) semtimedop(0x0, &(0x7f0000000140)=[{0x2, 0x3, 0x1000}, {0x0, 0x8, 0x1000}], 0x2, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x686400, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000580)=""/117, 0x75}], 0x1) 1.143344559s ago: executing program 7 (id=2587): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r5 = dup2(r4, r0) mkdirat(r4, &(0x7f0000000000)='./bus\x00', 0x21) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x4000}, {r5, 0x80e0}], 0x20000000000002fe, 0x0, 0x0, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000200)) listen(r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r9, 0x400, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x0) shutdown(r8, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r10, 0x3) 1.006375951s ago: executing program 6 (id=2589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x13, 0x4, [{0x2, 0x101}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 868.775671ms ago: executing program 4 (id=2590): r0 = inotify_init() r1 = inotify_init1(0x81800) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x85000bd1) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r5, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) 868.498379ms ago: executing program 6 (id=2591): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r1, r2], &(0x7f0000000200)=[0x10, 0x80000000], 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) 770.966ms ago: executing program 6 (id=2592): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000080)) r0 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xf, 0xfff9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 578.026093ms ago: executing program 6 (id=2593): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000700)={0x8, 0x0, 0xf3d, 0x1, '\x00', 0x10000}) (fail_nth: 8) 260.853915ms ago: executing program 5 (id=2594): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) 174.545677ms ago: executing program 6 (id=2595): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00'}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x80000, 0x0) preadv(r1, &(0x7f0000001180)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r3, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) 174.09714ms ago: executing program 7 (id=2596): syz_clone(0x8800311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) (async) r1 = socket(0x1a, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x8041) (async, rerun: 32) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 32) shutdown(r2, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r4, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r5, 0x6, 0x10}, &(0x7f0000000240)=0xc) (rerun: 64) syncfs(r1) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0x7ff}, &(0x7f0000000280)=0x8) 173.448058ms ago: executing program 6 (id=2597): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendto(r2, &(0x7f0000000180)="9eda", 0x2, 0x4004004, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 611.818µs ago: executing program 7 (id=2598): write$tun(0xffffffffffffffff, 0x0, 0x340a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944c", 0x2}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e1d, 0x3, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000040)) splice(r5, 0x0, r0, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x7) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 5 (id=2599): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8004, 0x56, @value=0x4}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799", 0x6, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r1, &(0x7f0000000000)='D.', 0x2, 0x40, 0x0, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, 0x19, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044001}, 0x4) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x0, 0x13, r5, 0x81000000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40)) sendmsg$unix(r5, &(0x7f0000000ec0)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000005c0)="2abbb13d5dd7d921b8afe8a1056ab85a986f1337d8c692fcc695c0c1e9b6caff9629462687249280f45090f97ffba3e515d59518d543b836ec953e6e4399bf70e63674cd796c9017850f61392f51807aedcc980ad6d63d8dbf4994447698ec8c14fa016f957a7d9734263c15a5de37486962a56c79f52aecf0d079f05b866401975fa7cf2d5bf020d730fb2d54a3e4744a2872736d9365eb64eafdb51b1b8bc8127a66c5fd7000e06e2f48f0b6cd6fe106442e9d0c2e8c87ec0ea2b0624665b550f6edae868f75", 0xc7}, {&(0x7f00000006c0)="31bdfa5c417e6bc16879197bc342934b4865586f9a623bb50047ae3d98ae2a3db22111e383b5b9ce111d3c00903a1fd2ddd5f152e2a7", 0x36}, {&(0x7f0000000700)="c6d0ae4f82972c70a633afc56b14864d1d07aeb8c5247dd494e9b4aaabced6f0305ebc2ed043749db99397cb90ce7ed91d2c48b8874d293b9c118f92eb1b2be60591c4256ae4d3361b4e18e1dfc11636acc9d8d4be84f8839394ebcbb333407ba9aa1be1f62e8f2263dc4de48f3a4073b890", 0x72}, {&(0x7f0000000780)="2197c0fa74def65d24800eb44fad25c3a5b9dcff8c526f4476363e0c571f6405426b9c75f87da14435c9063b11bc32091e72266a7d874a9add74872c6d12dea3a4c7ce6593a97b65658ea8ae3e063ed00fd4e00f3717039760ad20d88fb77bb31c", 0x61}, {&(0x7f0000000800)="d3a069e63b5ff1e024abbd676aaed0227a00f0cd96f041d17a70a9bec1d4cf5d7cac87f677537e62bb142c766b7750f7d3a034534af8f9732964f7f101d846cbdde7babf11100794958138db9e1eb16c0dc02cc279073d4c701ff72268b9a064aa970c38e4232e0ff7bc228685c62ccdf2732ef06ecff4825adeb06777159ed1bc86e00c9a72539483a3fa8c6d6d9a89fd4d456423477853703d17a78cef510c1aa64d7ab98066fbdc23607cb2b2913ff517c30b33b999e3f807e41259e3281f984bc3567aeb04b879e737e914a4a5cbc678f88f10ced4dd114e49f253b3b79d026a135e94dfe31ca7eba912cae0dd7343caf1e4c80bfb22", 0xf8}, {&(0x7f0000000900)="2fa188c53c959b199af7077d4e337fd852e417cfd29cb815b30faed25f74899721526763eb3d05c90348fcb53f427a5118ee0ac5852aeb8d8d3ba5f08b90479c19840d27b23e3955844937a680039f013b28339540281e662681798a211059c3cc27e6830adba7236777794feb8908cd225f1adab2482e4dc606f6406b1087f64258629b1e20d51a37e5e195c430aa604793e8bcd18181f1f592e8905b423b681e0a4101843ea8f8133a1478d70f9f0e5b1b29a9e4a4e5371bf9939e934495abaea6ed4ea2cf8802de371abf2aa81d72c9e68fff76387a2a846cb197cd914da6bce1983739b6922c2bd08b777ff8f344788175", 0xf3}, {&(0x7f0000000a00)="e7fa4d9f089774fc304dcbaa8bdb515139281664d6c04acfc92c98e87d87518e05e08fd03513d46d98841abe808cc74f3dfc4a7d16e9e31ba693b59478d1e17388a0a777cf292251201ef5e0bc6f582fa651f31ce4532f91cf18abee651d5eca41d1b6326a0f35387e531edca52c69e19105a285725aaecdcdc02d7af709fe0bcc74b958b94bc95c33c78ff62f78565ecf24c4198558fb7f3cfd62b9a9596fbe5428642fde54bf28289b6220dab399b93c4103069a7d26dc7b17063dbcae0e446a6a721a7860e8f606c17614bc8d547cb01e1b3e27a3954f661b3074d2ba4115fe7870ae2b9c19095985", 0xea}, {&(0x7f0000000b00)="61bcfd1986c5f7c0451a708bd913297b213487fcf6507248dee7bc109ad067d282313a3861b4ce050474985cacff7d3bcbd16915455bcffdbab852b4dc857c109d209d525c5a7ad4ee8cbca48199bf634c534047cc0d1852f3fb316598e6684b16d44b87e635875bebd10efb33e8d6bd30b223218a19fe1706f79885feb933b3a1b3fae3", 0x84}, {&(0x7f0000000bc0)="afb843b510d13835ac78c921f645155058d2ce3864ef1295dee34604d4cfbcb60df88d44ad4bb599bcb4a242ec5d606a0a10e9431b558270e05c98a914d9719cd65f585f2a63c396b61adcb81f63c37c90bb8e7fa0483eedc0c689b567d2e1eb6a63e9f0c4282191ee6ed682c97625127f92b31d46a9749310f0da1630355d5144efccc46aa118d29a55e33eef0e19ae871b8856d9aae4552aff5fdc7f0f3164ea1fee87ca6bb6f911b7261671535a486c99490a430a53ecccdd9a5a6b", 0xbd}, {&(0x7f0000000c80)="8f2862d6c57dc2157c87d59ac7d7c80c12a27fd962606331f69d03e66d739c9890d1ecee76dd1a5c7fdf01bb46d5853e1fd0e8015bc7dd73b10f82ec4b37eff0be62d6c0c41ee737ba0530b8db73acfed18426dc392b8fb8c274c7071d40c22b3a3bed75cb19848b66bf56cea47c478ce0304aae62", 0x75}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {r4, r7, r9}}}], 0x20, 0x40}, 0x8000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000006400)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/28, 0x1c}, {&(0x7f0000001f40)=""/147, 0x93}, {&(0x7f0000006180)=""/196, 0xc4}, {&(0x7f0000006280)=""/115, 0x73}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/93, 0x5d}], 0x7) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): read partition table [ 221.820260][T12429] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 221.823703][ T7912] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 221.966159][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.968976][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.973480][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.977067][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.979650][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.984267][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.986828][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.993386][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 221.995999][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 222.028461][ T7912] hid-generic 99A1:E260D13B:624ADF33.0007: hidraw1: HID v306f9c.17 Device [] on 9OR) K8S2c93;mmf$[g~ [ 222.149180][T12445] fido_id[12445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.318816][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'. [ 222.380210][ T1043] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 222.398898][T12464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.462711][T11221] Bluetooth: hci0: command 0x080f tx timeout [ 222.531791][ T1043] usb 11-1: Using ep0 maxpacket: 8 [ 222.534676][ T1043] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.538588][ T1043] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.540107][T11221] Bluetooth: hci5: command 0x0c1a tx timeout [ 222.541837][ T1043] usb 11-1: config 0 interface 0 has no altsetting 0 [ 222.546643][ T1043] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.550200][ T1043] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.555445][ T1043] usb 11-1: config 0 descriptor?? [ 222.766884][ T1043] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 222.820866][T12478] cgroup: Unknown subsys name 'fsuuid' [ 222.883183][ T1043] usb 11-1: USB disconnect, device number 3 [ 223.024039][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.029799][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.292479][T12494] 8021q: VLANs not supported on sit0 [ 223.297049][T12495] 8021q: VLANs not supported on sit0 [ 223.324786][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 223.324803][ T40] audit: type=1400 audit(2000000094.689:1303): avc: denied { compute_member } for pid=12498 comm="syz.5.1916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 223.350046][ T1043] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 223.367268][T12506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12506 comm=syz.0.1917 [ 223.367315][T12507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12507 comm=syz.0.1917 [ 223.502154][T12517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1922'. [ 223.505914][T12518] afs: Unknown parameter '' [ 223.509960][ T1043] usb 11-1: Using ep0 maxpacket: 32 [ 223.513443][ T1043] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 223.516477][ T1043] usb 11-1: config 0 has no interface number 0 [ 223.518590][ T1043] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.524021][ T1043] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 223.528264][ T1043] usb 11-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 43875, setting to 1024 [ 223.531965][ T1043] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 223.537827][ T1043] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.544381][ T1043] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 223.547456][ T1043] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.550242][ T1043] usb 11-1: Product: syz [ 223.551620][ T1043] usb 11-1: Manufacturer: syz [ 223.554170][ T1043] usb 11-1: SerialNumber: syz [ 223.562494][ T1043] usb 11-1: config 0 descriptor?? [ 223.565099][T12492] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 223.570839][ T1043] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input43 [ 223.643778][T12528] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 223.660671][ T100] wlan1: Trigger new scan to find an IBSS to join [ 223.748059][ C3] bcm5974 11-1:0.119: trackpad urb failed: -1 [ 223.830511][ T50] usb 11-1: USB disconnect, device number 4 [ 223.935637][ T1007] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 223.954122][T12541] binder: 12540:12541 ioctl c0306201 200000000180 returned -11 [ 223.957949][T12541] binder: 12540:12541 ioctl c0306201 2000000006c0 returned -14 [ 223.997551][T12543] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 224.010122][T12543] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.053510][T12543] bond2: (slave veth0_to_bond): Releasing backup interface [ 224.066941][T12545] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1929'. [ 224.081483][ T1007] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 224.084610][T12543] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.084882][ T1007] usb 10-1: config 0 has no interface number 0 [ 224.090464][ T1007] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.095791][ T1007] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 224.098728][ T1007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.101475][ T1007] usb 10-1: Product: syz [ 224.102940][ T1007] usb 10-1: Manufacturer: syz [ 224.104519][ T1007] usb 10-1: SerialNumber: syz [ 224.108189][ T1007] usb 10-1: config 0 descriptor?? [ 224.118744][ T1007] yurex 10-1:0.50: USB YUREX device now attached to Yurex #1 [ 224.162376][T12547] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1930'. [ 224.165561][T12547] openvswitch: netlink: Message has 5 unknown bytes. [ 224.226421][ T40] audit: type=1400 audit(2000000095.589:1304): avc: denied { accept } for pid=12551 comm="syz.4.1931" path="socket:[51129]" dev="sockfs" ino=51129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.315239][T12554] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 224.323321][ T1007] usb 10-1: USB disconnect, device number 11 [ 224.331039][ T1007] yurex 10-1:0.50: USB YUREX #1 now disconnected [ 224.573348][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.613852][T12562] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1936'. [ 224.620037][T11221] Bluetooth: hci5: command 0x0c1a tx timeout [ 224.662225][ T40] audit: type=1400 audit(2000000096.029:1305): avc: denied { read } for pid=12563 comm="syz.6.1935" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 224.707988][T12564] fuse: Unknown parameter 'rootSj-{mode' [ 224.713141][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 224.758509][T12567] /dev/sr0: Can't open blockdev [ 224.787037][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.791802][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1935'. [ 224.793215][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.851007][T12572] fuse: Invalid rootmode [ 224.953679][T12580] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 224.966450][T12580] team0: Port device dummy0 added [ 224.984449][T12582] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 225.402784][ T40] audit: type=1400 audit(2000000096.769:1306): avc: denied { write } for pid=12591 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.529959][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 225.680034][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 225.684240][ T10] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 225.687722][ T10] usb 10-1: config 0 has no interface number 0 [ 225.690633][ T10] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.695334][ T10] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 225.700041][ T10] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 43875, setting to 1024 [ 225.704628][ T10] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 225.708524][T12594] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 225.712367][ T10] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.720762][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 225.726799][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.730164][ T10] usb 10-1: Product: syz [ 225.731716][ T10] usb 10-1: Manufacturer: syz [ 225.733292][ T10] usb 10-1: SerialNumber: syz [ 225.740523][ T10] usb 10-1: config 0 descriptor?? [ 225.747798][T12590] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 225.751726][ T40] audit: type=1400 audit(2000000097.119:1307): avc: denied { listen } for pid=12606 comm="syz.0.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.767072][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input44 [ 225.779283][ T40] audit: type=1400 audit(2000000097.139:1308): avc: denied { write } for pid=12606 comm="syz.0.1948" path="socket:[50165]" dev="sockfs" ino=50165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.843178][ T40] audit: type=1400 audit(2000000097.209:1309): avc: denied { watch_mount } for pid=12608 comm="syz.0.1949" path="/503" dev="tmpfs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.904111][T12612] syzkaller1: entered promiscuous mode [ 225.906535][T12612] syzkaller1: entered allmulticast mode [ 225.911197][T12612] netlink: 'syz.6.1950': attribute type 1 has an invalid length. [ 225.916320][T12613] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1950'. [ 225.916347][T12612] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1950'. [ 225.997688][T12612] team0 (unregistering): Port device team_slave_0 removed [ 226.007865][T12612] team0 (unregistering): Port device team_slave_1 removed [ 226.027164][ T10] usb 10-1: USB disconnect, device number 12 [ 226.342869][ T40] audit: type=1400 audit(2000000097.709:1310): avc: denied { shutdown } for pid=12622 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.410013][T12626] __nla_validate_parse: 2 callbacks suppressed [ 226.410044][T12626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1953'. [ 226.420756][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.425659][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.429279][T12626] program syz.4.1953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.889691][ T40] audit: type=1400 audit(2000000098.249:1311): avc: denied { getopt } for pid=12639 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.114712][T12654] loop3: detected capacity change from 0 to 7 [ 227.130798][T12654] Dev loop3: unable to read RDB block 7 [ 227.136139][T12654] loop3: unable to read partition table [ 227.138689][T12654] loop3: partition table beyond EOD, truncated [ 227.141591][T12654] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 227.174251][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037dc7800: rx timeout, send abort [ 227.192834][ T40] audit: type=1400 audit(2000000098.559:1312): avc: denied { read } for pid=5122 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 227.227347][T12657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1962'. [ 227.418463][T12671] netlink: 'syz.0.1966': attribute type 10 has an invalid length. [ 227.556805][T12687] netlink: 'syz.5.1970': attribute type 3 has an invalid length. [ 227.573977][T12686] tmpfs: Group quota inode hardlimit too large. [ 227.680714][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037dc7800: abort rx timeout. Force session deactivation [ 227.833840][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 228.034789][T12700] netlink: 'syz.4.1975': attribute type 7 has an invalid length. [ 228.253087][T12724] blk_print_req_error: 138 callbacks suppressed [ 228.253105][T12724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.253351][T12722] macsec1: entered promiscuous mode [ 228.255809][T12724] buffer_io_error: 138 callbacks suppressed [ 228.255822][T12724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.255958][T12724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.270948][T12724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.274460][T12724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.278097][T12724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 228.281979][T12724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.285725][T12724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 228.288941][T12724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.296872][T12724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.312194][T12724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.315990][T12724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.319216][T12724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.323207][T12724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 228.326403][T12724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.330251][T12724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 228.333437][T12724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.337026][T12724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.340310][T12724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.344062][T12724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.349583][T12724] ldm_validate_partition_table(): Disk read failed. [ 228.354551][T12724] Dev nbd0: unable to read RDB block 0 [ 228.357486][T12724] nbd0: unable to read partition table [ 228.365464][T12725] ldm_validate_partition_table(): Disk read failed. [ 228.368662][T12725] Dev nbd0: unable to read RDB block 0 [ 228.372635][T12725] nbd0: unable to read partition table [ 228.417451][ T5140] ldm_validate_partition_table(): Disk read failed. [ 228.422949][ T5140] Dev nbd0: unable to read RDB block 0 [ 228.428534][ T5140] nbd0: unable to read partition table [ 228.438355][ T5140] ldm_validate_partition_table(): Disk read failed. [ 228.444282][ T5140] Dev nbd0: unable to read RDB block 0 [ 228.448125][ T5140] nbd0: unable to read partition table [ 228.493077][ T6176] ldm_validate_partition_table(): Disk read failed. [ 228.496755][ T6176] Dev nbd0: unable to read RDB block 0 [ 228.499742][ T6176] nbd0: unable to read partition table [ 228.518610][ T6176] ldm_validate_partition_table(): Disk read failed. [ 228.525920][ T6176] Dev nbd0: unable to read RDB block 0 [ 228.530052][ T6176] nbd0: unable to read partition table [ 228.565775][T12741] netlink: 'syz.5.1985': attribute type 21 has an invalid length. [ 228.569104][T12741] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1985'. [ 228.663230][T12748] ldm_validate_partition_table(): Disk read failed. [ 228.666351][T12748] Dev nbd0: unable to read RDB block 0 [ 228.669641][T12748] nbd0: unable to read partition table [ 228.674965][T12748] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 228.721260][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 228.721277][ T40] audit: type=1400 audit(2000000100.089:1319): avc: denied { read } for pid=12751 comm="syz.0.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.837728][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 228.840663][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 228.986205][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1995'. [ 229.034318][T12778] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1997'. [ 229.129560][T12789] netlink: 'syz.6.1999': attribute type 11 has an invalid length. [ 229.242912][ T40] audit: type=1400 audit(2000000100.609:1320): avc: denied { mount } for pid=12797 comm="syz.6.2002" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.283533][ T40] audit: type=1400 audit(2000000100.649:1321): avc: denied { unmount } for pid=11753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.322922][T12802] xt_cgroup: xt_cgroup: no path or classid specified [ 229.327759][T12803] xt_cgroup: xt_cgroup: no path or classid specified [ 229.628540][T12821] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 229.710084][T12826] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2010'. [ 229.710121][T12827] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2010'. [ 229.766899][T12830] ./cgroup: Can't lookup blockdev [ 229.825508][T12835] program syz.5.2012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.933638][T12842] vxcan0: tx address claim with different name [ 229.939014][T12842] kvm: kvm [12841]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 229.959374][ T40] audit: type=1400 audit(2000000101.319:1322): avc: denied { getopt } for pid=12840 comm="syz.5.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.470788][T12865] xt_policy: neither incoming nor outgoing policy selected [ 230.488109][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.490574][ T34] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 230.497423][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.646026][ T34] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 230.649562][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.654457][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.658703][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.662776][T12873] XFS (loop6): SB validate failed with error -5. [ 230.666194][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.669749][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.676703][ T34] usb 10-1: config 0 descriptor?? [ 231.104130][ T34] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 231.151811][ T34] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 231.455504][ T40] audit: type=1400 audit(2000000102.819:1323): avc: denied { shutdown } for pid=12856 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.483587][ T34] usb 10-1: USB disconnect, device number 13 [ 231.521090][T12888] QAT: Device 2 not found [ 231.673109][ T40] audit: type=1400 audit(2000000103.039:1324): avc: denied { remount } for pid=12889 comm="syz.6.2026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.835458][T12901] program syz.0.2030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.930354][ T40] audit: type=1400 audit(2000000103.299:1325): avc: denied { ioctl } for pid=12905 comm="syz.5.2031" path="socket:[54889]" dev="sockfs" ino=54889 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.027140][T12926] sctp: [Deprecated]: syz.6.2033 (pid 12926) Use of int in maxseg socket option. [ 232.027140][T12926] Use struct sctp_assoc_value instead [ 232.030463][ T40] audit: type=1400 audit(2000000103.399:1326): avc: denied { unlink } for pid=12927 comm="syz.5.2034" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.175006][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.186048][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.196271][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.198898][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.206151][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.208814][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.212371][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.215030][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.218422][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.224221][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.227512][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.230636][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.233965][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.236811][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.240461][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.243088][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.246330][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.249023][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.254061][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.256664][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.262849][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.265725][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.266316][T12948] openvswitch: netlink: IP tunnel dst address not specified [ 232.266316][T12947] openvswitch: netlink: IP tunnel dst address not specified [ 232.269211][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.277253][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.280776][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.283386][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.286669][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.289308][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.293047][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.295713][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.298945][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.302297][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.305610][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.308094][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.311552][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.314046][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.317451][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.320227][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.323583][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.326087][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.329496][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.332376][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.335663][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.338054][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.341469][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.344312][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.347478][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.350092][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.353118][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.355406][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.358452][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.363153][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.366297][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.369243][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.372481][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.374911][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.377975][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.381759][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.385167][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.387667][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.390963][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.393565][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.396843][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.399342][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.402687][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.405273][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.408428][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.411032][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.414275][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.416807][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.421288][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.423781][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.426845][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.429270][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.432325][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.434787][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.437860][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.440367][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.443550][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.445983][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.449061][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.451750][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.455102][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.457430][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.463299][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.465850][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.469085][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.472211][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.475405][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.477935][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.481327][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.483906][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.487096][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.489596][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.492976][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.495504][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.498496][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.500986][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.504170][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.506506][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.509572][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.513312][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.516501][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.518882][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.522090][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.524497][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.527594][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.530113][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.530146][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 232.533252][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.538017][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.541498][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.543935][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.547024][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.549403][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.552687][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.555235][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.558299][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.561046][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.564154][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.567335][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.570633][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.573636][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.576720][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.579075][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.582271][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.584786][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.587906][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 232.590420][T12943] binder: 12940:12943 ioctl 4018620d 200000004a80 returned -16 [ 232.663739][T12955] binder: 12954:12955 ioctl c0306201 0 returned -14 [ 232.682324][ T34] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 232.685496][ T34] usb 11-1: config 0 has no interface number 0 [ 232.687586][ T34] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.693344][ T34] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 232.696241][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.698687][ T34] usb 11-1: Product: syz [ 232.700287][ T34] usb 11-1: Manufacturer: syz [ 232.701728][ T34] usb 11-1: SerialNumber: syz [ 232.704497][ T34] usb 11-1: config 0 descriptor?? [ 232.712361][ T34] yurex 11-1:0.50: USB YUREX device now attached to Yurex #1 [ 233.109106][ T34] usb 11-1: USB disconnect, device number 5 [ 233.119027][ T34] yurex 11-1:0.50: USB YUREX #1 now disconnected [ 233.701354][ T40] audit: type=1400 audit(2000000105.059:1327): avc: denied { mounton } for pid=12963 comm="syz.5.2043" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 233.709438][ T40] audit: type=1400 audit(2000000105.069:1328): avc: denied { mounton } for pid=12963 comm="syz.5.2043" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 233.796206][T12973] dns_resolver: Unsupported server list version (0) [ 234.027217][T12984] __nla_validate_parse: 1 callbacks suppressed [ 234.027230][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2051'. [ 234.070822][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 234.219939][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 234.232588][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.236044][ T10] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.240791][ T10] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.243829][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.246431][ T10] usb 10-1: Product: syz [ 234.247925][ T10] usb 10-1: Manufacturer: syz [ 234.249703][ T10] usb 10-1: SerialNumber: syz [ 234.255845][ T10] r8152-cfgselector 10-1: Unknown version 0x0000 [ 234.257987][ T10] r8152-cfgselector 10-1: config 0 descriptor?? [ 234.439955][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 234.473269][ T7912] r8152-cfgselector 10-1: USB disconnect, device number 14 [ 234.566794][T13002] hub 8-0:1.0: USB hub found [ 234.568482][T13002] hub 8-0:1.0: 1 port detected [ 234.591568][ T34] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 234.594355][ T34] usb 11-1: config 0 has no interface number 0 [ 234.596384][ T34] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.611452][ T34] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 234.614545][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.616202][T13002] bridge4: entered promiscuous mode [ 234.617265][ T34] usb 11-1: Product: syz [ 234.619351][T13002] bridge4: entered allmulticast mode [ 234.621066][ T34] usb 11-1: Manufacturer: syz [ 234.621076][ T34] usb 11-1: SerialNumber: syz [ 234.623678][ T34] usb 11-1: config 0 descriptor?? [ 234.632991][ T40] audit: type=1400 audit(2000000105.999:1329): avc: denied { listen } for pid=13005 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.638581][ T34] yurex 11-1:0.50: USB YUREX device now attached to Yurex #1 [ 234.651985][ T40] audit: type=1400 audit(2000000105.999:1330): avc: denied { accept } for pid=13005 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.706189][ T40] audit: type=1400 audit(2000000106.069:1331): avc: denied { bind } for pid=13010 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.765616][ T40] audit: type=1800 audit(2000000106.129:1332): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2061" name="file0" dev="tmpfs" ino=1945 res=0 errno=0 [ 234.774334][ T40] audit: type=1804 audit(2000000106.129:1333): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2061" name="/newroot/366/file0" dev="tmpfs" ino=1945 res=1 errno=0 [ 234.849479][ T5839] usb 11-1: USB disconnect, device number 6 [ 234.877284][ T5839] yurex 11-1:0.50: USB YUREX #1 now disconnected [ 234.928598][T13027] geneve2: entered promiscuous mode [ 234.930345][T13027] geneve2: entered allmulticast mode [ 235.091527][T13034] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 235.091527][T13034] Please contact the netfilter-devel mailing list or update your nftables rules. [ 235.098129][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 235.124623][ T40] audit: type=1400 audit(2000000106.489:1334): avc: denied { map } for pid=13036 comm="syz.5.2068" path="socket:[54999]" dev="sockfs" ino=54999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 235.176008][ T40] audit: type=1400 audit(2000000106.539:1335): avc: denied { bind } for pid=13040 comm="syz.4.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.191002][T13039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2069'. [ 235.191667][T13041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2070'. [ 235.206246][T13039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2069'. [ 235.336103][T13055] input: syz0 as /devices/virtual/input/input46 [ 235.425820][ T40] audit: type=1400 audit(2000000106.789:1336): avc: denied { write } for pid=13058 comm="syz.6.2077" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 235.428340][T13057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13057 comm=syz.4.2076 [ 235.557470][ T40] audit: type=1400 audit(2000000106.919:1337): avc: denied { create } for pid=13067 comm="syz.5.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 235.609754][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2082'. [ 235.610951][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 235.614662][T13074] tmpfs: Unknown parameter 'n_inoFes' [ 235.691105][T13083] netlink: 'syz.6.2083': attribute type 4 has an invalid length. [ 235.704125][T13084] netlink: 'syz.6.2083': attribute type 17 has an invalid length. [ 235.845108][ T40] audit: type=1326 audit(2000000107.209:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.2085" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff10199ce59 code=0x0 [ 236.053397][T13106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13106 comm=syz.0.2090 [ 236.096399][T13112] overlay: ./file0 is not a directory [ 237.207045][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2104'. [ 237.212137][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2104'. [ 237.284375][ T9] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 237.390077][T13154] IPVS: length: 56 != 24 [ 237.398219][T13154] IPVS: length: 4096 != 24 [ 237.581907][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2108'. [ 238.070719][T13173] syz.5.2113: vmalloc error: size 4006727680, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.076357][T13173] CPU: 0 UID: 0 PID: 13173 Comm: syz.5.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.076387][T13173] Tainted: [L]=SOFTLOCKUP [ 238.076393][T13173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.076406][T13173] Call Trace: [ 238.076413][T13173] [ 238.076421][T13173] dump_stack_lvl+0x100/0x190 [ 238.076481][T13173] warn_alloc.cold+0x95/0x1c1 [ 238.076521][T13173] ? __pfx_warn_alloc+0x10/0x10 [ 238.076570][T13173] ? stack_depot_save_flags+0x27/0x9d0 [ 238.076612][T13173] ? vb2_vmalloc_alloc+0x135/0x410 [ 238.076667][T13173] __vmalloc_node_range_noprof+0x136c/0x1630 [ 238.076694][T13173] ? __video_do_ioctl+0xb2a/0xdf0 [ 238.076735][T13173] ? video_usercopy+0x47d/0x1700 [ 238.076760][T13173] ? v4l2_ioctl+0x1bd/0x250 [ 238.076776][T13173] ? __x64_sys_ioctl+0x18e/0x210 [ 238.076796][T13173] ? do_syscall_64+0x10b/0x860 [ 238.076893][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.076917][T13173] ? vb2_vmalloc_alloc+0x135/0x410 [ 238.076946][T13173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.076985][T13173] ? vb2_vmalloc_alloc+0x135/0x410 [ 238.077008][T13173] vmalloc_user_noprof+0x9e/0xe0 [ 238.077032][T13173] ? vb2_vmalloc_alloc+0x135/0x410 [ 238.077053][T13173] vb2_vmalloc_alloc+0x135/0x410 [ 238.077074][T13173] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 238.077095][T13173] __vb2_queue_alloc+0x8d5/0x1160 [ 238.077132][T13173] vb2_core_create_bufs+0x5fa/0xa30 [ 238.077158][T13173] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 238.077182][T13173] ? lock_acquire+0x1b1/0x370 [ 238.077222][T13173] vb2_create_bufs+0x40c/0x830 [ 238.077245][T13173] ? __pfx_vb2_create_bufs+0x10/0x10 [ 238.077264][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.077289][T13173] ? v4l_sanitize_colorspace+0x220/0x410 [ 238.077315][T13173] vb2_ioctl_create_bufs+0x244/0x3e0 [ 238.077334][T13173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.077359][T13173] vidioc_create_bufs+0x7d/0xf0 [ 238.077398][T13173] v4l_create_bufs+0x17d/0x270 [ 238.077429][T13173] __video_do_ioctl+0xb2a/0xdf0 [ 238.077462][T13173] ? __might_fault+0xc5/0x140 [ 238.077489][T13173] ? __pfx___video_do_ioctl+0x10/0x10 [ 238.077525][T13173] video_usercopy+0x47d/0x1700 [ 238.077551][T13173] ? __pfx___video_do_ioctl+0x10/0x10 [ 238.077581][T13173] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 238.077621][T13173] ? __pfx_video_usercopy+0x10/0x10 [ 238.077665][T13173] v4l2_ioctl+0x1bd/0x250 [ 238.077682][T13173] ? __pfx_v4l2_ioctl+0x10/0x10 [ 238.077701][T13173] __x64_sys_ioctl+0x18e/0x210 [ 238.077725][T13173] do_syscall_64+0x10b/0x860 [ 238.077753][T13173] ? clear_bhb_loop+0x40/0x90 [ 238.077774][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.077791][T13173] RIP: 0033:0x7f9ff5f9ce59 [ 238.077806][T13173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.077822][T13173] RSP: 002b:00007f9ff6da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.077872][T13173] RAX: ffffffffffffffda RBX: 00007f9ff6215fa0 RCX: 00007f9ff5f9ce59 [ 238.077886][T13173] RDX: 00002000000001c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 238.077897][T13173] RBP: 00007f9ff6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 238.077908][T13173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.077920][T13173] R13: 00007f9ff6216038 R14: 00007f9ff6215fa0 R15: 00007ffdcbba0948 [ 238.077945][T13173] [ 238.077952][T13173] Mem-Info: [ 238.218816][T13173] active_anon:6802 inactive_anon:47246 isolated_anon:0 [ 238.218816][T13173] active_file:4798 inactive_file:23947 isolated_file:0 [ 238.218816][T13173] unevictable:1769 dirty:129 writeback:0 [ 238.218816][T13173] slab_reclaimable:9188 slab_unreclaimable:85654 [ 238.218816][T13173] mapped:30464 shmem:46543 pagetables:3792 [ 238.218816][T13173] sec_pagetables:304 bounce:0 [ 238.218816][T13173] kernel_misc_reclaimable:0 [ 238.218816][T13173] free:407630 free_pcp:9425 free_cma:0 [ 238.236463][T13173] Node 0 active_anon:20940kB inactive_anon:188984kB active_file:18968kB inactive_file:95572kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:80896kB dirty:516kB writeback:0kB shmem:176864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15424kB pagetables:5904kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 238.250275][T13173] Node 1 active_anon:6268kB inactive_anon:0kB active_file:224kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:9308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:9264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 238.264176][T13173] Node 0 DMA free:7052kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 238.277087][T13173] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 238.279532][T13173] Node 0 DMA32 free:105496kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20940kB inactive_anon:188984kB active_file:18968kB inactive_file:95572kB unevictable:3540kB writepending:516kB zspages:0kB present:2080628kB managed:1260776kB mlocked:4kB bounce:0kB free_pcp:19320kB local_pcp:8180kB free_cma:0kB [ 238.292949][T13173] lowmem_reserve[]: 0 0 0 0 0 [ 238.295189][T13173] Node 1 Normal free:1517592kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6268kB inactive_anon:0kB active_file:224kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:3848kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:18688kB local_pcp:960kB free_cma:0kB [ 238.313497][T13173] lowmem_reserve[]: 0 0 0 0 0 [ 238.320822][T13173] Node 0 DMA: 6*4kB (U) 6*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 0*4096kB = 7048kB [ 238.327379][T13173] Node 0 DMA32: 2417*4kB (UME) 873*8kB (UME) 764*16kB (UME) 186*32kB (UME) 145*64kB (UME) 125*128kB (UME) 53*256kB (UME) 34*512kB (UM) 10*1024kB (M) 2*2048kB (M) 0*4096kB = 105420kB [ 238.335154][T13173] Node 1 Normal: 0*4kB 0*8kB 2*16kB (UM) 249*32kB (UM) 262*64kB (U) 259*128kB (UME) 231*256kB (U) 213*512kB (UME) 187*1024kB (UME) 17*2048kB (UME) 260*4096kB (UM) = 1517376kB [ 238.342404][T13173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.346203][T13173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.350115][T13173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.354135][T13173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.358016][T13173] 76011 total pagecache pages [ 238.369928][T13173] 727 pages in swap cache [ 238.372004][T13173] Free swap = 114188kB [ 238.373813][T13173] Total swap = 124996kB [ 238.375648][T13173] 1048443 pages RAM [ 238.377180][T13173] 0 pages HighMem/MovableOnly [ 238.379046][T13173] 283938 pages reserved [ 238.381610][T13173] 0 pages cma reserved [ 238.503246][T13192] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 238.552663][T13187] bond5: option downdelay: invalid value (18446744073709551615) [ 238.560037][T13187] bond5: option downdelay: allowed values 0 - 2147483647 [ 238.566867][T13187] bond5 (unregistering): Released all slaves [ 239.005860][T13221] loop9: detected capacity change from 0 to 2640 [ 239.138928][T13225] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.226028][T13231] fuse: Bad value for 'fd' [ 240.360069][T13257] netlink: 'syz.6.2136': attribute type 2 has an invalid length. [ 240.711013][T13265] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 240.775553][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 240.775565][ T40] audit: type=1400 audit(2000000112.139:1350): avc: denied { mount } for pid=13277 comm="syz.6.2141" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 240.838948][T13284] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 240.841649][T13284] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.844695][T13284] vhci_hcd vhci_hcd.0: Device attached [ 240.856123][T13285] vhci_hcd: connection closed [ 240.858791][T12923] vhci_hcd vhci_hcd.6: stop threads [ 240.868817][T12923] vhci_hcd vhci_hcd.6: release socket [ 240.874704][T12923] vhci_hcd vhci_hcd.6: disconnect device [ 241.151708][T13297] overlayfs: missing 'lowerdir' [ 241.153990][ T40] audit: type=1400 audit(2000000112.519:1351): avc: denied { mounton } for pid=13296 comm="syz.0.2147" path="/syzcgroup/unified/syz0" dev="pstore" ino=6193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 241.429091][T13310] overlayfs: failed to resolve './bus': -2 [ 241.539103][T13324] tmpfs: Bad value for 'mpol' [ 241.942235][ T40] audit: type=1400 audit(2000000113.309:1352): avc: denied { write } for pid=13350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.007679][T13357] __nla_validate_parse: 2 callbacks suppressed [ 242.007694][T13357] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2165'. [ 242.043700][ T40] audit: type=1400 audit(2000000113.409:1353): avc: denied { write } for pid=13358 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.143679][T13368] bond3: Unable to set up delay as MII monitoring is disabled [ 242.148206][T13368] bond3 (unregistering): Released all slaves [ 242.176731][T13357] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2165'. [ 242.382808][ T40] audit: type=1400 audit(2000000113.749:1354): avc: denied { read } for pid=13375 comm="syz.6.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.033551][T13387] loop8: detected capacity change from 0 to 7 [ 243.033868][T11221] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 243.038909][T13387] Dev loop8: unable to read RDB block 7 [ 243.042101][T13387] loop8: AHDI p1 p2 [ 243.044100][T13387] loop8: partition table partially beyond EOD, truncated [ 243.047601][T13387] loop8: p1 start 1702000233 is beyond EOD, truncated [ 243.148248][T13390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.207144][T13390] netlink: 'syz.6.2175': attribute type 23 has an invalid length. [ 243.346456][ T40] audit: type=1400 audit(2000000114.709:1355): avc: denied { getopt } for pid=13401 comm="syz.6.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 243.456575][T13407] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 243.459776][T13407] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 243.530028][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2182'. [ 243.574236][T13412] binder: 13411:13412 ioctl c0306201 200000000080 returned -14 [ 243.579225][T13412] binder: 13411:13412 ioctl c0306201 2000000003c0 returned -14 [ 243.599964][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 243.682039][T13412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.730132][ T10] usb 10-1: device descriptor read/64, error -71 [ 243.970124][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 244.053397][ T40] audit: type=1400 audit(2000000115.419:1356): avc: denied { mounton } for pid=13424 comm="syz.6.2184" path="/bus" dev="hugetlbfs" ino=55875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 244.054334][T13425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.054402][T13425] overlayfs: failed to set xattr on upper [ 244.054408][T13425] overlayfs: ...falling back to redirect_dir=nofollow. [ 244.054412][T13425] overlayfs: ...falling back to index=off. [ 244.054416][T13425] overlayfs: ...falling back to uuid=null. [ 244.054420][T13425] overlayfs: ...falling back to xino=off. [ 244.054428][T13425] overlayfs: maximum fs stacking depth exceeded [ 244.110034][ T10] usb 10-1: device descriptor read/64, error -71 [ 244.112147][T13425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.115024][T13425] overlayfs: failed to set xattr on upper [ 244.117284][T13425] overlayfs: ...falling back to redirect_dir=nofollow. [ 244.120564][T13425] overlayfs: ...falling back to index=off. [ 244.122530][T13425] overlayfs: ...falling back to uuid=null. [ 244.124741][T13425] overlayfs: maximum fs stacking depth exceeded [ 244.220369][ T10] usb usb10-port1: attempt power cycle [ 244.543096][ T40] audit: type=1400 audit(2000000115.909:1357): avc: denied { listen } for pid=13443 comm="syz.6.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.551354][ T40] audit: type=1400 audit(2000000115.909:1358): avc: denied { accept } for pid=13443 comm="syz.6.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.560494][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 244.580370][ T10] usb 10-1: device descriptor read/8, error -71 [ 244.603357][ T40] audit: type=1400 audit(2000000115.969:1359): avc: denied { mount } for pid=13443 comm="syz.6.2189" name="/" dev="rpc_pipefs" ino=56849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 244.819906][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 244.840585][ T10] usb 10-1: device descriptor read/8, error -71 [ 244.950150][ T10] usb usb10-port1: unable to enumerate USB device [ 245.099780][T13450] vxfs: unable to read disk superblock at 1 [ 245.102214][T13450] vxfs: unable to read disk superblock at 8 [ 245.104051][T13450] vxfs: can't find superblock. [ 245.503115][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2194'. [ 245.506170][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2194'. [ 246.158843][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 246.158860][ T40] audit: type=1400 audit(2000000117.519:1364): avc: denied { bind } for pid=13488 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.252217][T13490] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 246.290627][ T40] audit: type=1400 audit(2000000117.659:1365): avc: denied { write } for pid=13493 comm="syz.4.2205" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 246.301418][T13494] gfs2: not a GFS2 filesystem [ 246.334674][T13499] tmpfs: Bad value for 'mpol' [ 246.406366][T13504] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 246.411311][T13504] PKCS7: Only support pkcs7_signedData type [ 246.541752][T13504] netlink: 'syz.4.2208': attribute type 29 has an invalid length. [ 246.628944][ T40] audit: type=1400 audit(2000000117.989:1366): avc: denied { map } for pid=13512 comm="syz.4.2211" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.638310][ T40] audit: type=1400 audit(2000000117.989:1367): avc: denied { execute } for pid=13512 comm="syz.4.2211" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.656111][T13516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5392 sclass=netlink_route_socket pid=13516 comm=syz.5.2210 [ 246.657190][T13517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5392 sclass=netlink_route_socket pid=13517 comm=syz.5.2210 [ 246.834069][ T40] audit: type=1400 audit(2000000118.199:1368): avc: denied { shutdown } for pid=13523 comm="syz.4.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.912042][T13522] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 247.039353][T13540] input: syz1 as /devices/virtual/input/input47 [ 247.100939][T11221] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 247.107149][T11221] Bluetooth: hci2: Injecting HCI hardware error event [ 247.118917][T11587] Bluetooth: hci2: hardware error 0x00 [ 247.333844][T13553] netlink: 'syz.5.2222': attribute type 2 has an invalid length. [ 247.397283][T13557] hpfs: Bad magic ... probably not HPFS [ 247.406285][T13557] hpfs: Bad magic ... probably not HPFS [ 247.408765][T13557] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 247.418053][T13557] cramfs: wrong magic [ 247.436464][T13557] loop4: detected capacity change from 0 to 2640 [ 247.440115][T13557] buffer_io_error: 458 callbacks suppressed [ 247.440130][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.441128][ T40] audit: type=1326 audit(2000000118.809:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13554 comm="syz.5.2223" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ff5f9ce59 code=0x0 [ 247.442792][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.458325][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.461866][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.465065][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.468509][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.472146][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.475615][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.479085][T13557] ldm_validate_partition_table(): Disk read failed. [ 247.482002][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.485357][T13557] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.490634][T13557] Dev loop4: unable to read RDB block 0 [ 247.494197][T13557] loop4: unable to read partition table [ 247.497242][T13557] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 247.579325][T13563] kAFS: No cell specified [ 247.744161][T13566] fuseblk: Unknown parameter 'silent' [ 248.262572][T13568] /dev/sg0: Can't lookup blockdev [ 248.347709][T13570] overlayfs: failed to resolve './file1': -2 [ 248.464126][ T40] audit: type=1400 audit(2000000119.829:1370): avc: denied { mounton } for pid=13579 comm="syz.5.2232" path="/proc/674/task" dev="proc" ino=57716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 248.557614][T13583] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 248.626787][T13578] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 248.629156][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.634273][T13578] vhci_hcd vhci_hcd.0: Device attached [ 248.651488][T13578] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 248.653702][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.657381][T13578] vhci_hcd vhci_hcd.0: Device attached [ 248.849074][T13589] vhci_hcd: connection closed [ 248.850389][T13587] vhci_hcd: connection closed [ 248.854960][ T1169] vhci_hcd vhci_hcd.6: stop threads [ 248.861649][ T1169] vhci_hcd vhci_hcd.6: release socket [ 248.863927][ T1169] vhci_hcd vhci_hcd.6: disconnect device [ 248.865925][ T1169] vhci_hcd vhci_hcd.6: stop threads [ 248.867576][ T1169] vhci_hcd vhci_hcd.6: release socket [ 248.870449][ T1169] vhci_hcd vhci_hcd.6: disconnect device [ 248.891935][ T24] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 248.895475][ T24] usb 49-1: enqueue for inactive port 0 [ 248.970399][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 249.183689][T11587] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 249.651370][T13603] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 249.891012][ T40] audit: type=1400 audit(2000000121.259:1371): avc: denied { write } for pid=13608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.902689][T13606] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 249.993002][ T40] audit: type=1400 audit(2000000121.359:1372): avc: denied { write } for pid=13616 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.200009][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 250.352041][ T50] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 250.354820][ T50] usb 11-1: config 0 has no interface number 0 [ 250.356801][ T50] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.363503][ T50] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 250.367352][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.372984][ T50] usb 11-1: Product: syz [ 250.374801][ T50] usb 11-1: Manufacturer: syz [ 250.376828][ T50] usb 11-1: SerialNumber: syz [ 250.385358][ T50] usb 11-1: config 0 descriptor?? [ 250.399531][ T50] yurex 11-1:0.50: USB YUREX device now attached to Yurex #1 [ 250.486797][ T40] audit: type=1400 audit(2000000121.849:1373): avc: denied { write } for pid=13629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.498802][T13633] xt_TCPMSS: Only works on TCP SYN packets [ 250.794877][ T1043] usb 11-1: USB disconnect, device number 7 [ 250.801146][ T1043] yurex 11-1:0.50: USB YUREX #1 now disconnected [ 251.318891][T13648] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2249'. [ 251.322498][T13648] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.327778][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2249'. [ 251.419216][T13652] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 251.421311][T13652] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 251.425178][T13652] vhci_hcd vhci_hcd.0: Device attached [ 251.567361][T13667] virtiofs: Unknown parameter 'di' [ 251.702993][T13654] vhci_hcd: connection closed [ 251.704371][ T1169] vhci_hcd vhci_hcd.5: stop threads [ 251.710200][ T1007] usb 48-1: SetAddress Request (2) to port 0 [ 251.710371][ T1169] vhci_hcd vhci_hcd.5: release socket [ 251.713160][ T1007] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 251.718769][ T1169] vhci_hcd vhci_hcd.5: disconnect device [ 251.741865][ T1007] usb 48-1: enqueue for inactive port 0 [ 251.956743][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 251.956756][ T40] audit: type=1400 audit(2000000123.319:1375): avc: denied { read } for pid=13675 comm="syz.4.2254" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 251.969945][ T40] audit: type=1400 audit(2000000123.319:1376): avc: denied { open } for pid=13675 comm="syz.4.2254" path="/412/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 251.990129][ T40] audit: type=1400 audit(2000000123.329:1377): avc: denied { ioctl } for pid=13675 comm="syz.4.2254" path="/412/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 252.002402][T13677] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 252.005370][T13676] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 252.020216][T13677] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.031242][T13676] bond8: entered allmulticast mode [ 252.137803][ T1007] usb usb48-port1: attempt power cycle [ 252.143296][ T40] audit: type=1400 audit(2000000123.509:1378): avc: denied { read } for pid=13694 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.339337][T13716] FAULT_INJECTION: forcing a failure. [ 252.339337][T13716] name failslab, interval 1, probability 0, space 0, times 1 [ 252.344012][T13716] CPU: 3 UID: 0 PID: 13716 Comm: syz.4.2264 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.344029][T13716] Tainted: [L]=SOFTLOCKUP [ 252.344033][T13716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.344040][T13716] Call Trace: [ 252.344045][T13716] [ 252.344050][T13716] dump_stack_lvl+0x100/0x190 [ 252.344074][T13716] should_fail_ex.cold+0x5/0xa [ 252.344090][T13716] ? tomoyo_realpath_from_path+0xb6/0x690 [ 252.344111][T13716] should_failslab+0xc2/0x120 [ 252.344125][T13716] __kmalloc_noprof+0xe0/0x850 [ 252.344140][T13716] ? kfree+0x1dd/0x6c0 [ 252.344159][T13716] tomoyo_realpath_from_path+0xb6/0x690 [ 252.344177][T13716] tomoyo_path_perm+0x276/0x460 [ 252.344190][T13716] ? tomoyo_path_perm+0x262/0x460 [ 252.344204][T13716] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 252.344228][T13716] ? get_pid_task+0xfc/0x250 [ 252.344246][T13716] ? get_pid_task+0xfc/0x250 [ 252.344278][T13716] ? __fget_files+0x21f/0x3d0 [ 252.344303][T13716] security_inode_getattr+0x116/0x280 [ 252.344319][T13716] vfs_fstat+0x4b/0xe0 [ 252.344335][T13716] __do_sys_newfstat+0x8b/0x110 [ 252.344351][T13716] ? __pfx___do_sys_newfstat+0x10/0x10 [ 252.344374][T13716] ? __pfx_ksys_write+0x10/0x10 [ 252.344393][T13716] ? rcu_is_watching+0x12/0xc0 [ 252.344418][T13716] do_syscall_64+0x10b/0x860 [ 252.344465][T13716] ? clear_bhb_loop+0x40/0x90 [ 252.344486][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.344500][T13716] RIP: 0033:0x7ff10199ce59 [ 252.344510][T13716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.344520][T13716] RSP: 002b:00007ff1027e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 252.344542][T13716] RAX: ffffffffffffffda RBX: 00007ff101c15fa0 RCX: 00007ff10199ce59 [ 252.344549][T13716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.344554][T13716] RBP: 00007ff1027e0090 R08: 0000000000000000 R09: 0000000000000000 [ 252.344561][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.344567][T13716] R13: 00007ff101c16038 R14: 00007ff101c15fa0 R15: 00007ffdd66354d8 [ 252.344581][T13716] [ 252.344587][T13716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.411394][T13720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13720 comm=syz.5.2265 [ 252.552800][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2271'. [ 252.700839][ T1007] usb usb48-port1: unable to enumerate USB device [ 252.707872][T13743] FAULT_INJECTION: forcing a failure. [ 252.707872][T13743] name failslab, interval 1, probability 0, space 0, times 0 [ 252.717737][T13743] CPU: 3 UID: 0 PID: 13743 Comm: syz.0.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.717767][T13743] Tainted: [L]=SOFTLOCKUP [ 252.717773][T13743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.717783][T13743] Call Trace: [ 252.717790][T13743] [ 252.717797][T13743] dump_stack_lvl+0x100/0x190 [ 252.717826][T13743] should_fail_ex.cold+0x5/0xa [ 252.717851][T13743] ? tomoyo_encode2+0xfb/0x3c0 [ 252.717877][T13743] should_failslab+0xc2/0x120 [ 252.717898][T13743] __kmalloc_noprof+0xe0/0x850 [ 252.717924][T13743] ? d_absolute_path+0x136/0x1b0 [ 252.717966][T13743] tomoyo_encode2+0xfb/0x3c0 [ 252.717996][T13743] tomoyo_encode+0x29/0x50 [ 252.718021][T13743] tomoyo_realpath_from_path+0x18c/0x690 [ 252.718053][T13743] tomoyo_path_perm+0x276/0x460 [ 252.718075][T13743] ? tomoyo_path_perm+0x262/0x460 [ 252.718100][T13743] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 252.718134][T13743] ? get_pid_task+0xfc/0x250 [ 252.718159][T13743] ? get_pid_task+0xfc/0x250 [ 252.718191][T13743] ? __fget_files+0x21f/0x3d0 [ 252.718220][T13743] security_inode_getattr+0x116/0x280 [ 252.718246][T13743] vfs_fstat+0x4b/0xe0 [ 252.718273][T13743] __do_sys_newfstat+0x8b/0x110 [ 252.718300][T13743] ? __pfx___do_sys_newfstat+0x10/0x10 [ 252.718341][T13743] ? __pfx_ksys_write+0x10/0x10 [ 252.718364][T13743] ? rcu_is_watching+0x12/0xc0 [ 252.718395][T13743] do_syscall_64+0x10b/0x860 [ 252.718422][T13743] ? clear_bhb_loop+0x40/0x90 [ 252.718445][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.718463][T13743] RIP: 0033:0x7fdedf39ce59 [ 252.718478][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.718495][T13743] RSP: 002b:00007fdee02f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 252.718513][T13743] RAX: ffffffffffffffda RBX: 00007fdedf615fa0 RCX: 00007fdedf39ce59 [ 252.718524][T13743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.718534][T13743] RBP: 00007fdee02f1090 R08: 0000000000000000 R09: 0000000000000000 [ 252.718545][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.718554][T13743] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffeb92a1608 [ 252.718580][T13743] [ 252.718597][T13743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.756762][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 252.803462][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 252.818745][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.819560][T13755] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 252.826841][T13755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2267'. [ 252.830981][T13745] bond9: (slave bond0): making interface the new active one [ 252.831933][T13745] bond9: (slave bond0): Enslaving as an active interface with an up link [ 252.848280][T13755] .`: renamed from bond0 (while UP) [ 252.874247][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2278'. [ 252.879535][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2278'. [ 252.888690][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2278'. [ 252.945742][T13769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=90 sclass=netlink_audit_socket pid=13769 comm=syz.4.2284 [ 252.964342][T13775] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 253.035465][T13778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.038383][T13778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.076938][T13790] netlink: 'syz.6.2288': attribute type 1 has an invalid length. [ 253.114458][ T40] audit: type=1400 audit(2000000124.479:1379): avc: denied { bind } for pid=13795 comm="syz.6.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.129922][ T40] audit: type=1400 audit(2000000124.489:1380): avc: denied { write } for pid=13792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.173553][ T40] audit: type=1400 audit(2000000124.539:1381): avc: denied { write } for pid=13799 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.191276][T13781] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 253.360108][ T40] audit: type=1400 audit(2000000124.729:1382): avc: denied { write } for pid=13815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.379936][T13819] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 253.380095][T13813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13813 comm=syz.6.2293 [ 253.419869][ T40] audit: type=1400 audit(2000000124.779:1383): avc: denied { write } for pid=13823 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.518827][ T40] audit: type=1400 audit(2000000124.879:1384): avc: denied { write } for pid=13829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.681102][T11221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.690678][T11221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.696698][T11221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.707162][T11221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.717347][T11221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.913731][T13902] vlan0: entered promiscuous mode [ 254.938306][T13902] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 255.029761][T13909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2312'. [ 255.090535][T13891] lo speed is unknown, defaulting to 1000 [ 255.183756][T13919] xt_NFQUEUE: number of total queues is 0 [ 255.295376][T13934] openvswitch: netlink: EtherType 50a is less than min 600 [ 255.311510][T13934] input: syz0 as /devices/virtual/input/input50 [ 255.702864][ T50] IPVS: starting estimator thread 0... [ 255.720889][T13891] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.723444][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.725877][T13891] bridge_slave_0: entered allmulticast mode [ 255.728922][T13891] bridge_slave_0: entered promiscuous mode [ 255.732804][T13891] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.735611][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.738608][T13891] bridge_slave_1: entered allmulticast mode [ 255.741729][T13891] bridge_slave_1: entered promiscuous mode [ 255.746215][T13971] netlink: 'syz.4.2328': attribute type 63 has an invalid length. [ 255.756877][T13971] gretap0: entered allmulticast mode [ 255.759747][T13971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.768456][T13891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.776135][T13891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.791654][T13891] team0: Port device team_slave_0 added [ 255.795517][T13891] team0: Port device team_slave_1 added [ 255.803573][T13967] IPVS: using max 44 ests per chain, 105600 per kthread [ 255.820490][T13973] netlink: 'syz.5.2330': attribute type 2 has an invalid length. [ 255.823107][T13973] netlink: 'syz.5.2330': attribute type 2 has an invalid length. [ 255.832672][T13891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.834982][T13891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.846138][T13891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.855536][T13965] [U] v3f"S/4:XTzWtlW= [ 255.857619][T13965] [U] J"e:" [ 255.860274][T13891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.862748][T13891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.876399][T13891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.938300][T13891] hsr_slave_0: entered promiscuous mode [ 255.941768][T13891] hsr_slave_1: entered promiscuous mode [ 255.943867][T13891] debugfs: 'hsr0' already exists in 'hsr' [ 255.945640][T13891] Cannot create hsr debugfs directory [ 256.108055][T13989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.148960][T13991] binder: 13990:13991 ioctl c0306201 200000000080 returned -14 [ 256.162673][T13991] bond9: (slave .`): Releasing active interface [ 256.173204][T13991] bridge_slave_0: left allmulticast mode [ 256.175747][T13991] bridge_slave_0: left promiscuous mode [ 256.178201][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.184117][T13991] bridge_slave_1: left allmulticast mode [ 256.186035][T13991] bridge_slave_1: left promiscuous mode [ 256.188500][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.205043][T13991] bond7: (slave veth0_to_bond): Releasing backup interface [ 256.211929][T13994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.217304][T13991] .`: (slave bond_slave_0): Releasing backup interface [ 256.232363][T13991] .`: (slave bond_slave_1): Releasing backup interface [ 256.242142][T13991] team0: Port device team_slave_0 removed [ 256.251152][T13991] team0: Port device team_slave_1 removed [ 256.255500][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.257775][T13991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.262529][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.265235][T13991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.268588][T13991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.275456][T13993] team0: Mode changed to "random" [ 256.282722][T13996] tipc: Enabled bearer , priority 0 [ 256.289138][T13991] binder: 13990:13991 ioctl c0306201 2000000003c0 returned -14 [ 256.295213][T13891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.301638][T13891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.304990][T13891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.315893][T13891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.318543][T13891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.334264][T13891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.338564][T13891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.352742][T13891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.401203][T13891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.423608][T13891] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.431576][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.433841][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.446098][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.448751][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.549318][T14019] xt_hashlimit: size too large, truncated to 1048576 [ 256.779984][T11221] Bluetooth: hci2: command tx timeout [ 256.817893][T14046] __nla_validate_parse: 1 callbacks suppressed [ 256.817905][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 256.831083][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 256.959268][T13891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.249683][T13891] veth0_vlan: entered promiscuous mode [ 257.275109][T13891] veth1_vlan: entered promiscuous mode [ 257.294137][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 257.300484][T13891] veth0_macvtap: entered promiscuous mode [ 257.306541][T13891] veth1_macvtap: entered promiscuous mode [ 257.324137][T13891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.335579][T13891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.351162][ T1169] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.356468][ T1169] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.373411][ T1169] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.377279][ T1169] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.451225][ T50] usb 11-1: Using ep0 maxpacket: 32 [ 257.458895][ T50] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 257.464934][ T50] usb 11-1: config 0 has no interface number 0 [ 257.466805][ T50] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.469936][ T50] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 257.473490][ T50] usb 11-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 43875, setting to 1024 [ 257.476949][ T50] usb 11-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 257.484995][ T50] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.507533][ T50] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 257.512388][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.515004][ T50] usb 11-1: Product: syz [ 257.516298][ T50] usb 11-1: Manufacturer: syz [ 257.517695][ T50] usb 11-1: SerialNumber: syz [ 257.520596][T12922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.523722][T12922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.524033][ T50] usb 11-1: config 0 descriptor?? [ 257.530887][T14078] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 257.538697][ T50] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input51 [ 257.567511][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.571668][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.601778][ C2] bcm5974 11-1:0.119: trackpad urb failed: -1 [ 257.802546][ T5839] usb 11-1: USB disconnect, device number 8 [ 257.996890][T14149] could not open pipe file descriptor [ 258.002543][T14145] loop9: detected capacity change from 0 to 524287871 [ 258.084142][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 258.084243][ T40] audit: type=1326 audit(2000000129.449:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.4.2369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff10199ce59 code=0x0 [ 258.103966][ T40] audit: type=1326 audit(2000000129.449:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.4.2369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff10199ce59 code=0x0 [ 258.251552][T14163] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 258.294057][T14170] netlink: 424 bytes leftover after parsing attributes in process `syz.4.2372'. [ 258.296871][T14170] openvswitch: netlink: Flow key attr not present in new flow. [ 258.358914][T14175] netlink: 'syz.4.2373': attribute type 29 has an invalid length. [ 258.361371][T14175] netlink: 'syz.4.2373': attribute type 3 has an invalid length. [ 258.363700][T14175] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2373'. [ 258.699971][ T7912] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 258.852514][ T7912] usb 11-1: Using ep0 maxpacket: 16 [ 258.858370][ T7912] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.868933][ T7912] usb 11-1: config 0 interface 0 has no altsetting 0 [ 258.875120][ T7912] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 258.879162][ T7912] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.884453][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'. [ 258.888440][ T7912] usb 11-1: Product: syz [ 258.891400][ T7912] usb 11-1: Manufacturer: syz [ 258.895889][ T7912] usb 11-1: SerialNumber: syz [ 258.903203][T14200] syz_tun: entered promiscuous mode [ 258.905506][ T7912] usb 11-1: config 0 descriptor?? [ 258.912592][T14200] syz_tun: refused to change device tx_queue_len [ 258.976160][ T40] audit: type=1400 audit(2000000130.339:1405): avc: denied { ioctl } for pid=14201 comm="syz.7.2380" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 259.122331][ C1] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 259.125876][ T7912] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input52 [ 259.134902][ T7912] imon:send_packet: packet tx failed (-71) [ 259.160163][ T7912] imon 11-1:0.0: panel buttons/knobs setup failed [ 259.191972][ T40] audit: type=1400 audit(2000000130.559:1406): avc: denied { listen } for pid=14216 comm="syz.7.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 259.221288][ T7912] rc_core: IR keymap rc-imon-pad not found [ 259.223324][ T7912] Registered IR keymap rc-empty [ 259.225400][ T7912] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 259.228733][ T7912] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 259.232607][ T7912] imon:send_packet: packet tx failed (-71) [ 259.250399][ T7912] imon 11-1:0.0: remote input dev register failed [ 259.252717][ T7912] imon 11-1:0.0: imon_init_intf0: rc device setup failed [ 259.280673][ T7912] imon 11-1:0.0: unable to initialize intf0, err 0 [ 259.283589][ T7912] imon:imon_probe: failed to initialize context! [ 259.285580][ T7912] imon 11-1:0.0: unable to register, err -19 [ 259.290574][ T7912] usb 11-1: USB disconnect, device number 9 [ 259.475134][T14233] hugetlbfs: Bad value for 'uid' [ 259.477249][T14233] hugetlbfs: Bad value for 'uid' [ 259.661888][ T7912] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 259.781783][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 259.785479][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 259.833168][ T7912] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 259.837967][ T7912] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 259.843415][ T7912] usb 11-1: config 0 interface 0 has no altsetting 0 [ 259.849487][ T7912] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 259.853014][ T7912] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.855911][ T7912] usb 11-1: Product: syz [ 259.857295][ T7912] usb 11-1: Manufacturer: syz [ 259.858832][ T7912] usb 11-1: SerialNumber: syz [ 259.861683][ T7912] usb 11-1: config 0 descriptor?? [ 259.864862][T14179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 259.891525][T14242] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.091202][ C1] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 260.095318][ T7912] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input54 [ 260.108514][T11221] Bluetooth: hci2: command tx timeout [ 260.315606][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.323349][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.326924][T12922] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.327765][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.329867][T12922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.356929][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.360481][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.370797][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.372840][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.374958][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.377177][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.381677][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.384491][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.387125][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.389645][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.392452][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.394626][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.396863][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.396941][ T7912] rc_core: IR keymap rc-imon-pad not found [ 260.398855][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.401045][ T7912] Registered IR keymap rc-empty [ 260.402826][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.404425][ T7912] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 260.406457][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.411241][ T7912] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 260.412060][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.419241][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.429102][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.431156][T14259] Bluetooth: hci3: Frame reassembly failed (-84) [ 260.492069][T14273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2398'. [ 260.515382][T14273] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2398'. [ 260.519167][T14273] netlink: 'syz.5.2398': attribute type 2 has an invalid length. [ 260.543622][ T7912] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 260.558588][ T7912] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input55 [ 260.583930][ T7912] imon 11-1:0.0: iMON device (15c2:0045, intf0) on usb<11:10> initialized [ 260.713870][T14288] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2404'. [ 260.795860][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.971841][T14296] No control pipe specified [ 261.000834][T14304] create_pit_timer: 1 callbacks suppressed [ 261.000846][T14304] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 261.008401][T14304] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 261.014951][T14304] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 261.024397][T14304] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 261.026575][T14309] openvswitch: netlink: IP tunnel dst address not specified [ 261.031576][T14304] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 261.047125][T14304] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 261.131129][T14317] tap0: tun_chr_ioctl cmd 1074025672 [ 261.132836][T14317] tap0: ignored: set checksum enabled [ 261.193954][T14321] option changes via remount are deprecated (pid=14178 comm=syz.6.2375) [ 261.199304][T14321] netlink: 'syz.6.2375': attribute type 2 has an invalid length. [ 261.229265][T14323] syzkaller0: entered promiscuous mode [ 261.232464][T14323] syzkaller0: entered allmulticast mode [ 261.354458][T14327] program syz.7.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.412086][ T7912] IPVS: starting estimator thread 0... [ 261.518979][T14331] IPVS: using max 48 ests per chain, 115200 per kthread [ 261.653309][T14338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.725912][ T40] audit: type=1400 audit(2000000132.938:1407): avc: denied { read } for pid=14341 comm="syz.7.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 261.747558][T14344] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 261.786588][T14347] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 261.833605][T14351] lo speed is unknown, defaulting to 1000 [ 262.310646][ T5839] usb 11-1: USB disconnect, device number 10 [ 262.331522][T11587] Bluetooth: hci2: command tx timeout [ 262.369417][T14375] __nla_validate_parse: 1 callbacks suppressed [ 262.369429][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2428'. [ 262.376008][T14375] netlink: 'syz.6.2428': attribute type 19 has an invalid length. [ 262.379126][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2428'. [ 262.411643][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2428'. [ 262.411935][ T1169] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.415077][T14375] netlink: 'syz.6.2428': attribute type 19 has an invalid length. [ 262.415091][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2428'. [ 262.423414][ T1169] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.427750][ T1169] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.431571][ T1169] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.502117][T11221] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 262.752617][T14391] input: syz0 as /devices/virtual/input/input56 U%lou'Lo:4R]~U=_%TzP$2pWVY!ݵ;8EΤ.:N2!k6k,&\.nZjgɁ:vw3:F.gi #О<_4I[3%ڮ>6?_o# W.5EEL!w5ɢ hX:f5*0bW,X}I%Hg#-_%sx-H).Cc08gBTў4M[!5-opuȕ󸍵j:g\y"xSX~_OIQֈH~1@ٞ4t'MҶXxG㠬,Qo#e&؎ﺸŀڷ{RH_rzU2fe$h`5*ћ$2/ia ohb AB6ie8[ZծbPnx1.0XÜ:dPs A0UjX`{U 6Etv;n&qKukI%)^ V; +S?gxu۹}iq)n D|11+@':(m̆s<괩m<0tQ&yEmP3SMjB )!Ohf;hr$|l8Y,7|Fܝ0ׅXynrU@wYɰM*"y824EWK|apC,omQ?&gopXn0ܝ ]3&?(3Y;T}YʂI; Xt#& 0ɹDw:VJAHNύ@5ah]ާMBv&oDH0O%ӠCcB%'A96XJ74a24/T[&[6=`(<&l$Ln^nVStj;ZUV۬ZܞoO֣PkqU\ƪ$,(20@lpѷiJjHQy#(|p Ed&%#"׃eQQ.z2E?23ȱ=6b߃zx̧o IFm^~hV&\U pED.4aWC auNo>f>Ʊı)Q0yF͠?3L.AwpI 28$ah9BP5ҢCo| 8܊.mTu-cD+_(p~?m-fcH Կ+ /\Ucc)fCfP-҈aW?rb4lyܗ.^4t{bywauAMX柲Ή~I!+T ]Yp-!CF -@RBy;Ss5?CԄʠ6pTr[O먕#<>7%K2CHIMl4Ⱦ[@XwgjƉ 8Mwٽމ4JHE90kFw)VZlUHڵ$*''azj–= lcavͭјD PU HLW·X).8sYN]!pY%oIBk80b8ahNh\t?L餵7YlfSjXqVo[Kf6@%t%#p%W )-@dem>aQ[ouKm$ϨFnaLN#_B#3y÷27IHT5H?.4'w]] K]?]nŜYaP$7zJ vf qՅ z@N#J~~{&?S @G/p%YҼO w F|w|ֈpq.#ۘ00S$XWVl}j%VÃwbA$r8vBݒ&jS9^oc7Oa j["*!τ@ZLÌ{MxFC-RDʁsW-A6SDC0ԱW=erV ~Z Q2W&d)6'4z+@B)1Ƶ::P.mT? B.]_X ^2Tn]0ϝ>X5O[k !,UqA ;w4X'f7/mBHp"gu*(u 1:˓Zu- ^ ME;|iM+(iϱ0Hf mˆF P/zoZA Ȑ$@̀ZC0rA9ߔBfWA4Qw*R3Rpemp*S*0hTQH{֜'l5dIXsggwd|*[ =rUFZ<{ 5Ҝe7!m^'.oݳuu4Y Y$#Tl~\Bj(V>/_B>^i#ID/Jcmusu_كO nqss6!;d :y ոg޲N^JnWF!+%:VMKdUޓʓì[sR9pGXw ,3cjwc0|:;J#5?FH¿8ﴢ:L[/ J9P2y .|Qt@LWiatOaόO?oZLJc#-fҖr-eg%wdjԫ k^zC"4u`Vn^;["})xceл}; C|pOIZ=#BFDRGߣQ_c8aOPMZQSM¸);ck?V.x}4 1@*Y~Sܩݴߧ7~B({KaC?`b;Vw/_5<Ҷtmh8_Š|Zz=mfPΟ>-mq~ϟw~)_kPA/p?Nx$®5F/9]x/[cg6 NGyX#y!SiqXSpI1'k?!m*!RB5&ڊ@wi Cۧbs2t vgw|bMs.KVMqޣ||5_`4DOul,Nr_g]r{ 1˗Gz_Տ Xࠒ};ȊIr*GODЊpO["/(9Y!ݵ;8EΤ.:N2!k6k,&\.nZjgɁ:vw3:F.gi #О<_4I[3%ڮ>6?_o# W.5EEL!w5ɢ hX:f5*0bW,X}I%Hg#-_%sx-H).Cc08gBTў4M[!5-opuȕ󸍵j:g\y"xSX~_OIQֈH~1@ٞ4t'MҶXxG㠬,Qo#e&؎ﺸŀڷ{RH_rzU2fe$h`5*ћ$2/ia ohb AB6ie8[ZծbPnx1.0XÜ:dPs A0UjX`{U 6Etv;n&qKukI%)^ V; +S?gxu۹}iq)n D|11+@':(m̆s<괩m<0tQ&yEmP3SMjB )!Ohf;hr$|l8Y,7|Fܝ0ׅXynrU@wYɰM*"y824EWK|apC,omQ?&gopXn0ܝ ]3&?(3Y;T}YʂI; Xt#& 0ɹDw:VJAHNύ@5ah]ާMBv&oDH0O%ӠCcB%'A96XJ74a24/T[&[6=`(<&l$Ln^nVStj;ZUV۬ZܞoO֣PkqU\ƪ$,(20@lpѷiJjHQy#(|p Ed&%#"׃eQQ.z2E?23ȱ=6b߃zx̧o IFm^~hV&\U pED.4aWC auNo>f>Ʊı)Q0yF͠?3L.AwpI 28$ah9BP5ҢCo| 8܊.mTu-cD+_(p~?m-fcH Կ+ /\Ucc)fCfP-҈aW?rb4lyܗ.^4t{bywauAMX柲Ή~I!+T ]Yp-!CF -@RBy;Ss5?CԄʠ6pTr[O먕#<>7%K2CHIMl4Ⱦ[@XwgjƉ 8Mwٽމ4JHE90kFw)VZlUHڵ$*''azj–= lcavͭјD PU HLW·X).8sYN]!pY%oIBk80b8ahNh\t?L餵7YlfSjXqVo[Kf6@%t%#p%W )-@dem>aQ[ouKm$ϨFnaLN#_B#3y÷27IHT5H?.4'w]] K]?]nŜYaP$7zJ vf qՅ z@N#J~~{&?S @G/p%YҼO w F|w|ֈpq.#ۘ00S$XWVl}j%VÃwbA$r8vBݒ&jS9^oc7Oa j["*!τ@ZLÌ{MxFC-RDʁsW-A6SDC0ԱW=erV ~Z Q2W&d)6'4z+@B)1Ƶ::P.mT? B.]_X ^2Tn]0ϝ>X5O[k !,UqA ;w4X'f7/mBHp"gu*(u 1:˓Zu- ^ ME;|iM+(iϱ0Hf mˆF P/zoZA Ȑ$@̀ZC0rA9ߔBfWA4Qw*R3Rpemp*S*0hTQH{֜'l5dIXsggwd|*[ =rUFZ<{ 5Ҝe7!m^'.oݳuu4Y Y$#Tl~\Bj(V>/_B>^i#ID/Jcmusu_كO nqss6!;d :y ոg޲N^JnWF!+%:VMKdUޓʓì[sR9pGXw ,3cjwc0|:;J#5?FH¿8ﴢ:L[/ J9P2y .|Qt@LWiatOaόO?oZLJc#-fҖr-eg%wdjԫ k^zC"4u`Vn^;["})xceл}; C|pOIZ=#BFDRGߣQ_c8aOPMZQSM¸);ck?V.x}4 1@*Y~Sܩݴߧ7~B({KaC?`b;Vw/_5<Ҷtmh8_Š|Zz=mfPΟ>-mq~ϟw~)_kPA/p?Nx$®5F/9]x/[cg6 NGyX#y!SiqXSpI1'k?!m*!RB5&ڊ@wi Cۧbs2t vgw|bMs.KVMqޣ||5_`4DOul,Nr_g]r{ 1˗Gz_Տ Xࠒ};ȊIr*GODЊpO["/(9 initial count (86 ns). Using initial count to start timer. [ 266.435207][T14598] (syz.7.2502,14598,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 266.437887][T14598] (syz.7.2502,14598,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 266.440347][T14598] (syz.7.2502,14598,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 266.443052][T14598] (syz.7.2502,14598,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 266.819230][ T1043] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 266.981088][ T1043] usb 12-1: Using ep0 maxpacket: 32 [ 266.987708][ T1043] usb 12-1: unable to get BOS descriptor or descriptor too short [ 266.993422][ T1043] usb 12-1: too many configurations: 213, using maximum allowed: 8 [ 267.001702][ T1043] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 267.012357][ T1043] usb 12-1: can't read configurations, error -61 [ 267.046483][ T40] audit: type=1400 audit(2000000137.916:1413): avc: denied { append } for pid=14633 comm="syz.6.2514" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 267.106480][T14636] overlayfs: missing 'lowerdir' [ 267.161589][ T1043] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 267.332095][ T1043] usb 12-1: Using ep0 maxpacket: 32 [ 267.336483][ T1043] usb 12-1: unable to get BOS descriptor or descriptor too short [ 267.340355][ T1043] usb 12-1: too many configurations: 213, using maximum allowed: 8 [ 267.345499][ T1043] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 267.348759][ T1043] usb 12-1: can't read configurations, error -61 [ 267.351644][ T1043] usb usb12-port1: attempt power cycle [ 267.500677][T14664] geneve1: entered allmulticast mode [ 267.598758][T14670] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 267.738843][ T1043] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 267.760096][ T1043] usb 12-1: Using ep0 maxpacket: 32 [ 267.764646][ T1043] usb 12-1: unable to get BOS descriptor or descriptor too short [ 267.767928][ T1043] usb 12-1: too many configurations: 213, using maximum allowed: 8 [ 267.772606][ T1043] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 267.776046][ T1043] usb 12-1: can't read configurations, error -61 [ 267.919831][ T1043] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 267.941815][ T1043] usb 12-1: Using ep0 maxpacket: 32 [ 267.945212][ T1043] usb 12-1: unable to get BOS descriptor or descriptor too short [ 267.947973][ T1043] usb 12-1: too many configurations: 213, using maximum allowed: 8 [ 267.952022][ T1043] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 267.954642][ T1043] usb 12-1: can't read configurations, error -61 [ 267.957264][ T1043] usb usb12-port1: unable to enumerate USB device [ 268.554103][T14684] __nla_validate_parse: 6 callbacks suppressed [ 268.554123][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2534'. [ 268.761032][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.766167][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.878068][T14701] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2540'. [ 268.976159][T14701] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 269.045531][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.049336][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.056801][T14706] ubi8: attaching mtd0 [ 269.061930][T14706] ubi8: scanning is finished [ 269.063286][ T9] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 269.066706][T14706] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 269.223622][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 269.227615][ T9] usb 11-1: config 0 has an invalid interface number: 119 but max is 0 [ 269.228655][T14706] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 269.231125][ T9] usb 11-1: config 0 has no interface number 0 [ 269.237126][ T9] usb 11-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.241628][ T9] usb 11-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 269.246759][ T9] usb 11-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 269.250987][ T9] usb 11-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.259101][ T9] usb 11-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 269.262990][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.266409][ T9] usb 11-1: Product: syz [ 269.268663][ T9] usb 11-1: Manufacturer: syz [ 269.271062][ T9] usb 11-1: SerialNumber: syz [ 269.277417][ T9] usb 11-1: config 0 descriptor?? [ 269.284429][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.119/input/input59 [ 269.619321][ T5839] usb 11-1: USB disconnect, device number 12 [ 270.015992][ T40] audit: type=1400 audit(2000000140.695:1414): avc: denied { getopt } for pid=14710 comm="syz.7.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.218813][ T40] audit: type=1804 audit(2000000140.883:1415): pid=14720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2544" name="/newroot/54/file0" dev="tmpfs" ino=309 res=1 errno=0 [ 270.255392][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2545'. [ 270.265132][T14715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.303356][ T40] audit: type=1400 audit(2000000140.957:1416): avc: denied { lock } for pid=14728 comm="syz.7.2547" path="socket:[65573]" dev="sockfs" ino=65573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.363497][T14731] tipc: Enabling of bearer rejected, media not registered [ 270.441293][T14739] /dev/sg0: Can't lookup blockdev [ 270.631534][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2555'. [ 270.730324][ T5809] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 270.901338][ T5809] usb 12-1: Using ep0 maxpacket: 32 [ 270.906591][ T5809] usb 12-1: config 0 has an invalid interface number: 119 but max is 0 [ 270.909996][ T5809] usb 12-1: config 0 has no interface number 0 [ 270.912691][ T5809] usb 12-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.917095][ T5809] usb 12-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 270.921748][ T5809] usb 12-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 270.925957][ T5809] usb 12-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.934096][ T5809] usb 12-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 270.937699][ T5809] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.940914][ T5809] usb 12-1: Product: syz [ 270.942624][ T5809] usb 12-1: Manufacturer: syz [ 270.944633][ T5809] usb 12-1: SerialNumber: syz [ 270.951144][ T5809] usb 12-1: config 0 descriptor?? [ 270.960431][ T5809] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.119/input/input60 [ 271.247514][ T1043] usb 12-1: USB disconnect, device number 6 [ 271.509299][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2559'. [ 271.514129][T14764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14764 comm=syz.5.2559 [ 271.523828][T14764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14764 comm=syz.5.2559 [ 271.649338][T14769] lo speed is unknown, defaulting to 1000 [ 271.916116][T14772] SELinux: failed to load policy [ 271.982778][T14782] netlink: 'syz.6.2564': attribute type 1 has an invalid length. [ 272.068301][ T40] audit: type=1400 audit(2000000142.614:1417): avc: denied { write } for pid=14786 comm="syz.4.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 272.078544][T14790] binder: BINDER_SET_CONTEXT_MGR already set [ 272.082354][T14789] bond4: (slave geneve3): making interface the new active one [ 272.085618][T14789] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 272.085780][T14790] binder: 14786:14790 ioctl 4018620d 200000000100 returned -16 [ 272.096415][ T100] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 272.104976][ T100] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 272.110722][ T100] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 272.124069][ T100] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 272.176614][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2567'. [ 272.284575][T14794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14794 comm=syz.4.2567 [ 272.471101][T14794] veth5: entered allmulticast mode [ 272.510440][T14794] bond0: (slave veth5): Enslaving as an active interface with an up link [ 272.552233][T14798] bond0 (unregistering): (slave veth5): Releasing backup interface [ 272.568926][T14798] bond0 (unregistering): Released all slaves [ 272.673676][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 272.706156][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2573'. [ 272.871663][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 272.875586][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2577'. [ 273.043744][T14857] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 273.063741][T14861] can0: slcan on ttynull. [ 273.156385][T14861] can0 (unregistered): slcan off ttynull. [ 273.225015][ T40] audit: type=1400 audit(2000000143.699:1418): avc: denied { write } for pid=14871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.277262][ T40] audit: type=1400 audit(2000000143.746:1419): avc: denied { write } for pid=14883 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.481373][ T40] audit: type=1400 audit(2000000143.933:1420): avc: denied { write } for pid=14893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.557242][ T40] audit: type=1400 audit(2000000144.008:1421): avc: denied { write } for pid=14900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.746752][T14908] ubi8: attaching mtd0 [ 273.748537][T14908] FAULT_INJECTION: forcing a failure. [ 273.748537][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 273.752973][T14908] CPU: 2 UID: 0 PID: 14908 Comm: syz.6.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.752989][T14908] Tainted: [L]=SOFTLOCKUP [ 273.752993][T14908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.752999][T14908] Call Trace: [ 273.753005][T14908] [ 273.753010][T14908] dump_stack_lvl+0x100/0x190 [ 273.753054][T14908] should_fail_ex.cold+0x5/0xa [ 273.753081][T14908] should_failslab+0xc2/0x120 [ 273.753106][T14908] __kmalloc_node_noprof+0xe6/0x850 [ 273.753122][T14908] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 273.753136][T14908] ? __vmalloc_node_range_noprof+0x3e6/0x1630 [ 273.753149][T14908] ? __vmalloc_node_range_noprof+0x3f8/0x1630 [ 273.753165][T14908] __vmalloc_node_range_noprof+0x409/0x1630 [ 273.753184][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.753202][T14908] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.753215][T14908] ? ubi_msg+0x114/0x159 [ 273.753227][T14908] ? __pfx_ubi_msg+0x10/0x10 [ 273.753242][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.753255][T14908] __vmalloc_node_noprof+0xad/0xf0 [ 273.753268][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.753283][T14908] ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.753302][T14908] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 273.753315][T14908] ? __pfx_get_mtd_device+0x10/0x10 [ 273.753328][T14908] ctrl_cdev_ioctl+0x36a/0x400 [ 273.753342][T14908] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 273.753356][T14908] ? selinux_file_ioctl+0x13b/0x290 [ 273.753381][T14908] ? selinux_file_ioctl+0xb6/0x290 [ 273.753397][T14908] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 273.753411][T14908] __x64_sys_ioctl+0x18e/0x210 [ 273.753424][T14908] do_syscall_64+0x10b/0x860 [ 273.753489][T14908] ? clear_bhb_loop+0x40/0x90 [ 273.753503][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.753513][T14908] RIP: 0033:0x7fcaa419ce59 [ 273.753523][T14908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.753534][T14908] RSP: 002b:00007fcaa506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.753563][T14908] RAX: ffffffffffffffda RBX: 00007fcaa4415fa0 RCX: 00007fcaa419ce59 [ 273.753569][T14908] RDX: 0000200000000700 RSI: 0000000040186f40 RDI: 0000000000000003 [ 273.753575][T14908] RBP: 00007fcaa506c090 R08: 0000000000000000 R09: 0000000000000000 [ 273.753581][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.753587][T14908] R13: 00007fcaa4416038 R14: 00007fcaa4415fa0 R15: 00007ffc6eec2e18 [ 273.753600][T14908] [ 273.753656][T14908] syz.6.2593: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.843194][T14908] CPU: 2 UID: 0 PID: 14908 Comm: syz.6.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.843222][T14908] Tainted: [L]=SOFTLOCKUP [ 273.843226][T14908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.843232][T14908] Call Trace: [ 273.843236][T14908] [ 273.843241][T14908] dump_stack_lvl+0x100/0x190 [ 273.843258][T14908] warn_alloc.cold+0x95/0x1c1 [ 273.843270][T14908] ? __pfx_warn_alloc+0x10/0x10 [ 273.843287][T14908] ? dump_stack_lvl+0x17c/0x190 [ 273.843300][T14908] ? trace_kmalloc+0xe3/0x110 [ 273.843312][T14908] ? __kasan_kmalloc+0x8a/0xb0 [ 273.843322][T14908] ? __kmalloc_node_noprof+0x324/0x850 [ 273.843338][T14908] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 273.843352][T14908] ? __vmalloc_node_range_noprof+0x361/0x1630 [ 273.843368][T14908] __vmalloc_node_range_noprof+0x1394/0x1630 [ 273.843387][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.843405][T14908] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.843419][T14908] ? ubi_msg+0x114/0x159 [ 273.843430][T14908] ? __pfx_ubi_msg+0x10/0x10 [ 273.843446][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.843458][T14908] __vmalloc_node_noprof+0xad/0xf0 [ 273.843472][T14908] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.843486][T14908] ubi_attach_mtd_dev+0x1353/0x32a0 [ 273.843505][T14908] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 273.843518][T14908] ? __pfx_get_mtd_device+0x10/0x10 [ 273.843532][T14908] ctrl_cdev_ioctl+0x36a/0x400 [ 273.843545][T14908] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 273.843559][T14908] ? selinux_file_ioctl+0x13b/0x290 [ 273.843575][T14908] ? selinux_file_ioctl+0xb6/0x290 [ 273.843590][T14908] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 273.843605][T14908] __x64_sys_ioctl+0x18e/0x210 [ 273.843618][T14908] do_syscall_64+0x10b/0x860 [ 273.843634][T14908] ? clear_bhb_loop+0x40/0x90 [ 273.843647][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.843658][T14908] RIP: 0033:0x7fcaa419ce59 [ 273.843668][T14908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.843678][T14908] RSP: 002b:00007fcaa506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.843689][T14908] RAX: ffffffffffffffda RBX: 00007fcaa4415fa0 RCX: 00007fcaa419ce59 [ 273.843695][T14908] RDX: 0000200000000700 RSI: 0000000040186f40 RDI: 0000000000000003 [ 273.843702][T14908] RBP: 00007fcaa506c090 R08: 0000000000000000 R09: 0000000000000000 [ 273.843708][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.843714][T14908] R13: 00007fcaa4416038 R14: 00007fcaa4415fa0 R15: 00007ffc6eec2e18 [ 273.843728][T14908] [ 273.843775][T14908] Mem-Info: [ 273.928392][T14908] active_anon:27448 inactive_anon:9321 isolated_anon:17 [ 273.928392][T14908] active_file:6436 inactive_file:23962 isolated_file:1 [ 273.928392][T14908] unevictable:1768 dirty:175 writeback:0 [ 273.928392][T14908] slab_reclaimable:9406 slab_unreclaimable:90742 [ 273.928392][T14908] mapped:31543 shmem:29016 pagetables:3843 [ 273.928392][T14908] sec_pagetables:305 bounce:0 [ 273.928392][T14908] kernel_misc_reclaimable:0 [ 273.928392][T14908] free:416386 free_pcp:11019 free_cma:0 [ 273.943092][T14908] Node 0 active_anon:109512kB inactive_anon:37284kB active_file:25520kB inactive_file:95632kB unevictable:3536kB isolated(anon):68kB isolated(file):4kB mapped:85212kB dirty:696kB writeback:0kB shmem:112528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16320kB pagetables:6252kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.955667][T14908] Node 1 active_anon:280kB inactive_anon:0kB active_file:224kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:9120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.967535][T14908] Node 0 DMA free:7056kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.977549][T14908] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 273.979866][T14908] Node 0 DMA32 free:117984kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109512kB inactive_anon:37284kB active_file:25520kB inactive_file:95632kB unevictable:3536kB writepending:696kB zspages:0kB present:2080628kB managed:1260776kB mlocked:0kB bounce:0kB free_pcp:41932kB local_pcp:3868kB free_cma:0kB [ 273.993771][T14908] lowmem_reserve[]: 0 0 0 0 0 [ 273.998581][T14908] Node 1 Normal free:1540504kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:280kB inactive_anon:0kB active_file:224kB inactive_file:216kB unevictable:3536kB writepending:4kB zspages:3848kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 274.013183][T14908] lowmem_reserve[]: 0 0 0 0 0 [ 274.019158][T14908] Node 0 DMA: 6*4kB (U) 5*8kB (U) 7*16kB (U) 7*32kB (U) 6*64kB (U) 3*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 0*4096kB = 7056kB [ 274.034264][T14908] Node 0 DMA32: 2108*4kB (UME) 2380*8kB (UME) 751*16kB (UME) 188*32kB (UME) 75*64kB (UME) 60*128kB (ME) 56*256kB (UME) 31*512kB (UM) 23*1024kB (UM) 3*2048kB (M) 0*4096kB = 117888kB [ 274.048495][T14908] Node 1 Normal: 434*4kB (UM) 386*8kB (UM) 324*16kB (UME) 300*32kB (UME) 280*64kB (UME) 270*128kB (UME) 242*256kB (UM) 217*512kB (UME) 191*1024kB (UME) 17*2048kB (UME) 260*4096kB (UM) = 1540504kB [ 274.056864][T14908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.060227][T14908] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.063208][T14908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.066956][T14908] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.070666][T14908] 59996 total pagecache pages [ 274.072301][T14908] 585 pages in swap cache [ 274.073783][T14908] Free swap = 115000kB [ 274.075389][T14908] Total swap = 124996kB [ 274.076757][T14908] 1048443 pages RAM [ 274.078009][T14908] 0 pages HighMem/MovableOnly [ 274.079521][T14908] 283938 pages reserved [ 274.080858][T14908] 0 pages cma reserved [ 274.139924][T14910] __nla_validate_parse: 64 callbacks suppressed [ 274.139942][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2595'. [ 274.224012][T14920] overlayfs: missing 'lowerdir' [ 274.362848][ T24] hsr0: entered promiscuous mode [ 274.369537][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2597'. [ 274.416026][T14923] [ 274.417100][T14923] ====================================================== [ 274.419939][T14923] WARNING: possible circular locking dependency detected [ 274.422643][T14923] syzkaller #0 Tainted: G L [ 274.424710][ T40] audit: type=1400 audit(2000000144.804:1422): avc: denied { write } for pid=5718 comm="syz-executor" path="pipe:[7467]" dev="pipefs" ino=7467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.425145][T14923] ------------------------------------------------------ [ 274.425154][T14923] syz.5.2599/14923 is trying to acquire lock: [ 274.439540][T14923] ffffffff8f281d08 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x36a/0x5d0 [ 274.443233][T14923] [ 274.443233][T14923] but task is already holding lock: [ 274.445533][T14923] ffff888037deb860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x513/0x1df0 [ 274.449248][T14923] [ 274.449248][T14923] which lock already depends on the new lock. [ 274.449248][T14923] [ 274.452939][T14923] [ 274.452939][T14923] the existing dependency chain (in reverse order) is: [ 274.456104][T14923] [ 274.456104][T14923] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 274.459137][T14923] lock_sock_nested+0x41/0xf0 [ 274.461577][T14923] inet_shutdown+0x67/0x410 [ 274.463721][T14923] nbd_mark_nsock_dead+0xae/0x5c0 [ 274.465869][T14923] recv_work+0x5fb/0x8c0 [ 274.467729][T14923] process_one_work+0xa0e/0x1980 [ 274.469521][T14923] worker_thread+0x5ef/0xe50 [ 274.471516][T14923] kthread+0x370/0x450 [ 274.473373][T14923] ret_from_fork+0x72b/0xd50 [ 274.475443][T14923] ret_from_fork_asm+0x1a/0x30 [ 274.477558][T14923] [ 274.477558][T14923] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 274.480614][T14923] __mutex_lock+0x1a4/0x1b10 [ 274.482644][T14923] nbd_queue_rq+0x428/0x1080 [ 274.484601][T14923] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 274.486634][T14923] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 274.489348][T14923] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 274.491928][T14923] blk_mq_run_hw_queue+0x23c/0x670 [ 274.494153][T14923] blk_mq_dispatch_list+0x51d/0x1360 [ 274.496520][T14923] blk_mq_flush_plug_list+0x130/0x600 [ 274.498919][T14923] __blk_flush_plug+0x2c4/0x4b0 [ 274.500667][T14923] __submit_bio+0x584/0x6c0 [ 274.502541][T14923] submit_bio_noacct_nocheck+0x543/0xbf0 [ 274.505014][T14923] submit_bio_noacct+0xd18/0x2000 [ 274.507245][T14923] submit_bh_wbc+0x681/0x890 [ 274.509321][T14923] block_read_full_folio+0x264/0x8e0 [ 274.511667][T14923] filemap_read_folio+0xfc/0x3b0 [ 274.513922][T14923] do_read_cache_folio+0x2d7/0x6b0 [ 274.516184][T14923] read_part_sector+0xd1/0x370 [ 274.518328][T14923] adfspart_check_ICS+0x91/0x7d0 [ 274.520264][T14923] bdev_disk_changed+0x7a3/0x1250 [ 274.522187][T14923] blkdev_get_whole+0x187/0x290 [ 274.524374][T14923] bdev_open+0x2c7/0xe40 [ 274.526325][T14923] blkdev_open+0x34e/0x4f0 [ 274.528341][T14923] do_dentry_open+0x6d8/0x1660 [ 274.530470][T14923] vfs_open+0x82/0x3f0 [ 274.532358][T14923] path_openat+0x208c/0x31a0 [ 274.534472][T14923] do_file_open+0x20e/0x430 [ 274.536517][T14923] do_sys_openat2+0x10d/0x1e0 [ 274.538621][T14923] __x64_sys_openat+0x12d/0x210 [ 274.540792][T14923] do_syscall_64+0x10b/0x860 [ 274.542862][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.545416][T14923] [ 274.545416][T14923] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 274.548246][T14923] __mutex_lock+0x1a4/0x1b10 [ 274.549942][T14923] nbd_queue_rq+0xba/0x1080 [ 274.551572][T14923] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 274.554032][T14923] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 274.556774][T14923] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 274.559357][T14923] blk_mq_run_hw_queue+0x23c/0x670 [ 274.561603][T14923] blk_mq_dispatch_list+0x51d/0x1360 [ 274.563969][T14923] blk_mq_flush_plug_list+0x130/0x600 [ 274.566335][T14923] __blk_flush_plug+0x2c4/0x4b0 [ 274.568489][T14923] __submit_bio+0x584/0x6c0 [ 274.570481][T14923] submit_bio_noacct_nocheck+0x543/0xbf0 [ 274.572920][T14923] submit_bio_noacct+0xd18/0x2000 [ 274.575153][T14923] submit_bh_wbc+0x681/0x890 [ 274.577213][T14923] block_read_full_folio+0x264/0x8e0 [ 274.579565][T14923] filemap_read_folio+0xfc/0x3b0 [ 274.581760][T14923] do_read_cache_folio+0x2d7/0x6b0 [ 274.584044][T14923] read_part_sector+0xd1/0x370 [ 274.586168][T14923] adfspart_check_ICS+0x91/0x7d0 [ 274.588340][T14923] bdev_disk_changed+0x7a3/0x1250 [ 274.590534][T14923] blkdev_get_whole+0x187/0x290 [ 274.592694][T14923] bdev_open+0x2c7/0xe40 [ 274.594658][T14923] blkdev_open+0x34e/0x4f0 [ 274.596617][T14923] do_dentry_open+0x6d8/0x1660 [ 274.598726][T14923] vfs_open+0x82/0x3f0 [ 274.600603][T14923] path_openat+0x208c/0x31a0 [ 274.602655][T14923] do_file_open+0x20e/0x430 [ 274.604695][T14923] do_sys_openat2+0x10d/0x1e0 [ 274.606821][T14923] __x64_sys_openat+0x12d/0x210 [ 274.608983][T14923] do_syscall_64+0x10b/0x860 [ 274.611094][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.613709][T14923] [ 274.613709][T14923] -> #5 (set->srcu){.+.+}-{0:0}: [ 274.616561][T14923] __synchronize_srcu+0xa2/0x300 [ 274.618741][T14923] blk_mq_quiesce_queue+0x149/0x1c0 [ 274.621019][T14923] elevator_switch+0x17b/0x7e0 [ 274.623142][T14923] elevator_change+0x352/0x530 [ 274.625260][T14923] elevator_set_default+0x29e/0x360 [ 274.627546][T14923] blk_register_queue+0x48e/0x630 [ 274.629767][T14923] __add_disk+0x73f/0xe40 [ 274.631725][T14923] add_disk_fwnode+0x118/0x5c0 [ 274.633859][T14923] nbd_dev_add+0x77a/0xb10 [ 274.635875][T14923] nbd_init+0x291/0x2b0 [ 274.637817][T14923] do_one_initcall+0x121/0x750 [ 274.639972][T14923] kernel_init_freeable+0x6ea/0x7b0 [ 274.642209][T14923] kernel_init+0x1f/0x1e0 [ 274.644199][T14923] ret_from_fork+0x72b/0xd50 [ 274.646267][T14923] ret_from_fork_asm+0x1a/0x30 [ 274.648412][T14923] [ 274.648412][T14923] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 274.651434][T14923] __mutex_lock+0x1a4/0x1b10 [ 274.653434][T14923] elevator_change+0x1bc/0x530 [ 274.655589][T14923] elevator_set_none+0x92/0xf0 [ 274.657712][T14923] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 274.660243][T14923] nbd_start_device+0x1a6/0xbd0 [ 274.662388][T14923] nbd_genl_connect+0xff2/0x1a40 [ 274.664584][T14923] genl_family_rcv_msg_doit+0x214/0x300 [ 274.667033][T14923] genl_rcv_msg+0x560/0x800 [ 274.669053][T14923] netlink_rcv_skb+0x159/0x420 [ 274.671170][T14923] genl_rcv+0x28/0x40 [ 274.673004][T14923] netlink_unicast+0x585/0x850 [ 274.675154][T14923] netlink_sendmsg+0x8b0/0xda0 [ 274.677212][T14923] ____sys_sendmsg+0x9e1/0xb70 [ 274.679347][T14923] ___sys_sendmsg+0x190/0x1e0 [ 274.681431][T14923] __sys_sendmsg+0x170/0x220 [ 274.683523][T14923] do_syscall_64+0x10b/0x860 [ 274.685584][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.688142][T14923] [ 274.688142][T14923] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 274.691544][T14923] blk_alloc_queue+0x610/0x790 [ 274.693668][T14923] blk_mq_alloc_queue+0x174/0x290 [ 274.695881][T14923] __blk_mq_alloc_disk+0x29/0x120 [ 274.698082][T14923] nbd_dev_add+0x492/0xb10 [ 274.700067][T14923] nbd_init+0x291/0x2b0 [ 274.701973][T14923] do_one_initcall+0x121/0x750 [ 274.704132][T14923] kernel_init_freeable+0x6ea/0x7b0 [ 274.706409][T14923] kernel_init+0x1f/0x1e0 [ 274.708386][T14923] ret_from_fork+0x72b/0xd50 [ 274.710451][T14923] ret_from_fork_asm+0x1a/0x30 [ 274.712576][T14923] [ 274.712576][T14923] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 274.715478][T14923] fs_reclaim_acquire+0xc4/0x100 [ 274.717693][T14923] __kmalloc_cache_noprof+0x4b/0x6f0 [ 274.720030][T14923] cryptomgr_notify+0xa4/0xb40 [ 274.722142][T14923] notifier_call_chain+0x99/0x400 [ 274.724384][T14923] blocking_notifier_call_chain+0x69/0xa0 [ 274.726882][T14923] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 274.729219][T14923] crypto_alloc_tfm_node+0xd3/0x260 [ 274.731516][T14923] crypto_alloc_sync_skcipher+0x39/0xd0 [ 274.733980][T14923] rxkad_init+0x1d/0x110 [ 274.735920][T14923] rxrpc_init_security+0x95/0x1a0 [ 274.738068][T14923] af_rxrpc_init+0x136/0x370 [ 274.740122][T14923] do_one_initcall+0x121/0x750 [ 274.742238][T14923] kernel_init_freeable+0x6ea/0x7b0 [ 274.744543][T14923] kernel_init+0x1f/0x1e0 [ 274.746494][T14923] ret_from_fork+0x72b/0xd50 [ 274.748345][T14923] ret_from_fork_asm+0x1a/0x30 [ 274.750268][T14923] [ 274.750268][T14923] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 274.753477][T14923] down_read+0x99/0x450 [ 274.755382][T14923] blocking_notifier_call_chain+0x53/0xa0 [ 274.757861][T14923] __crypto_register_alg+0x2a7/0x3b0 [ 274.760143][T14923] crypto_register_alg+0x1f4/0x340 [ 274.762313][T14923] crypto_register_shash+0x36/0x50 [ 274.764538][T14923] do_one_initcall+0x121/0x750 [ 274.766665][T14923] kernel_init_freeable+0x6ea/0x7b0 [ 274.768499][T14923] kernel_init+0x1f/0x1e0 [ 274.770458][T14923] ret_from_fork+0x72b/0xd50 [ 274.772519][T14923] ret_from_fork_asm+0x1a/0x30 [ 274.774669][T14923] [ 274.774669][T14923] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 274.777716][T14923] __lock_acquire+0x14b8/0x2630 [ 274.779880][T14923] lock_acquire+0x1b1/0x370 [ 274.781919][T14923] down_write+0x8b/0x1f0 [ 274.783888][T14923] crypto_alg_mod_lookup+0x36a/0x5d0 [ 274.786226][T14923] crypto_alloc_tfm_node+0xd3/0x260 [ 274.788502][T14923] tls_set_sw_offload+0xd4d/0x1670 [ 274.790752][T14923] tls_setsockopt+0xecf/0x1df0 [ 274.792894][T14923] do_sock_setsockopt+0xf3/0x1d0 [ 274.795132][T14923] __sys_setsockopt+0x195/0x220 [ 274.797075][T14923] __x64_sys_setsockopt+0xbd/0x160 [ 274.798905][T14923] do_syscall_64+0x10b/0x860 [ 274.800959][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.803055][T14923] [ 274.803055][T14923] other info that might help us debug this: [ 274.803055][T14923] [ 274.806673][T14923] Chain exists of: [ 274.806673][T14923] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 274.806673][T14923] [ 274.811046][T14923] Possible unsafe locking scenario: [ 274.811046][T14923] [ 274.813777][T14923] CPU0 CPU1 [ 274.815448][T14923] ---- ---- [ 274.817533][T14923] lock(sk_lock-AF_INET6); [ 274.819233][T14923] lock(&nsock->tx_lock); [ 274.821317][T14923] lock(sk_lock-AF_INET6); [ 274.824073][T14923] lock(crypto_alg_sem); [ 274.825470][T14923] [ 274.825470][T14923] *** DEADLOCK *** [ 274.825470][T14923] [ 274.828189][T14923] 1 lock held by syz.5.2599/14923: [ 274.830296][T14923] #0: ffff888037deb860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x513/0x1df0 [ 274.833270][T14923] [ 274.833270][T14923] stack backtrace: [ 274.835659][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.5.2599 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.835686][T14923] Tainted: [L]=SOFTLOCKUP [ 274.835693][T14923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.835704][T14923] Call Trace: [ 274.835716][T14923] [ 274.835723][T14923] dump_stack_lvl+0x100/0x190 [ 274.835747][T14923] print_circular_bug.cold+0x178/0x1c7 [ 274.835775][T14923] check_noncircular+0x146/0x160 [ 274.835795][T14923] ? crypto_alloc_tfm_node+0xd3/0x260 [ 274.835817][T14923] __lock_acquire+0x14b8/0x2630 [ 274.835833][T14923] lock_acquire+0x1b1/0x370 [ 274.835846][T14923] ? crypto_alg_mod_lookup+0x36a/0x5d0 [ 274.835858][T14923] ? __pfx___might_resched+0x10/0x10 [ 274.835875][T14923] down_write+0x8b/0x1f0 [ 274.835887][T14923] ? crypto_alg_mod_lookup+0x36a/0x5d0 [ 274.835898][T14923] ? __pfx_down_write+0x10/0x10 [ 274.835908][T14923] ? __init_swait_queue_head+0xca/0x150 [ 274.835924][T14923] ? crypto_larval_alloc+0x1fc/0x270 [ 274.835935][T14923] crypto_alg_mod_lookup+0x36a/0x5d0 [ 274.835947][T14923] crypto_alloc_tfm_node+0xd3/0x260 [ 274.835959][T14923] tls_set_sw_offload+0xd4d/0x1670 [ 274.835977][T14923] tls_setsockopt+0xecf/0x1df0 [ 274.835990][T14923] ? __pfx_tls_setsockopt+0x10/0x10 [ 274.836005][T14923] ? selinux_socket_setsockopt+0x6a/0x80 [ 274.836018][T14923] ? sock_common_setsockopt+0x2e/0xf0 [ 274.836033][T14923] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 274.836047][T14923] do_sock_setsockopt+0xf3/0x1d0 [ 274.836061][T14923] __sys_setsockopt+0x195/0x220 [ 274.836074][T14923] __x64_sys_setsockopt+0xbd/0x160 [ 274.836084][T14923] ? do_syscall_64+0x90/0x860 [ 274.836100][T14923] ? lockdep_hardirqs_on+0x78/0x100 [ 274.836115][T14923] do_syscall_64+0x10b/0x860 [ 274.836130][T14923] ? clear_bhb_loop+0x40/0x90 [ 274.836142][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.836153][T14923] RIP: 0033:0x7f9ff5f9ce59 [ 274.836164][T14923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.836175][T14923] RSP: 002b:00007f9ff6da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.836186][T14923] RAX: ffffffffffffffda RBX: 00007f9ff6215fa0 RCX: 00007f9ff5f9ce59 [ 274.836196][T14923] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 274.836203][T14923] RBP: 00007f9ff6032d6f R08: 0000000000000038 R09: 0000000000000000 [ 274.836210][T14923] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 274.836216][T14923] R13: 00007f9ff6216038 R14: 00007f9ff6215fa0 R15: 00007ffdcbba0948 [ 274.836226][T14923] [ 274.941038][T14926] Bluetooth: hci0: service_discovery: too big uuid_count value 8719 [ 275.423642][ T50] usb 9-1: USB disconnect, device number 24 [ 275.426912][ T50] usblp0: removed [ 275.433008][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.569065][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.629418][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.710240][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.807305][ T59] bridge_slave_1: left allmulticast mode [ 275.809555][ T59] bridge_slave_1: left promiscuous mode [ 275.811970][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.815854][ T59] bridge_slave_0: left allmulticast mode [ 275.818202][ T59] bridge_slave_0: left promiscuous mode [ 275.820551][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.856157][ T40] audit: type=1400 audit(2000000146.161:1423): avc: denied { write } for pid=14934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.895508][ T40] audit: type=1400 audit(2000000146.198:1424): avc: denied { write } for pid=14937 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.107081][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.113875][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.120108][ T59] bond0 (unregistering): Released all slaves [ 276.130969][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 276.224809][ T40] audit: type=1400 audit(2000000146.507:1425): avc: denied { write } for pid=14941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.270097][ T40] audit: type=1400 audit(2000000146.544:1426): avc: denied { write } for pid=14944 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.312134][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 276.379866][ T40] audit: type=1400 audit(2000000146.647:1427): avc: denied { write } for pid=14947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.410228][ T40] audit: type=1400 audit(2000000146.675:1428): avc: denied { write } for pid=14950 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.445979][ T59] hsr_slave_0: left promiscuous mode [ 276.448686][ T59] hsr_slave_1: left promiscuous mode [ 276.450995][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.453461][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.456216][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.458655][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.465251][ T59] veth1_macvtap: left promiscuous mode [ 276.467109][ T59] veth0_macvtap: left promiscuous mode [ 276.478965][ T59] veth1_vlan: left promiscuous mode [ 276.483645][ T59] veth0_vlan: left promiscuous mode [ 276.558496][ T59] team0 (unregistering): Port device team_slave_1 removed [ 276.562998][ T59] team0 (unregistering): Port device team_slave_0 removed [ 276.615878][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 276.680244][ T40] audit: type=1400 audit(2000000146.928:1429): avc: denied { write } for pid=14953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.724543][ T40] audit: type=1400 audit(2000000146.965:1430): avc: denied { write } for pid=14956 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.749582][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 276.914412][ T59] IPVS: stop unused estimator thread 0...