last executing test programs: 4m13.226268848s ago: executing program 3 (id=659): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4m13.155136165s ago: executing program 3 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) close(r5) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="27050200590214000600002fb96dbcf706e105b1000086dd00000000000011d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057ed25126fd7879597dea9ba0c7ed20a8562aa694126686e3e9ac1676cfb80e9a2fab325f537a233be90c8485fe3b2a217a72b336498b50f00003a69785c3e1f35de3f458471ca843551415323a546af0e3d806672bbf03e2d84ddae30870c0a42ea2bbb0eca99f6fe680f297d5b0690ef5bf6c2211832d50800"/210, 0xd2}, {&(0x7f0000001240)="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", 0x1ad}, {&(0x7f0000000340)="7f91da1e0317c1ac4d9c3f052b9c3718a2c0055040d70b14a5add516bbf7f5c1cecb15", 0x23}], 0x3}, 0x9cdc2384056b48b8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000108000740000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x5, r5, 0x80000}) ioctl$CDROM_LOCKDOOR(r11, 0x5329, 0x1) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0xb) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) mlockall(0x6) ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f0000000180)={0x2, 0x9}) 4m13.039161527s ago: executing program 3 (id=662): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4m12.894270954s ago: executing program 3 (id=663): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000100)={{[0x7, 0x6, 0x1, 0x80]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000040)=[{{@align=0xe, {0x5, 0x8, 0x9, 0xef30}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0xbd9, 0x3ff]}, {0xdf7e, 0x14a, 0x9, 0xd}}, 0x5, 0x0, '\x00'}, {{@align=0x2, {0x5, 0x2, 0x0, 0x7}}, 0x4, 0x0, '--)\')]\x00'}, {{@align=0x80000001, {0x2, 0x1, 0x8, 0x6}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x9]}, {0x4, 0xf735, 0x9, 0x6}}, 0x200, 0x0, '\xec\x00'}]}) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x558, 0x420000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0xc3b2]}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r2, 0xf9, "8870db415dd7dbc8970be91067e22f3c0c3e17c0efe466b1d6d9811a1cf69f01599395e1a1d70f5032b17270f1d9d45a66e58a6cfaebe8f161ecc0c537353fee8623d72163157194c9439caa94146dba9a5848392cdd3ac982264d8f64447a9d28b5ff6efe7352a5f7dfb648f94652f2c927a0e4e9cf2c009297f422dcf0e617388e0cc45e7aa4c02cafa9c30916d7a739800dc00bd39906200091c8ddcf9130659fa7b4551c7d43b25cd613f38d702d8bd04321e78a7dfa7833e710d0be253b70aafcaad6892d68eea04b1d92b662dd35ef41504872ee5a23767c40a27e58a2da382e1ba9cbb6fd3b8446c76d3ea3985992a906f4aeaffb2a"}, &(0x7f0000000340)=0x101) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000380)={r2, 0x0, 0x3ff}, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @local}, 0x239, 0x0, 0x0, 0x0, 0x6803, 0x0, 0xd, 0x8, 0xf4a4}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000480)={0x18, r4}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0x0, 0x4, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9a0906, 0x5, '\x00', @value=0xab}}) write$FUSE_BMAP(r1, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x18ca}}, 0x18) read$char_usb(r1, &(0x7f0000000580)=""/161, 0xa1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xba, 0x0, 0x2, 0x100, 0x400000000000, 0x40600100, r5}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000780)={r3, @in6={{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}}, 0x9, 0x5, 0x6, 0x4, 0xa, 0x8, 0xc2}, &(0x7f0000000840)=0x9c) r6 = pidfd_getfd(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'vxcan1\x00', 0x0}) sendmsg$inet6(r6, &(0x7f0000001d80)={&(0x7f0000000880)={0xa, 0x4e24, 0x1, @empty, 0x10001}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000008c0)="87e7b6d149a1dfb6af535f9eb344cf304fa851dc970e94b8810a12e4ef4bd8b1168a046933430c4aee4a569a6601812ffbcd03b9d71c5f7ff536e0b1aec3af467ca4ca713672c991d4365c49ce8afe10f2", 0x51}, {&(0x7f0000000940)="d2cfe58967712e9aa268b72ba366a35af216fef7169b08ad01bdc06bb7004f90102e2743f63534ecc57abdd78ec986e56a05765e963be93b5f9d096e3a33021ca5741a6ec10c85283ea6880341d0f26e40fd0d86463185b534e980b16d2e47923cb1287aa9303d2a3ae741285e7a2f52f514006c78da991997c22b3274a9fa218e489d5c7d0ec9b5dfea45e77d0107868a1d6825f71f3f2491450795945df5f51dc0c668688a9e57af40d3145bb4aa8ef373ba312937eb863126dfad9ea2f3f0af48065c2e71132511c1e78fe4db5d2f7be86e9fc7109aca40042508129f9d5367", 0xe1}], 0x2, &(0x7f0000000ac0)=[@rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x2, 0x7, 0x0, [@remote]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x9, 0x0, [@empty, @private2]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x30, 0x29, 0x37, {0xb4, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xc2}, @hao={0xc9, 0x10, @loopback}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff7}}, @hopopts={{0x1178, 0x29, 0x36, {0x36, 0x22b, '\x00', [@generic={0x3, 0xf9, "ba0f8f8fd0c2dbc2cecbbdd5d1d4812d06179cf3e3544c67af45880363c9675916c0a7c55ae0dcee74360de161de2ba810ebf71abdd73654e872e90a6febfbb2294327982714e02a79e6611630ba4bdd8be436dde26d10cecb5cfaf964f6e4c86cad204f72b3891cfa0b68a4085abd0de5aac505e9a64637686ca2af1b7082e6ee5c340d88f11148821788ef2dbc212b4fa4449321f84b149ecf958c814fcbfd5b44857aa53d6a46649cb5e86aa49415481cbf9aa1c30c380e52b20ad3d5875c8b59e694bd9b86e1840302d2a209c3784bd473bb3dd86b8b1376f9434bba1a6097660ca38e69f093c9fce96bcba4107d22b7fda8b8a4d272cc"}, @jumbo={0xc2, 0x4, 0x97}, @ra={0x5, 0x2, 0x8}, @pad1, @generic={0x3, 0x1000, "42b819a6bccc50fa88c22b53dff9e518c70ab61acc915acb711ed24d194bfe61fa045095765db1349514df0b1aaa285023eab0d04f92801efea829c22970f690b61d80675e2da749954327bdb6988a91d9ea8808c6cb770641e83f21c171fa65ddd17de2036f4b82e65c843d88540600856887c2c4940aec66a74ebdf3890bd4138fc10a80a23ba21c4f073d9fd84e589646bf83fee517a77cadf5a2914350bdaa86b7848d6b642744e05e3613e5bb449916a83b59dda72a859f6a68893b20a99be52127cb5d0c9cd03b2435ecfd0574692f89cf0236d587bfae76454a927d4e511972715fbbc2261dfb43a7d2b0deac824d78f9ed28720c9fd68d16428f56bd4f944be96fa97fbc5e1498978e81699f30f3278be1caa9ee83e1620837abbec998adc2ff0d147ea594cae54aef541ad883d3edc33e1e0f375c80b61266953198703ce642d9a6e9e2536bdf61ec409c14a1b0d88ff7edfd6a245811f27a8b695f1207f1a0a5baaecc53a89785a9c4d5c4cd37e73e8ac9ca2c5fd5d0ba4b6ab6e52b2d7973badf51e223ba90c1a7fef9f7cfc5b8053119ca4f8347c9ed9eb60808a374d2a3b9dcc785b74b79529c8ba746a273f264a4dddd17b161db6a9fb7ed1501a6fb52005fc64e71bc07d60a3957902c81d37e5bd9e6fdae18bd3cbddc2bc195947f2e139557ced3d44c45dbd613cd1a4f74b7f6d96000906460e05cba1b8340989695b988c93518d8e5e0c84c632b44ab1fa5cf04661b4340999c9a60247263a83ffcff9d0881590ef5d8027bf778e3f845280bb1a2e7962893e2345b20bfe801f6a5c0e7d7b40acf4d2a15a69b1e79beef843c9928e3aa2c3308af134edfcdba57945c47e8852c50abf1eb5fa43069c922bd31ff8520ea26f6b1d0a826cfc81dcc5e9b3bfe5f413fe0ea6573bad9d0dcfec9053afd508a4c7dba319e8fb014502d1632d9625f93ab047f852948e2f32c7c986f31e2086df76c3ac497f185172056f6d4f05fc474359e63bea6b7737e8869c0e70b4c2df6bf7afb60160e6a20ed8b5420977c034db5555d140b34c10854177d132b3dd47bc876dd892b94bd54d2d302225b01a5e0ee9b73c517ffb599e8d3f07260b24ed483416f1be9f6ff1065d2eb02dba036566775869aa0d58da2ec784132d424c830cf543f6a80c94991556aa4e3ced7c0e3d9cf66921207a20c61fae4cd32f3768b97e68fba6b63eab3c5a85f2ebb5687f842c4c18a19b37fd3f546385f05366b678e59e39daa283cdd2cc830d1afa41aeacf70e505eb80a9a3b5e10b7cab735ae0f7514780960b2a15b61ed76fef1d51bc6aad69faceb33060ece02504304387b7a49e7f0bef885beae4cc21531efd36b1057c15ff995cbebcff5ee0c09f1dbf9945f0eacd758be3a1f7fc239f39ed6fe7868122f9590dde30d8f3bc6deae7004b16a3f4141d14d835dbf8d159dbb0f51ff41b136931723631473778df0073b206bc583a2ab32d015c953bd44f39ae240bdc5a4ba8737a2380e4e32dc4e9d94e4f13a43263c5626a22211b8bd78aa2f79c7c152f167e4de499060d607d44ce672443ba2b21ae96483aa2f6b36c96680c4f7077afdc1e97a795d26a786394d699c792df5f22ae8c162812f145d5678790795d675b5e95230b342254d3e173963a427eb1a44125aa68aa995ba2f254607d292d2167ed1bb585e9053b5b7198d2c77eef735d7d48ad80ebb7813c6decb670d763968adeaf1ff2240da2fd20d83fe85ca7b64dbd266824dc895ef91cbefe5efe7a30565e884e5bc09fc0015e9d8978bb6540b2c18809222e5eef2696d0497aab4f96291d5c000704b27467023ce41eec8c2fdfab5ab68a56873e0b693fc5e7e8a52017e0e226ab8ac55522df9c66a4e486d8ba62b7de9a100c3804c541ec2704a470b83d97876abf3a9e2fb7145f1ec0135a9e5baa3ca1b66d0830bc7fe9af56bfb67f4320632f310e9269131fe53d8f90e09398d31da70d67be6d5304cb2c013c187900f73c2e03a053241afa2fb75fcd9cd2db27deb4619fc737a1b8337a1412e544b749c8b7c9a57d28d5e5cbeb1510bddcd35105684a91646916c71fca0a43b1fd7631c8807632efe042a3581eff3046333407ecfd1eec3d73adc5f229b8cd8dbb383ed00cdabd94dba59019de5650c1b0ec69b26312df7630f17bef45e269cf3a8074b96a0e0f83f357d957011f4acfa218a6b7ebebd1d3c7860072952368a22f780719728ab468ffaa86ff5e2cd890ee8c6bc6c7a286e9f55ccc0c4e2b65a8d1146f950e7304c8a6eeac41373da79984d65170bd46b70cf80a67097e13dc26c3cfcee16de9ede6e8302f32f06baffae1337021c0c56ce2e2a2c243f11ae9dc890613f69d8bf19583562d531b40a56e7b3f62625f4f1f2c2bafbdf2cc3475fdb350290c78bb6e00447c702058bdce3e06f34e91035ac058eabf3ef11a5c8dbf9afa6af99b3bb409c8feed61e65ce9a3d3ab0247f0936878c548ca33d17b678ca4c85713212072c01fe7440035a86a72cee1e3a67ba63560862f050e430c78b7aecca2ef9b684d3ae8c9c3436d3555c64d832ef5a521904cf1e00d4a2e64b5d4ae523798dbf88dcff49fc5e8cf3dd9b56056e12cf5fbe9ae85bda9e5fdd95c2eee76dbc6866663884893e545c8b46b17695a1e91c46d622b5f763827ed87d4d1b6e0d658756fba1f0f34ef86f60b42bbd21e855938f527f94f28f5161a968bc7dac4591bac851a8fc27f09672877f2a43e40e4ad07a9c4f55bc4425458bfb05eac13c6cd2199ee4ee3400edcb2df8e14595e8ccac2e5c49fbcc4651f7717744e8127567ec311ed296c09a57b81ab3d20576e17110603fa225dcdc91a62237563a3cbe8314b90e68c92bf7881939f183967cca70c74c0e7aa62d71bbe15488dae2a17aa9b7020235e356cfaf12453c9548a00d20b392dcdb651afe88e4db1e6533d7e4cae6bd711718f94382c495faae908b53e35b6c736017cba92efa19cca95ee9e26ed06b38fc45315d7883b4d9a0d1b57283ed865dd9479c4822b283183a698dd1389a0d4f1568238cd3946375676e95c98c244464381a50fa784a95ead7233da37f8e4ec5d26a4d5275443f3267954468a20be326f10eb8f8b57928d1fc4b9aed6f3200c726be308057a9200583534fe838313d8a5e7594b4a8def8e0652e4273ffab4afcbadd0ebf6568b27125581f14916432ff4d0cc2f4d96966b87c6276a65b59df8987d788b20e45a0891f1a2052d47816abd123c50b144b6099dcb8a90d81fc8e3c02c26d2f8737be48694a178a9adf530790e1d735e144eb112644ef5f96d47ee3695b53e10cfeb3754baff40c63c41d34fd6b959c80aa7b0eb4fb260c85f55298855e8c1bac8970b0f9977d144a1933c1316f359241a94b40549d9be47c4a726a0c55d3c07f0607ef8d02ac6d3b8aa3120e2368f82fc9dfc0b04c821f573bad21538216af876c183130dc815062df3cd9be3e44dba252da02214ef2f0d118721bab7a3d1d4530bfea5891ed8409a618337d1e11c2ff20167d10f160b57f8f3cdf7b41c48d14098324ad970698177efdba81bd5c50211ec17eeec19db0cf59c5ebfb64fd596750e8910c6060c186d5f62edf341bbe078a40b663e0568d24ee170b9a0524a2c6424441df629175b9b058c827df08cf26f8bef3207bbf8f66cbfe35ae517c3efe0c08bd26ad26607ff70411093637f5973f2609af785e77211cd2860e29532db5ba9c0ea531c596d3d203cd4ea2d047fd01025ba39b1216cb5c2b79a4883ee4b486e5e089049abc980f174ddf17546ca55a147d1364e76753e90bca2b0766fbbcc5c48e614ba0756ac3bf1d392f2b45999138c1902abee020de08391eff9bbd5f672c8ad3d6b186ee67764b6337c26fcfc858fa53d663261e06f52dab90aaf55762958deba6caecd9b3f364f9dc4c3cc7b9e45a47eb3a76265644d024df0fd1a460412904333a4fccb270c6eab45da2d28022d4dc974dc003979d2cdd1fb47357279fd409b3c88ece527865712eb9cd71bf32a96011e69120f4ad13a5269e6e37d979d45b4f9040f3a9cb3b327146559854c4751f9d5381ba4f809be891e8463b37b84523dfcb22ff37c8a3b9d3247779164478b75e4f4793521e168fbbc2578fbb496b95cb15acf62e63bc5b8bbe20399f981c257854219116f270a92308616b58cf601d07714b3b712df925c093f79637d489898748367acd5c346bc53ac7cf1a4222690d4f0909549f39a85481dd66aaa781186fcb2dd150c172a147083165d7a7d5fcf0439eb0c118f3411498dacf373355da6dc6122886e546e7108bc3a8efeb2526d93b9d456320030e69aab2248e62626807340b683ece2c3127c1a2e3827a8b66ba2b47761bcb1a3afed2b3937da4a0d57a69481dfb31f3b735abcdc704e3d03066b9fe101ebf3ec10186cf7cf94858a5f9006f9ac985c6a02fcaada670e5c0d5806eea57a06e5fdff44fefd08bee1c357a5ce011063352b8de75fab9bd5823db58c408f7fc2a35e5988ae9503ebe79e7454a8c78e454121dd7babc2c325ccec95bd8d428a5280bb6d1189f9081627ed86b8e92680e072c1288ee49b2323679cb4f2e1c087e8a9ad73c0d37c8c165e5bd7b241a5524ce43c1e73946645c8b2085b32c633ce8aea089f5b3bd9b8a44bb3ae4679787bc8b43fab80055a093c594917ae330d5d7941e7612561554d1b18b4fe5c95c7b5dac3ef29a270a1951093649299e1272de8a31640387916b3c8cce51d9e0395e6b3966aae5f43a16390b80579057430c01602bc003727377bb5f2bcb6aecd04464fed40dd0d33b2fce125c9bd038cd121b80707b0dd2ad3dd955c26823506271f4cd4b7f9467a717606ff7d00e092b42997bb48162abf7b9ec56c835b1e9f4fda50fcf6c73f6b2c2ca1309b977964e26442f8683542d5310e0a77c6c1cdd8313b931009daf1753c748d6964ea39e7dca30a1b0ff46f0576006aafdd80a96c17e16951a56a9938ce3123cfba0d3281a38b8e129cf801762e60c68b098e9e4bd7a3f6957c392571f165afa51c2ac3f9308a5a5b1049eafa68d752d5f2be9a15dfe320c0fd3a0ea153fa7041a988eeec2b10a97549384779da4b0d221a604576f7344412b786c34fd79130279be957890fa776e8a7b43b0b361598ed5fe1db27fd9e158574c4bc71b6362e085f4f70832436467fd3db882f7b982208a63cfeb910be047c1984ca0b63fa854cc8c837ac67e3d0f083a52480b24cc01356239461716748d22fa3d3062fc9dcc972eefb00a03bce3d0c0f33373ac1b22b8f2b9d72107ac0acfb64e01c3d3f6b18cfccaf7353382091104ed9ee7efb5651c00ab93bf740d935a8f7531aa04b82a8656ac039ecd985c7aa2d192f3cb918c1440fb6f910e9cdafef17a3c33a532cb221c61be1d52a23b1028ec21f7a078d9c2cd414ea7910fd1c839e2e851e8c3fee89e5a05b9dc88dce33be0d8b2e6959cc195bca943f78f4e593bcccadbea3fd167e4c277945821e4db212c29c087bdde4d6e263d004d85bb69328b99615736ee2050d15e88576dffce6992612bfd24ee206bce53738fefa35a9764b29c58b2c879a3f1e26e6f8611bbc52fee1be2bc76b6a66cbcc931b7a3b9ee2e8c6e44204c58d5b98c422886a05d366cb0b82e5bb988021bcff46ef280f1a1a42e6331ce67be993b86f94c982c85cd88fb4fad39c919a04d2d692a00cd88a57c84b6584fad351a09c6d648efc214cd2b7ceb966b80504840910133dd57b8fea98455bddeab459bd73985e52e1"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x3, 0x100, [0x592f, 0xfff, 0x6, 0xac, 0x400, 0x8, 0x1, 0x0, 0xfffffffffffffffb]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1c4}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x12c0}, 0x4048004) write$char_usb(r6, &(0x7f0000001dc0)="14f76bf5a81048e273436ef1ef2674d2ae46e8dfb6155a2b0b19a280a1d572ee536355c2efdb740a0321efdaee1edb7d", 0x30) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001e00)={@mcast1, 0x0}, &(0x7f0000001e40)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001f00)={'gretap0\x00', &(0x7f0000001e80)={'gre0\x00', r8, 0x700, 0x8, 0x7fffffff, 0x7, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @remote, {[@ssrr={0x89, 0x13, 0xd7, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}, @ra={0x94, 0x4}]}}}}}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000001fc0)={0x20, r4, 0x8, 0x0, &(0x7f0000001f40)=[{}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$kcm(r6, &(0x7f0000003540)={&(0x7f0000002000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="fe48d8d758407d3ecd548f82b5c6c18bd0750c17210548c197f2828117ee2656359b03952adeb27c8a37bf661974bb2263ed921a916d67bfe6a03e22b907889d66", 0x41}], 0x2, &(0x7f0000003140)=[{0xc8, 0x1, 0x9, "9c591cf1fce15ea176b5ba5cf3fe1d3e1cf708db41e8a7e3bc041ae3ae8baaa856d570453b2026f13fee371848636ba93f5a4889d28fbe2d4b5b2fba22610a5a9ae413bc49a5ee3878724925f0474b5e95d4c270fdfa26d74dd2da27fd9bb8b9b588a261e8c2b6c21724e647abe7671baac994944156ca4efdf905f10a9ba3fc5c09d97402e1d4d4f36e57d036f6d02710005066a8d2c4e681744546430dd7b8dfe90150945588146e5c6de17c430602e2867740d390"}, {0xd0, 0x10b, 0x4, "97fe1f50fe840036dd358d80a9d124fb95d638b47519cab090d0f88c56ed69095daf3fd71f0b98c0cfbd1b8700af0b287e2341b180aa22c36c354e9f9d5ca03ac499c8a52f300123a6088e093b47dd77945a423857cbeeeb5a3cac717bafca096bec9b4983af15eab3612d74160e78a974bfb4d03cd1724b2cd6805c521a2d8ff50d1b236818922efb92607446a380f5c214b816b97c9ceeecabed6a9c1cc5eda53538909651f5d748aaf1c8f4e384ef30c0b10332ac134d3c85351b9bf23ee9"}, {0x78, 0x10c, 0x401, "14589f51abb6cbed33a1a9b3805bfd84ca2e4b29d7f3d9a4e8f5f9524e507bf6e17f2fac492dd3655f63c6159c88f2227bdfb4d2ba767bffccc3abf23a59d46f8e43decf3846a64d7729c57c6c75446388c769dc61a9b596ebb1a3486e547bb104a7"}, {0x28, 0x10d, 0x2, "6e4bcd2d5443915f962aa7ff3ef98156b3d788636335"}, {0x90, 0x108, 0x6, "61735c1d8bf00d9f0264cf4f4f79d136acf22f2ff2929ef05fa1879edeae8dc7663d99eddb2f8233cbd8ad47eacd3eda0b1377bf7f0c22b62c5cd49fd681b3794db05a99fc9b591d4edf05b5f7171d13a3a607e169b95be2e5ad1079783d35b2db628e9f539f8bdbc4a105ed24589d523c749d7e7e069c7d431ef6f5b5ca9c"}, {0x88, 0x0, 0x1800000, "159321da2225c980eecc168de0fe9963d79e0fcc4724287878919a38e434ec8ebc271626de3983cf9d0ae3fa5f9b4f0abd569712a9ec3f4adf0a31403bd911bba82e4cfdb8ebc3457a5958ef79dcb10f5e68b09725bdb39bbebfdc60ed009348450226ea7d73db2d4a705a4673e50d6a7a8f79"}, {0xb0, 0x0, 0x9, "1f9a13e0257dbf4db4eff406efafeca3763b18456919296106a47e861c5b9cfba09f79a7a9776e5d8581c5999ce65800570c892ef10c91ab0f59b2141b1f46e64ff50104cfd8a45981dbb995e0da12ee7791175c80e603774f5017839034c3c7ce80f694288d28e91409d7a4adcb48009a797141bf97a4ca29bcd0ef99ab96918b5e415f0e47f897511bf9f41e4414754deed52d912f10c6cd12341d0b920432"}], 0x400}, 0x200008c0) r9 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000004680)={'\x00', 0x8, 0x1, 0x9, 0x100, 0x400, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004700)=0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000004740)=0x0) r13 = syz_clone(0x20000, &(0x7f0000004780)="7363458398bd164a2540c2aa31967f8c3f5705cddef94586ee7a155247e167d6511cb06a7f7f0a", 0x27, &(0x7f00000047c0), &(0x7f0000004800), &(0x7f0000004840)="252368551ed542b6558e27adf7b2d42fff14d848c05c0ffe71afdda07c4ffbbb62c3ee5ffd18e0c1c14548acb4f58f") ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000004880)=0x0) syz_clone3(&(0x7f0000005bc0)={0x0, &(0x7f0000003580), &(0x7f00000035c0), &(0x7f0000003600), {0x20}, &(0x7f0000003640)=""/22, 0x16, &(0x7f0000003680)=""/4096, &(0x7f0000005b80)=[r9, r10, r11, r12, r13, r14, 0x0, 0x0, 0x0], 0x9, {r6}}, 0x58) 4m12.688862038s ago: executing program 3 (id=665): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}) socketpair(0xaa1fd917e020c48b, 0x4080e, 0x8, &(0x7f0000000340)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r0, r1], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6}]}) io_uring_setup(0x937, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000140)="6ccabe", 0x3}], 0x1) sendmmsg$alg(r3, &(0x7f0000004180)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="1c", 0x1}], 0x1, &(0x7f0000004d00)=ANY=[@ANYBLOB="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"], 0x11d0, 0x40}], 0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x9, &(0x7f0000000140)=[{0x9, 0x0, 0xf7}, {0x4, 0xf, 0x62, 0x4}, {0x2a, 0x8, 0x6, 0x2}, {0x0, 0x2, 0x7, 0x5}, {0x5, 0x81, 0x5, 0xd0}, {0xbe2b, 0xdb, 0x4, 0x8}, {0xfffb, 0x7, 0x85, 0x6}, {0x6, 0x7, 0x6, 0x7}, {0x3, 0x6e, 0x1, 0x3}]}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 4m11.811117859s ago: executing program 3 (id=672): socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x101, 0x5, 0x0, 0x7fffffff, 0x7, 0x6, 0x1, 0x1ff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4c810) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3ff}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0x9f95, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x8000, 0x7fe, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) 3m56.710444064s ago: executing program 32 (id=672): socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x101, 0x5, 0x0, 0x7fffffff, 0x7, 0x6, 0x1, 0x1ff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4c810) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3ff}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0x9f95, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x8000, 0x7fe, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) 3m18.26643887s ago: executing program 1 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4011) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x22}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x180, 0x3, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x8f, 0xc, "3324c69a9425a529ec694e873d4de06176956905ad03cd063d56f4a1512ca30843cea6018483f44d6c707f9b376eb7f56421e8f64137369b54809c0eb25b59d5c0eec4d00fd574201334a23904e41a536b38b2a18859ff105f136f597455024d2230974ff5cbb15c947a982eefe411946fba4feb8d9b5bfe62c6207a837b3189da2ad8829118d8385a85c0"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9f, 0xc, "2317837a7c34af71653638961c39b87b86c7ac76a9d04c4a4cc29c7679f924d288aca8c9628d4be9c34a4dcd6565d1c0aecde84b0c491dad33e582f302b7b382bddef550cf58c2973ce96dbcf64df56ab00d5099be5478110076465513bd2af4106d4338c494610021a5a72798bbfacba704ad484f634d88543ef21a05d001c5523803309603a2a958ffd53164e4a859f4042d5f08786628031e52"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x200, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x41, 0xc, "d7cd91d4a7c19021a85a088d7e14a6344226f75c247629f65e06bda61d8e2084b7f7511a0a86647caf108959dbb74140634dd6ebc6de36c204c3c7564a"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72db5eff}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5489deca}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41694f3e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x995a}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x280000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "539d3ec614f7654a59684cdfed9fd9db5e7132d2810b6c5a173c3743d4db8c0a0235ea3bed5714e100de20f8895131e0cce399a631cc9f8a63cecbb860ce83aea70048ba0c45e085cdb984d3b2"}, @NFTA_RULE_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3b8}, 0x1, 0x0, 0x0, 0x40894}, 0x20008000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r2 = syz_clone(0x4000000, &(0x7f00000005c0)="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", 0x1000, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="c4e65bff313d663470575a88273429bf901c39ff0cdc41399b914cb298409403fc5806a14f2eab88e269bf1dc868715e94ff56ca15a82d957e3683e7c861185ab303b198458026e1f36732e03d61e2a354d69196b9cac250c254fc89090afb1f3e776d96a47757ad286e7a09238e2dc93fb5d1b4d21422ba97a7b47235587754ae6323996b03b828f01765ccbf599225389944994df0f6cd4c3062c7739d27dee92f71b9b5c3902c46ac3bca0939a5b977158e7fad3e8cd02ce5f2a1d1b8fad4b04a5b2708903c92ebeacbd5e6c0a239978fd82f2f9530c69eb1ffcec37c37bceacbe27992d8ff4a") ptrace$pokeuser(0x6, r2, 0x100000000, 0x9) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000001740)) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001780)={0x85d, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f000000e080), 0x4) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000000e0c0), 0x1, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f000000e1c0)={0x1, 0xbe, &(0x7f000000e100)="015448b5a3b95351fe8f2bf3bd994129f03bcbb78096f04c20f20fd4d1783d475fffb6865476319c91e15e982dd76ff6ec8bd8c1d3fcd6356ab93b1e31866f899b745201f4022eeba822797695b0062ddced264a325db7beb0dc446b5c1fd3cd9934d0d8b5f1afbf073b807b3d8857a6688ddb03d1f9402af4a7bd5fda25cc065ca13d1670c016efe3c2d15faf4d7f6a5ee666935a067dc7e1217295a644067a1be3f8ba170a4695d1c18808a446e075aa0f69c88a88f09b53ce8fa30e44"}) fcntl$lock(r0, 0x0, &(0x7f000000e200)={0x2, 0x3, 0x10001, 0x2, r2}) mq_open(&(0x7f000000e240)='dup\x00', 0x40, 0x80, &(0x7f000000e280)={0x1, 0x51f, 0x2, 0x9}) getsockname(r0, &(0x7f000000e2c0)=@ax25={{0x3, @netrom}, [@null, @null, @netrom, @rose, @rose, @netrom, @rose, @rose]}, &(0x7f000000e340)=0x80) r5 = accept4$alg(r4, 0x0, 0x0, 0x80000) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f000000e380)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f000000e480)={&(0x7f000000e3c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000e440)={&(0x7f000000e400)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) gettid() ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f000000e4c0)={0x7fff, 0xc, 0x25, 0x3, 0xd, 0x0, 0x8, 0x8}) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f000000e540)) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f000000e580)={0x3, 0x4}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f000000e5c0), 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f000000e640), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f000000e700)={&(0x7f000000e600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000e6c0)={&(0x7f000000e680)={0x38, r7, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x0, 0x2, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f000000e740)={0x0, 0x78, "73fcd84a0d14b5f001e0d189a985ab74387bf20d7ccd2b9a6da129227bf3df9919ac1d9eb3096cd05c98fff8779d6e95c9759f91580d084fb1135b520827d4958622677bdf4ceb6650a248f3326a30955b1a4577f79c2b48b110cce0854f5d35eaab0d0d1ab4f5e08a14c8763355186cd34e9afda6226feb"}, &(0x7f000000e7c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f000000e800)={r8, 0x1a, "75c69399659552ffd0ef530f884e414d7551d10fe3e1b321ea9d"}, &(0x7f000000e840)=0x22) 3m18.176288923s ago: executing program 1 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000004ec0), 0x2, 0x0) poll(&(0x7f0000004f00)=[{}, {r2, 0x4}, {0xffffffffffffffff, 0x204}], 0x3, 0x7e) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8c1) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000b3aa7a99249bab21f7b7a6bbcd9a311cab081d6880f2fe18152905f9855ba66fdaed329ff4888ddb6ee91f592d8705643349fc529135c933f56b9f3fce6fd217dc05624f6c17182d25b9ba4ded3bbf9d88b86439a89a87b4384a2a6fedeb60eccc391509", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251400000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x34000800) 3m18.044885051s ago: executing program 1 (id=1146): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) 3m17.962879242s ago: executing program 1 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (rerun: 32) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0xfe, 0x7d, 0x20f}) (async) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in=@local, 0x4e21, 0x2, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x3c, r4, r2}, {0x0, 0x6c8c80a0, 0x6, 0x10001, 0x64f, 0xc2cd, 0x2}, {0x8, 0x7, 0x0, 0x7}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}, {{@in6=@private1, 0x4da, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x1, 0x0, 0x8, 0x5, 0xfffffff8}}, 0xe8) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) 3m17.759417026s ago: executing program 1 (id=1151): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xb}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x24020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = dup3(r0, r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000004a80)="69a865e58d2d1e88f3") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, &(0x7f0000001380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0x4a8e) r5 = memfd_create(&(0x7f0000000340)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0\xaa\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba6#\xd2\f\x8a\x83\x15\xf6\x04*\x9c\x02\x1b\xd8\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xdf\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\x06\x00\x00\x00~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\x81J\x1ds\x95\x92\xc7\x00\xfe\xff\xff\xff\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\x96\x8f\xeb7\xeew]\xe2jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8\x04\x00\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3{l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwX\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9h\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb\xda\xa1_\x82~\xdcY\x7f\xdc\xb5e\xcd\x14D\x05|\xae9\xa9\x16\xfen\xe6\x0f\t\xaf\xea6\x00|\xac9\x1a\x0f\xe2\t\xa7e\x8fp\xe2\x99\x811\xb4B\x84\xf46\xf9b\xa43\xf7\xd4\xe7\xdf\x88\xb0c0\x1d\x9a&\x1e\xb6E0tHI\x7f\xb9/kk|5 M\x9c{\xe6,\xa9@U\xab\xa7\xe5`\xd9\xed\xbc\x86RG`\xf2Y\x06\x99;\xb6\xbbH\x00\x00\x00\x00\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) sendto$inet6(r6, &(0x7f0000000680)="a86f3528c5dc0535ce6b65e3bb79bb34784ed06ee238c463e85943446dfbc8f554fa2fef2102ddd65372699c0d39169fc17210ba703f41c86d5b97a8212915b01948733bce83213d1d32bc2a357486d7b54a213914fe354b5a315e85e2e861b3184a2dc59ff7b1f78ff0ddd2833cd6f520199ee7da4f1b2dae236c57ed8e627657bb0ea3316435724b0955da50371b1914965df302a3a13cc7edb5affff2c4d1fe000b0f24698cb8076355a0c2a21d4f69e275614871ad80897fa20f548af104a60a", 0xc2, 0x4000000, &(0x7f0000000780)={0xa, 0x4e20, 0x3, @mcast2, 0xa}, 0x1c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m17.75874416s ago: executing program 1 (id=1152): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5b, 0x8001, 0x3, 0x7, 0x1, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "8ada93c6a93ffcae", "b2abf9d4187c60aea2fb647c70e516f8", "8d13973b", "13739c26e2ff1644"}, 0x28) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(r2) syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x80200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4c, 0xbe, "8f428a8096598d388c9b9a8236c89892a526470df55c78052b15087dea3adbeb9211abf38eb17152524dffbff7fcbc43a09a5126c898b3a691bcbb2440195eafcbeef467c660da93"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x40, 0xbe, "d454fb20e596f57ce78b049d40d6b01f1fe5f3c1531bf465debfea64c824358acb5a72d1764407e4bc70a21715775bf9606665d29fa5fa759e2424d4"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000480)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'bond_slave_1\x00', 0x9121}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r6, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x51e, 0x31}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000001ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000000800)={0x1264, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff226}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x988}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x456e}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b3}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x1264}}, 0x8050) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004854) r10 = syz_open_dev$sndpcmp(&(0x7f0000001c00), 0x5, 0x4082) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, &(0x7f0000001c40)={0x3, 0x3}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001c80), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000001cc0)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001d80)={'gre0\x00', &(0x7f0000001d00)={'syztnl2\x00', r13, 0x1, 0x1, 0x800, 0x3, {{0x15, 0x4, 0x2, 0xc, 0x54, 0x66, 0x0, 0x57, 0x29, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x9, [{@local}]}, @lsrr={0x83, 0xb, 0xd7, [@multicast2, @local]}, @generic={0x94, 0xb, "51625cc4ff02085379"}, @end, @cipso={0x86, 0x1a, 0x1, [{0x0, 0x12, "1dbc539683e9b81bf8dac9498df36346"}, {0x1, 0x2}]}]}}}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001dc0)={0x85, 0x8201, 0x5, 0x9, 0x0}, &(0x7f0000001e00)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000001e40)={r14, 0x9}, &(0x7f0000001e80)=0x8) connect$pppoe(r12, &(0x7f0000001ec0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ipvlan1\x00'}}, 0x1e) fcntl$dupfd(r10, 0x0, r11) 3m17.604220812s ago: executing program 33 (id=1152): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5b, 0x8001, 0x3, 0x7, 0x1, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "8ada93c6a93ffcae", "b2abf9d4187c60aea2fb647c70e516f8", "8d13973b", "13739c26e2ff1644"}, 0x28) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(r2) syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x80200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4c, 0xbe, "8f428a8096598d388c9b9a8236c89892a526470df55c78052b15087dea3adbeb9211abf38eb17152524dffbff7fcbc43a09a5126c898b3a691bcbb2440195eafcbeef467c660da93"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x40, 0xbe, "d454fb20e596f57ce78b049d40d6b01f1fe5f3c1531bf465debfea64c824358acb5a72d1764407e4bc70a21715775bf9606665d29fa5fa759e2424d4"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000480)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'bond_slave_1\x00', 0x9121}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r6, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x51e, 0x31}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000001ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000000800)={0x1264, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "97efe92983db9ed63bb4c88fe9bf110e767a22f6ad7410f2ca7a3a1dfa928ca9722b72c0ebd508c4007fce8d6de014ae1d3a9756ff32613d2a9bfa78fe837d9870f856e33c77c0932f64a1aed7ae7a0ad02a854cc6ac165c9553e037f972f01bb1987002c01ce61e6403b371d9ab39432b292e6ae47d96762c7ca1061bba30b13e47aacfde509ae821ae87b4737decb1d855c1316bf8c9cd94a17accbdca3d7865fe4c46f405102f71f4ec50cf4a3a9a54ba597d20400e8ff90145d2eae506d75c57e2a8a48fb309967d69d2d5df08971988db5a7c1d303db63bb43d940cc53b71bb168dc3cdb555d148d8651a04fc557330b8be4f8524ee7a2452d24dfbe92291559958f8d9658b28c19688941247ff6a605614b402cbb7d14a1548475963c8ed4b931a5b0b5778c132db7cd01e9868b17a095ebe2fe9fb02fec9f9858902c69a1592070dc8bf3b95d17155d44de3708962006cebb550750a7fcc940a21b1f69de70f42946f04b3f0bf0f61cce4f4eaf62cba4b6ac15c96f1ee6329d7bced43b369a9d48dd0a433a1b12b797327154d06e046579a08ba595f6b595c59ab752227330907c823ff8d6b411b56644b43484dcd3b32647ad76ebd9ac0a12e9a7138b3b521edd9bb80f81e542971512ad2fb332d763b46d06cc1f6f8ca1e26d210cd9c8ece920aec0206c98e91b81a32de9e1dfbd7ec3aca924e705c45dadba98462b3d06b62d762979a2fafcf612805385b1179a60c179c91230a96ce515ba1607468f3662e3e0efc96c9f7c9aab1896ab879a86fbcd53a3f7b2d519890622d519643ec4199e7496214965f3745d0a3a6ce41b81c310b4eb46be6b2d5978170de7a5f728b83478a8b8b29d20fb6541c302870bfdebdb6a562ce2d2bdd0af4598e661669eca52173855d16bf7cd109eb6b0a7e4bbfa907ef0ececf9c2a29fdf1c086455cc482ce5a9ce9be001a310bd4b6454cad7fcfb3de8094e04b7815c85567f5e1bed0fb4f4b993b71700c994d67de9c61e120066a7031ad75bf5b452b81db1043defc558be0b88d707eac3e9c1284e8235ebf398ad4b997a8435b4e8257aa439d6942ccf14afa03425cad15251544d81c0d4d8ca3e6f1909c7581ba462edc95b2f4224a9bcaa627a07468a331643879fc434de24c6e4bb2d17e355db776c5dc738f3632898b9011c406b6b2945e83c5c7fcaa901f0b37dd38e9318440bac53824db11150b70d9dd2d7d3a69aac87048dab587408612415dd63e1b560fb7e41e7304da39c90e1d230109a7ae288dc23fe11fc8abd50b6e885bdfb8015a0cb105201052cd71c62aa4a041f1fe77e06149e845c9b0371fcfa6698a952553bdca542d5cef143eb8917054f0ac44fabc3f5e219c093bbdace18a2ad59ae3553aab92060bb6add70ea4d35ea039ce6c40cee2f18935965e453a17f9c9db06ea1135ab1c2c65885d8a6125d8c499bf9ac5a0f811d99ca746c9b9b89e02fedbb0964ef78e3efa264824de0fe4c6e6d3e4182a10c2282f681a088c9d206b938f754231d508cbd658ce4e75144163364f8f9515e3d84b7c71fd1cd9006d0ae0915c19c13795325f82f3b6a6678d084a5a897815d6b1cae828b29d93e473fbcf960b0a3dd83b40e4c54e83a90b559fe9cde07a705dc7e2c0af74088a4b75999a09dc7a23052b22b9aff4371f05e7922489a401dbf3bd3d425e1c2632115675d8726f555bc0bc73c9103ac3aaf9797840e94183e53b130c19a6b9a187bf9c31faa19e882256c80e422bae4209f74aa6a6a3cec04529ddc5b4bd9de5dd736f88ca36bf2dc6143fb60b04f1fa2ff81714fae7dba15781599cfb1966dd1e417050da611401bb81b6e1d5ebf2df042a28aa9c4b438f33afd8ae4465967ad153cf3f0b1255bf296deebf7eba49d296fc1ccda92fa2f92b5433c805612c88e51e589cb1b8a73ad9b34d1b176dbbf81f1c5c1a2006a7a0f1de44e2bf0268e44743dc0fc29189660dc8cbd31484f358c53458dc9e00fa44843a1b8923303499357b898afda044a557e3edfd154a3a04194f512b4c2f685f3fea02d6b3d9bb2c1558ee191765436939ffcfce524ecef5035f8e91df823bdf9d357643b450237c20803894ce50a126a2583fed45e2b5d7c588c844df232e60c8037690b917361dcb65d702a801b080c6653a30932683c8897db4618741172076af5a08664323c1a19883ad3a4ea4a5f584de49b13ad2f74e73321c95d41d5460dc1ebf1c9297d46a2f00c38df186ef2139ba8f5c1b743b4d30f4080d785324a11bf72456dc0083e990c6f7d49440d7a54881995062eb8eadbee3f15c4c7e4732ea8ce9c25d3775b0be1f5bf6d09cf598801c3e09072747f42c09c3e2a7aab376d0f1fa3c2e8c80f6e69feb6b14432b198c06f2e1f27fa9ae77dec0da8d3559882f2e696e13661404865931bda8482a97d51d6159a78f6193a2603873a1dd5940eac9b7f705eb62da775b5d27ea8d79b7d9765a0902d3cc8876202161aeca1184693b009dbaea40223a22634ebb9e5166f3262f3fad4f5522b2f8fc8c4c028b7483a27d8eaf4db5d9e0f38dd3f79772e033232318a006ceba1b10c3967cd189e10890f7f06bdc59b6eaa42dbd335d40aa28eb60ebcbd5a0ccb4d5a6665cb2cc18feff6f4cfa0151aebdb9be3fcda51a38e0d2032847d72f7c01a4c1deaf359759ffe47db3b63f0ad01e0ebd53714d39c9e8cc61d4b53d3b9fd968bba7395fd0a5712f61a4a081f89bc36b15d63767d421648f6fb58500237d12b3491a0e0e6e804d540b530e7a65c80614907881c70f0cd54a46d72a0b863061a1793765493a09dbb8dd64c28bd7a470b123cafc07eb210cbede3ceb5eb1973253fa5e212e12b3d363998b3d9c094712001dc1a55321f57266504ad8be048f74666f92b71bdd3c68cada08fbd964ae10cb0f61d0b63c8a4352f5cb5da550156871d2100fd735a85776d7743b1d274ff2b0de1337a273e221f6d6daa643a1e27f2e8450ec93254421b9a47721e8a006a3b77ea716dc7832532f9296cfc28bcf631e400056ed1cc992e938464c0978c7ffaedf0f83552a1c374896b785ae8d7d023aa49170c5ae16e7a8e9f36c89a86ba09cf6ad2e28810a60008c7d18dbcf298fcc798e295b08ef1988e54cb609eab3430a88dd5be5b4b702e7a46e3f9c2823abf870dcf7c8fafa99bf0da40e9fbc444fbd974ad45be1bb251ac2e58b098003ae3393ca74b07dbc1206fa0cc96c5497361ebf0fa14d479eb9c5448c0ae74b8026d2dbaaf7ffdc5124dbd564b0ecc38ae9a52317dbe1b2b359ca2381985c6d060f493fb13f29f72754fb4afab7c07fc770c699bc9d888e0e1eb180d94708a59d6f14118dde4927dd1e219490c4e666dc05e27d40ef3df9196a50f952c6770b52fea044caaaa250fcd5d0be42e3859c6bc2f0f23897c9ce4fecb601d94c1bc394d7c3455be10c3633ad2e390193df6578222ff8d7eeb170d7014793b4c80d555d414603525ffa41800acf4c867e6a8a8de24e0b46344394e9c21cb12d23e585ec5805e93712f23fb39b7f9a5bae496c4632684be12a3092e3c6fa94c2e24a3f96ad0b64d1aaa50052ea86be626784a4436fc409ca3148d2e24b82bc7f0dece9674a8039cd1d10ce95f3c51953076faf5294b64b5c72070cb29c6ab2ff70371d252c62dd886115ea8e6b362ee60d6f01ddb732143cb82b4b03e5323736596857b21b6b24bbeaaf3c6271b83cbd75504fb79e8dd6b7e1003e99436f6b6c4fc876da427475345ccc7a62e34559f42c2b251c1e0d021481e62d944fca9c1be7339a04dd9400020fcd7125c6c42a3cf6736ab644b6d67dfe55ef58298308df4435c1e5a7a780e46b14f59190a6bfb59d6913f914bfee1a2fd82c94af9c651c480939edac234e6234510d26d2fa62fe369cad859b37156c8c3d0f76fc323620093cc76e81d6fabca7d847798bb0ee004b8ab5df32a3b892fa2baf60527604d63e36ad3410e85333263a38eb6b31ce7289f89f2d71d25d94b3d1c7d07c983358ef2f935a4a059242256c01a571a90ec19f2c7c6de2c4adb2e342d010a92d1bbaef8d73af114afd88ed36e75e0adf3f00a2ad008dd1da7ac609324ef528b64447a4c0d075897937cdb7bd51627519d31c5912535f80658b50150f80d32c07c7f251993134655ebf413e790d818f9ac553dc66fb0bcb77519e8a9edb90d7469d71459b10dacb5643b4c625320e79be14cdc6aa12c6c724e76f22652d60e28af8862ca8bb1199588999bc80d501656dde48a1e475fcdd9f5be62b02a1faddd4d4ae19fa308548e092f679c370bca53533caff6fb4e99e7aaee96d18af49c11f64b60ea1e7f62636f6188c3babb9309ffd8240c9c490821b2f8776ba24fa071d5ff1580ee4f7325a0a7087f285634f16f3e1a25c76c5c396e6bc73b84fc79f056bf00bdec2297846965757e495bb976890823f94d1e2741a152ed1bf1832e0c75f4cec8b154a0e0aa797d7d7c741bb41094bb65413652cd4d6aad4c470edcd28184354763880c25deeed66009deb0a5bedd4625277e867799a776c897cf3b4c6d01fbc33191676f0323b4ec6004d48130413c29452ae67a10e25b405bf767de52a64963c84543a3d58443c9cc710a63c7e24b152c4da1f9b6c0b7fe91425cc0189c67c3ce95390dea16ab39c2867be0811ca2284b1753b1f5d904b681c9a40ae147800c1545c911e5f1afd63aa40ef81d5021f219afcb5155026f1b9d05a5696bb458c7ab671b3d17d64d984e1f7f5691b968e05947f2e47c797ae966982958637fd1e69cbf89cbd528e94ba31db778e06b77bc0bef5cd30d990820745e8329b3fceb9edc8e1cbc74d3c6909aa8464ae3ae8448cb8871d6c9e5a699ea843d9ef9af97b4aae5d6abe16fb16d669e196dce9b76fd0e31a456f10d22f361147192615dc61d5028833640287ae54e887d3f3c673ccbcc1eaf0f0b63b6d9cbc29048d5aa9d4920adc289f6fc5e30667348f50018377ea9c04bac68d6e53bc70f4186d2ed0bee2872a38deddab848d6ba4c09255652d7748b4cae27c2c098f2dffae5b7a5666335e7ccb7fd423b57e769558557cda2212871c80788d827f2ac38ccbe70801aadb3234543fae0da6c6bb36c835df5d2a027694100eb8a9667a7ebecbc9183590bf8add5fc03e405b1e520eb7c951376cd25369724aa6c0a64404f3fbdc45145962b7e42cc34865cc2ec175872f1e80977e7d4bfdfb4ec4f68d04b1a1c3a092f72983ebe228dc264def02f75acdd13c55f10f71f3517a8ab3669d09e702ccf59632f95b61dbc767b6c5f2a8afa9a8557133b776a24992d346c786c84e3240b3fee207cff497888d1335de786a0ed911fde7f836b0fe49438a53f3355ca79355faaf6b5f62a9b3f36ff1a77a4f0541902235cbeea4d2564a3401801f6a90b11199468ebfa4fd1dcaf30add7612b36f3cebb8e2c61ed9a5892875f4f47a83b91317a767c259d9bcc91e473b69c94a0cb9546fb552d0c14a2df6bbec873752fb5b9a13550772b2796b458fe23cc7dd933bb94234c6fdbd518aa977b892bdcc4151f8c02ee488d165a3235085f375d0de6535f35e6cf97ce9391f9d89180c4375aafa4eef301c7b5f2748d885f91bbc592f978ca8b233a9bf8bbcb671977e91caefa620eaac2f46e00f44e5421597eeba47b65428c78c3a6c496ffbad2444ee7862423a14823df085fcdcf14beb77881b853fb769253b93f2f22cbb79b8670507545cab4563f5c7fa601af3358a11465f0326ddc9b0ce727be32a8038c0a0"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff226}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x988}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x456e}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b3}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x1264}}, 0x8050) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004854) r10 = syz_open_dev$sndpcmp(&(0x7f0000001c00), 0x5, 0x4082) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, &(0x7f0000001c40)={0x3, 0x3}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001c80), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000001cc0)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001d80)={'gre0\x00', &(0x7f0000001d00)={'syztnl2\x00', r13, 0x1, 0x1, 0x800, 0x3, {{0x15, 0x4, 0x2, 0xc, 0x54, 0x66, 0x0, 0x57, 0x29, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x9, [{@local}]}, @lsrr={0x83, 0xb, 0xd7, [@multicast2, @local]}, @generic={0x94, 0xb, "51625cc4ff02085379"}, @end, @cipso={0x86, 0x1a, 0x1, [{0x0, 0x12, "1dbc539683e9b81bf8dac9498df36346"}, {0x1, 0x2}]}]}}}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001dc0)={0x85, 0x8201, 0x5, 0x9, 0x0}, &(0x7f0000001e00)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000001e40)={r14, 0x9}, &(0x7f0000001e80)=0x8) connect$pppoe(r12, &(0x7f0000001ec0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ipvlan1\x00'}}, 0x1e) fcntl$dupfd(r10, 0x0, r11) 3m11.963703073s ago: executing program 0 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000600)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000100)) r5 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m11.814947956s ago: executing program 0 (id=1219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3m11.574050169s ago: executing program 0 (id=1220): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '_\x00\x00\x00\x00\x00'}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') preadv(r2, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x7, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m11.506161423s ago: executing program 0 (id=1221): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/1:0:0:0\x00', 0x803506e30c002317, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x80000001) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 3m11.501240278s ago: executing program 0 (id=1222): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x78, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x6, 0x0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x4, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) setregid(0xee00, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x2}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r9, 0x25, 0x0, @void}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r11, 0x4, r3}, 0x10) 3m11.38275683s ago: executing program 0 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x7c, 0x4, @buffer={0x0, 0x27, &(0x7f0000000080)=""/39}, &(0x7f0000000180)="51daa8c3311c3bd6bd7e6bd8ebec47920ebf23a2d19714126db5857dfdc140e957edd39f5316c1bbe8901fcfce3ca0e92be3bf5fcf30567e925c1e7a22584f8c17cdd621c13f6c8a788f66d0ee73cfd50073c7697a2c56f2b67ed81b892873c3d2495a43dc59ff44060bf32690d04a912aa8b8f5da16de646e3b0355", &(0x7f0000000200)=""/212, 0x1ff, 0x0, 0x2, &(0x7f00000003c0)}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x1000, 0x400c}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x45}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m11.306050015s ago: executing program 34 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x7c, 0x4, @buffer={0x0, 0x27, &(0x7f0000000080)=""/39}, &(0x7f0000000180)="51daa8c3311c3bd6bd7e6bd8ebec47920ebf23a2d19714126db5857dfdc140e957edd39f5316c1bbe8901fcfce3ca0e92be3bf5fcf30567e925c1e7a22584f8c17cdd621c13f6c8a788f66d0ee73cfd50073c7697a2c56f2b67ed81b892873c3d2495a43dc59ff44060bf32690d04a912aa8b8f5da16de646e3b0355", &(0x7f0000000200)=""/212, 0x1ff, 0x0, 0x2, &(0x7f00000003c0)}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x1000, 0x400c}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x45}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 24.284604439s ago: executing program 6 (id=2986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x169840, 0x40) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0x400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x25219}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0xf0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000810) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r3) r7 = inotify_init() r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r9, 0x3b8d, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000100)=[{0x0, 0x3}], 0xdeadbeef, 0x8, 0x1}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001000070000000000fbdbdf25fe80000000000000000000000000002464010100000000000000000000000000ffff00000001000000002020ea000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xf0}}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) 22.744604653s ago: executing program 6 (id=2999): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0xffffffffffffffff, 0x5, 0x8d], 0xeeee8000, 0x284a93}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x14) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0xffffffffffffffff, 0x5, 0x8d], 0xeeee8000, 0x284a93}) (async) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 22.620664396s ago: executing program 6 (id=3000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='vcan0\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='vcan0\x00'}) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0) (async) 22.393920921s ago: executing program 6 (id=3001): mkdir(&(0x7f00000000c0)='./file7\x00', 0x0) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) getpeername$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10) mknod(0x0, 0x8001420, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x18) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000000c0)={0x1c}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 22.33300485s ago: executing program 6 (id=3002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4000003e, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x4, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 22.082628704s ago: executing program 6 (id=3006): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/251, 0xfb}, {&(0x7f0000001140)=""/125, 0x7d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/175, 0xaf}, {&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/120, 0x78}, {&(0x7f0000002380)=""/66, 0x42}], 0x8) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000002480)='stat\x00') getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000024c0), &(0x7f0000002500)=0x4) fstat(r2, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r7 = accept4$unix(r6, &(0x7f00000026c0), &(0x7f0000002740)=0x6e, 0x80800) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000002780)={0x9, 0x80000, r7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000002800)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setregid(r11, r5) recvfrom$unix(r10, &(0x7f0000002900)=""/228, 0xe4, 0x10020, &(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002a80)={0x8, {"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", 0x1000}}, 0x1006) fanotify_mark(r8, 0x400, 0x3020, r6, &(0x7f0000003ac0)='./file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)=@v1={0x1000000, [{0x6, 0x75}]}, 0xc, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x759adcd9bd38505b}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44810) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003d00)) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000003d40)={0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000003dc0)={{r2}, {@void, @max}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000004080)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003ec0)={0x170, r13, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x200, 0x57}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x144, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x69}, @device_a, @device_a, @from_mac=@device_b, {0x1, 0x1}}, 0x98, 0x30, @default, @val={0x1, 0x8, [{0x1b}, {0x48, 0x1}, {0x36}, {0xc}, {0x6c, 0x1}, {0x6c}, {0x1b, 0x1}, {0x9, 0x1}]}, @void, [{0xdd, 0xb2, "dd4d2984f3e32a04678b076f83bf7c73f17bf268f6ddff2e1e799e63c2e9ba490c384b173d2605c803adeba5381a9d951b743f0b6eac5b2e3b32ca97f83a8d0a74ccd250f5fb1555aa95a7e7d6ed87bf4c4f6186aecd077c53beefe58a641a4a9dfa9a7f226468a587329a1283da86777a9dcfb7929dd2b63d826c90583cf56dd42c021a2333c72050c1fa65ff9f2bf8fc4435b62380e0a0dc5e382ed172e64a670ac6ee2edf2e028e17f94a6d0b79747695"}, {0xdd, 0x48, "95b9152002ede28961d888cd2ac13be1fd4f902d434657eb972b1efb02a195b8adda8810100f91d55c3b03416f79ed3379abae5cae047d5436921c665357fb3947ec316128b7f02f"}, {0xdd, 0x18, "7c155fc90d3225a1afd0c9a1d5a70134c4cbae09097f1e7d"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) bpf$TOKEN_CREATE(0x24, &(0x7f00000040c0)={0x0, r6}, 0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000004100), &(0x7f0000004140)=0x4) sendmsg$NL80211_CMD_TESTMODE(r12, &(0x7f0000004400)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1f8, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TESTDATA={0xfc, 0x45, "87552f52e8cf8eeadf2c30c1fb0bea2533a6dc18b51265d60fb7349aa10688e36909321fe14792efe893c5a29c32886d3f0546c8e4022dbfe519bc50a215fbb740586f5fd915b1ce3ae06bbe4c42b0f51c315d61739a4dc9a5bbf4d55d152880f3126743d193929a321bd69e6f276ba054bb211c895d57403856fd751b0f2bb5257b0add88d153f14c2c9290b7fb3b289a14012cdec2c4baa69d2f81d2dff0b6315602e08719fd4719dd43443646b8fb3c9b42032f9588a2481c35e7ea2aa9dbe701bd253204af9f40d21365b7ca7f21bac32c7a573492e63b4995fd09753ff9dfe9783742fcce41dc3e8f5b210bdbd1affef76b6b7b196d"}, @NL80211_ATTR_TESTDATA={0xc0, 0x45, "e05ebbba6ec22ed06bc2f3172ef4e10034898e2f3c063f708fda3940b2df8f03873de4228b667ccf5c02d1a93756ff0aac0f16041bb6fa68be0d8cb84a58406fe9c6efac959e05da7001ebe834df8469354b783abd6ffe050dad1270968e3e2de38c54545f2ed459e5b4d36caa22b58c18b698ed5dd44e4b08082fa97a1b33293c8ba2429daa7e62e5246bf991df736a9f59f96bd2f674b3f04ef4edc24b3e91844c39aaa5d6891ac606291f8a63fa7e8e4c6535d457171935649a70"}, @NL80211_ATTR_TESTDATA={0x1e, 0x45, "24f48b7178f8d704b7a8e5431a10cc58acb0a393cc3438736aee"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000004440), 0x280440, 0x0) 7.058890712s ago: executing program 35 (id=3006): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/251, 0xfb}, {&(0x7f0000001140)=""/125, 0x7d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/175, 0xaf}, {&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/120, 0x78}, {&(0x7f0000002380)=""/66, 0x42}], 0x8) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000002480)='stat\x00') getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000024c0), &(0x7f0000002500)=0x4) fstat(r2, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r7 = accept4$unix(r6, &(0x7f00000026c0), &(0x7f0000002740)=0x6e, 0x80800) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000002780)={0x9, 0x80000, r7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000002800)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setregid(r11, r5) recvfrom$unix(r10, &(0x7f0000002900)=""/228, 0xe4, 0x10020, &(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002a80)={0x8, {"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", 0x1000}}, 0x1006) fanotify_mark(r8, 0x400, 0x3020, r6, &(0x7f0000003ac0)='./file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)=@v1={0x1000000, [{0x6, 0x75}]}, 0xc, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x759adcd9bd38505b}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44810) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003d00)) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000003d40)={0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000003dc0)={{r2}, {@void, @max}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000004080)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003ec0)={0x170, r13, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x200, 0x57}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x144, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x69}, @device_a, @device_a, @from_mac=@device_b, {0x1, 0x1}}, 0x98, 0x30, @default, @val={0x1, 0x8, [{0x1b}, {0x48, 0x1}, {0x36}, {0xc}, {0x6c, 0x1}, {0x6c}, {0x1b, 0x1}, {0x9, 0x1}]}, @void, [{0xdd, 0xb2, "dd4d2984f3e32a04678b076f83bf7c73f17bf268f6ddff2e1e799e63c2e9ba490c384b173d2605c803adeba5381a9d951b743f0b6eac5b2e3b32ca97f83a8d0a74ccd250f5fb1555aa95a7e7d6ed87bf4c4f6186aecd077c53beefe58a641a4a9dfa9a7f226468a587329a1283da86777a9dcfb7929dd2b63d826c90583cf56dd42c021a2333c72050c1fa65ff9f2bf8fc4435b62380e0a0dc5e382ed172e64a670ac6ee2edf2e028e17f94a6d0b79747695"}, {0xdd, 0x48, "95b9152002ede28961d888cd2ac13be1fd4f902d434657eb972b1efb02a195b8adda8810100f91d55c3b03416f79ed3379abae5cae047d5436921c665357fb3947ec316128b7f02f"}, {0xdd, 0x18, "7c155fc90d3225a1afd0c9a1d5a70134c4cbae09097f1e7d"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) bpf$TOKEN_CREATE(0x24, &(0x7f00000040c0)={0x0, r6}, 0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000004100), &(0x7f0000004140)=0x4) sendmsg$NL80211_CMD_TESTMODE(r12, &(0x7f0000004400)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1f8, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TESTDATA={0xfc, 0x45, "87552f52e8cf8eeadf2c30c1fb0bea2533a6dc18b51265d60fb7349aa10688e36909321fe14792efe893c5a29c32886d3f0546c8e4022dbfe519bc50a215fbb740586f5fd915b1ce3ae06bbe4c42b0f51c315d61739a4dc9a5bbf4d55d152880f3126743d193929a321bd69e6f276ba054bb211c895d57403856fd751b0f2bb5257b0add88d153f14c2c9290b7fb3b289a14012cdec2c4baa69d2f81d2dff0b6315602e08719fd4719dd43443646b8fb3c9b42032f9588a2481c35e7ea2aa9dbe701bd253204af9f40d21365b7ca7f21bac32c7a573492e63b4995fd09753ff9dfe9783742fcce41dc3e8f5b210bdbd1affef76b6b7b196d"}, @NL80211_ATTR_TESTDATA={0xc0, 0x45, "e05ebbba6ec22ed06bc2f3172ef4e10034898e2f3c063f708fda3940b2df8f03873de4228b667ccf5c02d1a93756ff0aac0f16041bb6fa68be0d8cb84a58406fe9c6efac959e05da7001ebe834df8469354b783abd6ffe050dad1270968e3e2de38c54545f2ed459e5b4d36caa22b58c18b698ed5dd44e4b08082fa97a1b33293c8ba2429daa7e62e5246bf991df736a9f59f96bd2f674b3f04ef4edc24b3e91844c39aaa5d6891ac606291f8a63fa7e8e4c6535d457171935649a70"}, @NL80211_ATTR_TESTDATA={0x1e, 0x45, "24f48b7178f8d704b7a8e5431a10cc58acb0a393cc3438736aee"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000004440), 0x280440, 0x0) 3.670799399s ago: executing program 2 (id=3127): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800002, 0x182, 0x9}, 0x18) openat(r1, &(0x7f0000000180)='./file0\x00', 0x2c2043, 0x1a1) (async) setresuid(r0, r0, 0x0) (async, rerun: 64) setresuid(r0, 0xee01, 0x0) (async, rerun: 64) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3.603844261s ago: executing program 2 (id=3128): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000002c0)={0x10}) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0001001306c11f18cb09b227b93900000000b519954816d500000000000000001400"/55, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4f2401"], 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[], 0x0) 2.150607188s ago: executing program 4 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xc9, "06fa1675480c8d45673180695804d944dc7d95f856d8e3ef12d6e8be68602516a1a2ad6212bdf55b0bec92d82249c1faade0e37e6b4a0d9558477f56cc8e24831ed855da46e0ea0810fa56aa85ff56adb0561bc34a83f04bdff66824b756e083747150ba63ab83478fe852d488d42808ac5d8c65e6810be255942d9728022d2b62f368074198a1529ecf8755aa414c40743e97dba1950657d860371c724fd7fb9d43a6f58c902095c92f7860953fa6a4f8f3a9ad665008b10d56365171998c870beafdf1fcd230aa96"}, &(0x7f0000000280)=0xd1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c008000f8b7ef0e183221761f3f57bd70000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c0002800800140007000000"], 0x3c}}, 0x0) 2.083598178s ago: executing program 4 (id=3158): r0 = socket(0x10, 0x803, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x260, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5dbc80c71fac4ce32ff3d42b42dcbb1be93082af0c416c253535"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb14}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd945}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "a22059d953a8bda43d4dcd31e76259757ef90aaba61b22fd0e97e8b3199e49a12344b3b0e3fda0d93b0b04dc2883e13c442f097cd9c4adfbc409992d76bd64b09e182863bb756a2a"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "8388808d09135e34d28866ec7a022edd0769cc4ef9789fc58d6e79914afd834131c121"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "f247cf91e7543224674da8d07a0021a0e0792eb45833e0d1a712f341678688ef534ceda48b487bb971fbc1af8f2d2d1b6d7d2a2eac7f427ac805ee25ec2b12a22d0f62ec761b3dc13c1a93dc8fdf9862b765092b84459dd893fb4e11c0b9d90fa87ed5a7dcd5833f6bd28b63674aa286c66773602dc1d022125ed731712174de489b147633443cf9911b47e90c229fae7025a6da99242209c90ccfc928fcd7"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6558f7f1f7567a35d766ba771e5f2e6f3f924a1bd95641ea3c"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff274}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4008001}, 0x20044001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000300)="3c00000058001f000307f4f9002304000a04d65f08000100020100021700513500b0406700912deb5b859322340433b6156b5c11109c8c489786fcdc", 0x3c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmsg$can_bcm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/43, 0x2b}], 0x2}, 0x0) sendmmsg$alg(r10, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f59f44393a1336a8ef8cd5e5c97e", 0x31}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc0}], 0x1, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r11, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r12, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.224277537s ago: executing program 4 (id=3166): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) socket$alg(0x26, 0x5, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xf) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (async) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004680)={0x50, 0x0, r7, {0x7, 0x2d, 0x2, 0x30, 0x765, 0xfffe, 0x50, 0x0, 0x0, 0x0, 0x8, 0x9}}, 0x50) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) syz_emit_ethernet(0xd82, &(0x7f0000001880)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x9, 0x6, "0be805", 0xd44, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xf}, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x3f, 0xde2, 0x0, 0x166a}, {"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"}}}}}}}}, 0x0) 713.478195ms ago: executing program 7 (id=3176): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x3, '\x00', @data=0x7, 0x40}, {0xa, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x2}, {0x2, @svalue=0xa}, {0x0, @svalue=0xee}]}, 0x7b3}, {0x1a, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}, {0x1e, '\x00', @data=0x4d55, 0x745}, {0x38, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}, {0x2b, '\x00', @data=0x4, 0xbd}, {0x32, '\x00', @buffer={"36a4a4255f9fb936e2c4f2de7e5e3ad7880ad29ce682ab12e13758f94ea4656b", 0x20}, 0x3034}, {0x2e, '\x00', @data=0x9, 0x9}, {0x3a, '\x00', @data=0x8, 0x10000}]}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000340)="4700000001003f", 0x7) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000e0c0)={0xb74, 0x80000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x42, 0x0, 0x0, 0x0, 0x3fa30de9458b02ea}, 0x28) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3fffffffffffff7c, &(0x7f00000001c0), &(0x7f00000001c0)=[0x9, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x7}) (async, rerun: 64) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x12}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000003c0)=r10, 0x4) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c1069e2f8bef0966217cc0818f6c6e43176596129dddeef842dfe47f09b1c", @ANYRES16=r11, @ANYBLOB="040029bd7000fbdbdf251200000008003a00070000000800320001000000050029000100000008002b000200000008003c000900000005003700010000000600280002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='/'], 0x20) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x4, 0x1, 'queue0\x00', 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 661.013374ms ago: executing program 7 (id=3178): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180090006006e6f6e65000000000800090000000000080005000000000008c8bf5970aa68c1678a08000c000600000008000b0073697000060000000a0000000c00"], 0x58}}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0xee, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = getpid() (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x20) syz_pidfd_open(r4, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x400100, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0xe]}, &(0x7f0000000300)=0x6) (async) read$FUSE(r8, &(0x7f0000001280)={0x2020}, 0x2020) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @loopback, 0x80000001}, 0x1c) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25, 0x0, 0x3f}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044001}, 0x30) 660.298451ms ago: executing program 5 (id=3179): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r1, 0x29, 0x8e688f0447a7e7d2, &(0x7f00000001c0)="71ed0e4dc2cacceffd79462d49ca7d5833d7114052e5a077c9b181ef03fb899d4a3d45d8265e57ac1e85b95b8a7baabfed53113ecff3f34782ca01d30705075323d61ceb698a1a66ccd969e0586434991ae5223c36b80b6af25b64f166d4dbc3853a2491a53a2ed26d59d898a3e4ba839a270a64eba89f3b2b2d118b2bb4b1dd1b1809738e37365d5bcbb24ef638a7c16264f560cf0d9eda371d3efa404f653a7c1fbb9d49e3c3abe413b353143f351cfa93cd12ec955dfddd86e3067d085d835250d6319247ab93d29102adc36be305", 0xd0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getpeername$netlink(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x400000, 0x4e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) chdir(&(0x7f0000000500)='./file0\x00') ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000540)) r6 = socket$kcm(0x29, 0x8, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0xfffffffffffffffe, 0x3}]}) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000600)={0x5, 0x5, 0xa}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x6000) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000740)=0x8, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8014}, 0x24000001) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x500010c0}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x3f9, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4904}, 0x40800) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000a80), r2) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044084}, 0x4000014) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000b80)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "a53a329ba4ed79"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001b80)={{0x0, 0x400, 0xfff, 0x2, 0x10000, 0x1000, 0x0, 0x7, 0x7166, 0x94, 0x1, 0x6, 0xafc, 0x1, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002b80)={r10, r11, "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", "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"}) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000003b80)={0x1, 0x9, 0x2, 0xfff9}, 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003c80), r7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x44, r12, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 582.597472ms ago: executing program 7 (id=3180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008050}, 0x2400c017) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@loopback, @dev, 0x0}, &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x880) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8001, 0x34}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8088}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000800), r6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x22001401}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r10, 0xc00, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c054}, 0x4008050) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001980)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000000a00)={0xf20, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6dd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5f32}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}]}]}, @NL80211_ATTR_TID_CONFIG={0x178, 0x11d, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x6, 0x6, 0xa, 0x40, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x3}, {0x2, 0x3}, {0x6, 0x2}, {0x1}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x7}, {0x0, 0x1}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0xa}, {0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x2, 0x7}, {}, {0x7, 0xa}, {0x1, 0x7}, {0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0x1, 0x9, 0x8, 0x7, 0x5a3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xff81, 0x4, 0x7, 0xfffb, 0x81, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x6}, {0x4, 0x3}, {0x1}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x6}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x13}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x27c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x5, 0x6, 0x1, 0x4, 0x1, 0x60, 0xb, 0x6, 0x60, 0x24, 0x48, 0x36, 0x18, 0x1e, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b8, 0x101, 0xffff, 0x8, 0xfff, 0x80, 0xe6, 0x6]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x5, 0x30, 0x48, 0x4, 0x0, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x39, 0x2, 0x36, 0xb, 0x60, 0x1b, 0x1, 0xb, 0x36, 0x1b, 0xb, 0x12, 0x18, 0x9, 0x60, 0x30, 0x18, 0x42, 0x60, 0x0, 0x9]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x6}, {0x2, 0x8}, {0x6, 0x4}, {0x6, 0x2}, {0x3}, {0x3, 0x9}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0x7}, {0x3, 0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x7, 0x2}, {0x4, 0x4}, {0x7}, {0x6, 0x3}, {0x6, 0x2}, {0x6, 0x3}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x30, 0x1, 0x28, 0x4, 0xc, 0x72, 0x60, 0x24, 0x9, 0x5, 0x27a11399c3c78263, 0xc, 0x6, 0xc]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xa, 0x2, 0x66, 0x16, 0x48, 0x48, 0x31, 0x5, 0x1b, 0x3, 0x4, 0x1b, 0x60, 0xc, 0x4, 0x6, 0x68, 0x24, 0xc, 0x3, 0x48, 0x48, 0x60, 0x24, 0xc, 0x5, 0xb, 0x1, 0x53, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x16, 0x1, 0x16, 0xc, 0x60, 0x6, 0x5, 0x48, 0x4, 0x6c, 0xc, 0x6, 0x1b, 0x12, 0x4, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x5359, 0x4, 0x7, 0x5, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x6, 0x7, 0x4, 0x3, 0xc276, 0x0, 0xfff]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x29f9, 0x0, 0x0, 0xffff, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x19}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x3, 0xfff, 0x4, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xc000, 0x6cca, 0xc1, 0xcc9, 0xb291, 0x7]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x3}, {0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x6, 0x16, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x60, 0xb, 0x0, 0xc, 0x36, 0x18, 0x30, 0x1, 0x5, 0x18]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}]}]}, @NL80211_ATTR_TID_CONFIG={0x278, 0x11d, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4}, {0x3}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x8}, {0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x48, 0x1b, 0x60, 0x48, 0x9, 0x3, 0x16, 0x1b, 0x1, 0x1, 0x1b, 0x36, 0x0, 0x33, 0x12, 0x24, 0x60, 0x3, 0x6c, 0x18, 0x12, 0x1b, 0x6, 0x5e, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0x7ff, 0x6, 0x8, 0x3, 0x40, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x8}, {0x6, 0x6}, {}, {0x0, 0x6}, {0x1}, {0x1, 0x9}, {0x7}, {0x4, 0xa}, {0x0, 0x18}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x1}, {0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x3}, {0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x1}, {0x1, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2538, 0x3, 0xa, 0x1ff, 0x2, 0x6, 0x9bd, 0xed]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x0, 0xa, 0x3, 0x4, 0x6, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x24, 0x6c, 0x16, 0xc, 0x16, 0x60, 0x3, 0xb, 0x18, 0x3, 0x1, 0x18, 0x36, 0x36, 0x6c, 0x1f, 0x30, 0x48, 0x9, 0x3, 0x36, 0xa, 0x24, 0xb, 0x36, 0x1b, 0x48, 0x1, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbf9b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xbf, 0x6, 0x6, 0x3db, 0x0, 0x401, 0xe5]}}]}, @NL80211_BAND_2GHZ={0x4}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}]}]}, @NL80211_ATTR_TID_CONFIG={0x6fc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4e31, 0x5, 0x97, 0x3, 0xc, 0x8, 0xe]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3d5cfcf2f9ed7444, 0x4, 0x1, 0x0, 0x47, 0x24, 0x3, 0x18, 0xb, 0x60, 0x36, 0x6c, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x9, 0x12, 0x30, 0x16, 0xb, 0xd, 0x3, 0x4, 0xb, 0x2, 0x5, 0x3, 0x0, 0x16, 0x1, 0x9, 0x5, 0x3, 0x1b, 0x4, 0x1b, 0x36, 0x60, 0x5, 0x16, 0x14, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb0c3, 0x5, 0xfffb, 0x5, 0x40, 0x0, 0x73]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0xa, 0x3, 0x6, 0x101, 0xe, 0x2e]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x56ce, 0x455, 0x6, 0x200, 0xfffa, 0xb, 0xfffc, 0x759]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x3, 0x8000, 0x800, 0x3, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x1, 0x1, 0x0, 0x1b, 0x3, 0x2, 0x1, 0x4, 0x1, 0x18, 0x0, 0x1, 0x1b, 0x1b, 0x12, 0x48, 0x9, 0x48, 0x2, 0x16, 0x30, 0x12, 0x2, 0x1, 0x9, 0xb, 0x4, 0x30]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x4}, {0x2, 0x2}, {}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x2}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0xc, 0x2, 0x18, 0x16, 0xa, 0x3c, 0x4, 0x16, 0x1, 0x2, 0xb, 0x48, 0xc, 0x48, 0x30, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x36, 0x9, 0x48, 0x1a, 0x1b, 0x1, 0x30, 0x24, 0x9, 0x18, 0x24, 0x5, 0x1b, 0x2, 0x1b, 0x36, 0x9, 0x4, 0x48, 0xc, 0xb, 0x4, 0x16, 0x16, 0x16, 0x1, 0x5, 0x0, 0x48, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0xb, 0x60, 0x3, 0x4, 0x9, 0x0, 0x9, 0x2, 0xb, 0x60, 0x6, 0x24, 0x6c, 0x3, 0x6, 0x18, 0x5, 0x48, 0x1, 0x5, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x5b96, 0xfa, 0xe71, 0xff, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3d78, 0x5, 0x0, 0x6, 0xb, 0xcb, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x18, 0x6c, 0x12, 0x30, 0x1b, 0x3, 0x3, 0x4, 0x30, 0x6c, 0x9, 0x4, 0x9, 0x18, 0x6793923780235a65]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xb, 0x1b, 0x36, 0x12, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x36, 0x16, 0xb, 0x6c, 0xd8, 0x3, 0x12, 0x1, 0x30, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ee3, 0x9, 0x73, 0x6, 0xffff, 0x3ff, 0xffff, 0x71a0]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x12, 0x36, 0x9, 0x6c, 0x60, 0x48, 0xb, 0x24, 0x2, 0x16, 0x3, 0xc76ec298b0c4c6a8, 0x60, 0x20]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xde80}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}]}, {0x3c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x374, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x105, 0x401, 0x4, 0x1, 0x4, 0x41d5, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa29, 0x76ee, 0x4, 0x3e40, 0x6, 0x200, 0x41d7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x72, 0x2, 0xfff, 0x3e, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3ff, 0x40, 0x9, 0x8, 0xc3, 0x23a, 0x9]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x4}, {0x5}, {0x7, 0x2}, {0x1}, {0x2, 0x4}, {0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0xa}, {0x1}, {0x4, 0xa}, {0x2, 0x2}, {0x2, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8795, 0xa, 0x3, 0x6fdf, 0x0, 0x8, 0xfff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xfffc, 0x0, 0x3, 0x3, 0x0, 0x7]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x5}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x4, 0x2, 0x2, 0x2, 0xfff8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0xa}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x7}, {0x6, 0x1}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xec60, 0x7, 0x5, 0x200, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd18, 0x5, 0xc, 0x4, 0x7, 0x442, 0x200]}}]}, @NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x2, 0x2, 0xb27, 0x7, 0xc, 0x6]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x4, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x6}, {0x7, 0x6}, {0x3, 0x5}, {0x5}, {0x1}, {0x6, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x6, 0xffda, 0x4, 0x0, 0xf7fd, 0x4, 0x4]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0x6}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {}, {0x3, 0x8}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x3}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x8}, {0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x6}, {0x3, 0x4}, {}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x1, 0x2, 0x9, 0x9b2, 0xfffe, 0xc3, 0x2]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x2bd9, 0x3ff, 0x2, 0x9, 0x40, 0xfe01, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x60, 0x1, 0x6, 0x5, 0x16, 0x12, 0x12, 0x73, 0x9, 0x2, 0x12, 0x30, 0x16, 0x1b, 0x18, 0x4, 0x36, 0x16, 0x3, 0x6c, 0x4, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x8000, 0x5, 0x7, 0xb, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0x9}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x1}, {0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x7, 0x6}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe56}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffff7b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0xf20}}, 0x4001) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000019c0), 0x40882, 0x0) ppoll(&(0x7f0000001a00)=[{r11, 0x6000}, {r6, 0x400}, {r6, 0x4}, {r6, 0x220}, {r6, 0x4}], 0x5, &(0x7f0000001a40)={0x77359400}, &(0x7f0000001a80)={[0x7]}, 0x8) chdir(&(0x7f0000001ac0)='./file0\x00') chdir(&(0x7f0000001b00)='./file0\x00') r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, r12, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r8, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x11) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001e80), 0x8040, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001ec0)={0x0, 0xffffffff}, &(0x7f0000001f00)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000001f40)={r14, 0x4, 0x7, 0x1ff}, 0x10) 581.575678ms ago: executing program 5 (id=3181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f00000000c0)="6c2b4aeadd1f66b8083d09c4aac83db8", 0x10, 0x0, 0x0, 0x2}]) sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8040}], 0x1, 0x200080d0) 493.684544ms ago: executing program 7 (id=3182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x61, 0x0, 0x1, @mcast1, @mcast2, {[], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c04"}}}, 0x97) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 491.27228ms ago: executing program 2 (id=3183): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x1400, 0x0) 443.750335ms ago: executing program 5 (id=3184): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a883, 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed4, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000280)=[0x7], 0x1, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66b8d9000f00d0430f01c966b8c2008ec8364f0fc75d033e0f1c604bb93e080000b861470000ba000000000f306766460f60f266ba4000b8b55e0000ef44dee0f30f01e8", 0x44}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESDEC=r2, @ANYBLOB="20003300d00000000800000108021100000050505050505000000800ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0x8}) 443.509934ms ago: executing program 2 (id=3185): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, {0x4}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$midi(r1, 0x0, 0x0) 342.332773ms ago: executing program 4 (id=3186): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@private=0xa010100, @local, 0x1, 0x5, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @loopback]}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x200440d4) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)="e585f1baee08a42b9e6228ffd3bf0ee9f8c16ecf60b79fb43042c5d3de4442ca96e217a7d0e90360bc0514b95291455a8fe81a3aaf4664df5aead20800f7dce54225f27cb33ae2228e0a9b36def9bae55dea4bd0c3e96d503f4f7939e924348c6bd548520841116febe2c1790657b3ca0cc8742356bd204ed7199f5227dd4a8e3780b115d5e47c31a2f8b72e2f8e5aa19bfb4eed82b20dfcd4ece05e50ebe633c3207656d2b5269c47b54cee", 0xac) sendmmsg$inet(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000020c0)="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", 0x1004}, {&(0x7f0000001940)="d0", 0x1}, {&(0x7f0000000180)="a0e56e1eed570622491b57f5eae58de3c84c59ac59dab25b1d34abcf7aacd353120c292c2a7d053c00c37ec21ce16cd41bee7be69468e8a495d4d6654aff27e569fbb8da2d62df13960678a021c36e0b0f06b3c0b472e46a83c36ed50f2afb3fd2d1d5b230b2106050d3c0c95023892d6f247f2303b709fd5782770241ea4c69a8d1b2ed2e8edf98ecf79a07990ff4c688d7ddeade1ad7cd1d11a783ea9a534100af9faefaa268b3547c6619b517e487e9ba5fdcecfc35061562bc0a43b56efe981fe1180e6b15a29d88bcd666ff5e1cdef3b05719a68cc926942cd15591821872b969f0d80cf3f0576f8deb7e22", 0xee}], 0x3}}], 0x1, 0x4008440) 341.563011ms ago: executing program 2 (id=3187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000100)=[{r2, 0x4}], 0x1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000001000000100000000200fdb5070000000000bc0e00000000002a0dec332be228d31954d2238900000e0000f68cf4aa93bc21e6af795c750c40f59372d7f4dc2c9672c26860"], 0x0, 0x2a, 0x0, 0x1}, 0x28) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'geneve0\x00', &(0x7f0000000600)=@ethtool_dump={0x40, 0x8cc, 0x4}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 283.700158ms ago: executing program 7 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000540)={0x0, 0x0, 0x1, [0xe, 0x7, 0x3, 0x5, 0xfffffffffffffffb], [0x63, 0x8, 0x100000001, 0x6, 0x528e, 0x7, 0x8e2, 0xa2a, 0x6, 0xffffffffffffe377, 0x5, 0x10000, 0xfffffffffffffc00, 0xf, 0x4b, 0x2, 0x2, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000001, 0x80, 0x5, 0x3, 0x0, 0x9, 0x9, 0x8, 0x2, 0xda, 0x0, 0x7, 0x9, 0x10001, 0xffffffff, 0x100000000, 0x5, 0x1000, 0x9, 0x3, 0xd, 0x4, 0xfffffffffffffff8, 0x6, 0x9, 0x5, 0x3, 0x4, 0x77, 0x3, 0x9, 0xadf, 0xfffffffffffffff9, 0x9, 0x9a, 0xffffffffffffffff, 0xffff, 0xfffffffffffffff8, 0xd51, 0xd, 0x7fffffff, 0x5, 0x6, 0x5, 0x7, 0x17, 0x100000001, 0x8, 0x5a, 0x4, 0x6, 0x4, 0x4, 0xed, 0x7bff, 0x7ff, 0x2, 0xffff, 0x4, 0x7, 0x100, 0x0, 0x7, 0x8, 0x6f83, 0x6, 0xffffffffffffff39, 0xff, 0x2, 0x5, 0x1000, 0x7, 0xa2a, 0xd, 0x0, 0x7ff, 0x3, 0xdeaf, 0x1, 0x7, 0x7, 0xfffffffffffffff9, 0x66, 0x40, 0x5b2, 0xf, 0xc24d, 0xf526, 0xffffffffffffa198, 0x0, 0xf6c, 0xfffffffffffff001, 0xd, 0x74e00, 0x2, 0x8, 0x708c, 0xc, 0x5, 0x4]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x0, 0xfffffffffffffffe, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) 283.412802ms ago: executing program 4 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0x800000001780}, {0x10, 0x0, 0x8}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x81, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8}}, @TCA_CT_ZONE={0x6, 0x4, 0x2e4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) 283.120918ms ago: executing program 7 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) syz_pidfd_open(r2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @empty, 0x8}, 0x1c) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0x2, 0x9, 0xfffffffffffffff8, r2}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 193.910745ms ago: executing program 5 (id=3191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x1f, 0x0, &(0x7f0000000fc0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000024c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05080000000800030010f0428a0c819771fb9d4f626026cb3841a14f52e903d9a121415537e12c0aa55c6040fe44316a57e72f7f9c610a4f9e768d8f4a3c80a575289e4afb869678247acfde1daa42588a7fbe10d5334aee71dd98ac363a7ca8", @ANYRES32=r7, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x1f, 0x0, &(0x7f0000000fc0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000024c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05080000000800030010f0428a0c819771fb9d4f626026cb3841a14f52e903d9a121415537e12c0aa55c6040fe44316a57e72f7f9c610a4f9e768d8f4a3c80a575289e4afb869678247acfde1daa42588a7fbe10d5334aee71dd98ac363a7ca8", @ANYRES32=r7, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) (async) 90.774912ms ago: executing program 4 (id=3192): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000002040)='/proc/self/clear_refs\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3fffff) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) openat(r1, &(0x7f0000000100)='./file0\x00', 0x400, 0x82) syz_clone(0x81002000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000918000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000595000/0x1000)=nil, &(0x7f0000919000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fcntl$setstatus(r3, 0x4, 0x800) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040)) write$nci(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="4f2401"], 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[], 0x0) 4.322641ms ago: executing program 5 (id=3193): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac141410e00000010000000018000000000000000000000007"], 0x38}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 4.038442ms ago: executing program 5 (id=3194): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x1, 0x8000000000000000, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=3195): syz_usb_disconnect(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r1, 0x0, 0x4d) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x24000810) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.5.2677'. [ 339.756171][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2677'. [ 339.762186][T14924] netlink: 'syz.5.2677': attribute type 21 has an invalid length. [ 339.764596][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2677'. [ 340.141495][ T9706] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 340.311591][ T9706] usb 10-1: Using ep0 maxpacket: 32 [ 340.316823][ T9706] usb 10-1: unable to get BOS descriptor or descriptor too short [ 340.321037][ T9706] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 340.324469][ T9706] usb 10-1: config 8 has no interface number 0 [ 340.327063][ T9706] usb 10-1: config 8 interface 188 has no altsetting 0 [ 340.332979][ T9706] usb 10-1: string descriptor 0 read error: -22 [ 340.336126][ T9706] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 340.339841][ T9706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.350396][ T9706] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 340.353798][ T9706] dw2102: su3000_power_ctrl: 1, initialized 0 [ 340.356718][ T9706] dvb-usb: bulk message failed: -22 (2/0) [ 340.370994][ T9706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.375480][ T9706] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 340.378934][ T9706] usb 10-1: media controller created [ 340.381167][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.383819][ T9706] dw2102: i2c transfer failed. [ 340.385998][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.388269][ T9706] dw2102: i2c transfer failed. [ 340.390213][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.393758][ T9706] dw2102: i2c transfer failed. [ 340.396817][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.399115][ T9706] dw2102: i2c transfer failed. [ 340.401937][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.404266][ T9706] dw2102: i2c transfer failed. [ 340.406863][ T9706] dvb-usb: bulk message failed: -22 (6/0) [ 340.407396][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2682'. [ 340.409928][ T9706] dw2102: i2c transfer failed. [ 340.414292][ T9706] dvb-usb: MAC address: 02:02:02:02:02:02 [ 340.419839][T14945] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 340.423730][T14944] xt_HMARK: spi-set and port-set can't be combined [ 340.431869][ T9706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.443575][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 340.443587][ T41] audit: type=1400 audit(1781400825.757:5170): avc: denied { watch } for pid=14943 comm="syz.6.2682" path="/378/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 340.450839][ T9706] dvb-usb: bulk message failed: -22 (3/0) [ 340.455947][ T9706] dw2102: command 0x0e transfer failed. [ 340.460040][ T9706] dvb-usb: bulk message failed: -22 (3/0) [ 340.462091][ T9706] dw2102: command 0x0e transfer failed. [ 340.543537][T14913] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 340.588657][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 340.666950][ T41] audit: type=1400 audit(1781400825.977:5171): avc: denied { watch_mount } for pid=14964 comm="syz.6.2688" path="/380" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 340.680573][T14971] set match dimension is over the limit! [ 340.717635][T14973] netlink: 'syz.2.2691': attribute type 1 has an invalid length. [ 340.720857][T14975] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 340.773358][ T9706] dvb-usb: bulk message failed: -22 (3/0) [ 340.775992][ T9706] dw2102: command 0x0e transfer failed. [ 340.777690][ T9706] dvb-usb: bulk message failed: -22 (3/0) [ 340.779506][ T41] audit: type=1400 audit(1781400826.087:5172): avc: denied { mounton } for pid=14979 comm="syz.4.2694" path="/bus" dev="hugetlbfs" ino=71033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 340.779885][T14980] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 340.786407][ T9706] dw2102: command 0x0e transfer failed. [ 340.790425][T14980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.794982][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 340.795214][T14980] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 340.796726][ T9706] dw2102: command 0x51 transfer failed. [ 340.799962][T14980] overlayfs: maximum fs stacking depth exceeded [ 340.803278][T14931] dvb-usb: bulk message failed: -22 (4/0) [ 340.816727][T14931] dw2102: i2c transfer failed. [ 340.827622][ T9706] DVB: Unable to find symbol ds3000_attach() [ 340.829485][ T9706] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 340.889361][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 340.900353][T14992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 340.901462][ T9706] rc_core: IR keymap rc-su3000 not found [ 340.905055][ T9706] Registered IR keymap rc-empty [ 340.907936][ T9706] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 340.925686][ T9706] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input28 [ 340.932978][ T9706] dvb-usb: schedule remote query interval to 150 msecs. [ 340.938206][ T9706] dw2102: su3000_power_ctrl: 0, initialized 1 [ 340.940124][ T9706] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 341.012135][T15006] xt_hashlimit: size too large, truncated to 1048576 [ 341.048561][T15009] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'. [ 341.097799][T15014] netlink: 'syz.6.2704': attribute type 2 has an invalid length. [ 341.103208][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 341.105897][ T9] dw2102: i2c transfer failed. [ 341.281851][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 341.286107][ T9] dw2102: i2c transfer failed. [ 341.305519][ T41] audit: type=1804 audit(1781400826.617:5173): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2707" name="/newroot/588/file1" dev="fuse" ino=1 res=1 errno=0 [ 341.318065][ T41] audit: type=1800 audit(1781400826.617:5174): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2707" name="/" dev="fuse" ino=1 res=0 errno=0 [ 341.330634][ T41] audit: type=1800 audit(1781400826.627:5175): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2707" name="/" dev="fuse" ino=1 res=0 errno=0 [ 341.437456][T15031] program syz.4.2709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.451876][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 341.454999][ T9] dw2102: i2c transfer failed. [ 341.496843][T15038] syzkaller0: entered promiscuous mode [ 341.499251][T15038] syzkaller0: entered allmulticast mode [ 341.524652][T15038] bond6: entered promiscuous mode [ 341.621532][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 341.626021][ T9706] dw2102: i2c transfer failed. [ 341.666723][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 341.669478][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 341.781546][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 341.783526][ T9706] dw2102: i2c transfer failed. [ 341.941805][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 341.943597][ T9706] dw2102: i2c transfer failed. [ 341.964255][T15050] netlink: 'syz.6.2715': attribute type 2 has an invalid length. [ 341.966936][T15050] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 341.971971][ T41] audit: type=1400 audit(1781400827.277:5176): avc: denied { listen } for pid=15049 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 341.972624][T15051] netlink: 'syz.6.2715': attribute type 2 has an invalid length. [ 341.985617][T15051] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 342.032711][ T41] audit: type=1400 audit(1781400827.347:5177): avc: denied { getopt } for pid=15054 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 342.103212][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 342.105655][ T9706] dw2102: i2c transfer failed. [ 342.262412][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 342.264278][ T9706] dw2102: i2c transfer failed. [ 342.424975][ T9706] dvb-usb: bulk message failed: -22 (1/0) [ 342.426806][ T9706] dw2102: i2c transfer failed. [ 342.593744][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 342.595749][ T9] dw2102: i2c transfer failed. [ 342.751540][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 342.753433][ T9] dw2102: i2c transfer failed. [ 342.891003][ T2988] usb 10-1: USB disconnect, device number 18 [ 342.922074][ T2988] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 343.016769][T15113] netlink: 'syz.5.2720': attribute type 32 has an invalid length. [ 343.093385][T15123] ata1.00: invalid cdb length 6 [ 343.165596][T15127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 343.245210][ T5747] Bluetooth: hci1: ACL packet for unknown connection handle 6 [ 343.314912][T15138] 9p: Bad value for 'wfdno' [ 343.377317][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 343.430040][T15148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2728'. [ 343.587513][ T41] audit: type=1400 audit(1781400828.897:5178): avc: denied { bind } for pid=15151 comm="syz.6.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 343.726310][T15156] tmpfs: Bad value for 'mpol' [ 344.091477][ T5890] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 344.251547][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 344.255603][ T5890] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.257126][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2738'. [ 344.258867][ T5890] usb 9-1: config 0 has no interface number 0 [ 344.261842][T15173] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2738'. [ 344.264305][ T5890] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.271531][ T5890] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 344.276155][ T5890] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.280438][ T5890] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.286208][ T5890] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.289912][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.297055][ T5890] usb 9-1: config 0 descriptor?? [ 344.305594][ T5890] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 344.445294][ T44] nci: nci_rsp_packet: unsupported rsp opcode 0xf24 [ 344.558448][ T39] usb 9-1: USB disconnect, device number 36 [ 344.558553][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 344.566457][ T39] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 344.681486][ T5741] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 344.689392][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'. [ 344.811576][ T5741] usb 10-1: device descriptor read/64, error -71 [ 345.051548][ T5741] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 345.181606][ T5741] usb 10-1: device descriptor read/64, error -71 [ 345.292138][ T5741] usb usb10-port1: attempt power cycle [ 345.641600][ T5741] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 345.662940][ T5741] usb 10-1: device descriptor read/8, error -71 [ 345.701530][ T5890] usb 11-1: new low-speed USB device number 25 using dummy_hcd [ 345.723790][ T41] audit: type=1400 audit(1781400831.037:5179): avc: denied { write } for pid=15221 comm="syz.2.2751" path="socket:[71902]" dev="sockfs" ino=71902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 345.853397][ T5890] usb 11-1: unable to get BOS descriptor or descriptor too short [ 345.857547][ T5890] usb 11-1: config 8 has an invalid interface number: 198 but max is 0 [ 345.860953][ T5890] usb 11-1: config 8 has no interface number 0 [ 345.864186][ T5890] usb 11-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 345.871196][ T5890] usb 11-1: string descriptor 0 read error: -22 [ 345.873970][ T5890] usb 11-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 345.877695][ T5890] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.884823][T15212] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.921495][ T5741] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 345.942897][ T5741] usb 10-1: device descriptor read/8, error -71 [ 346.052526][ T5741] usb usb10-port1: unable to enumerate USB device [ 346.100846][ T5890] usb 11-1: USB disconnect, device number 25 [ 346.951535][ T9] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 347.081509][ T9] usb 11-1: device descriptor read/64, error -71 [ 347.341555][ T9] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 347.381153][T15181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.419386][T15238] Failed to get privilege flags for destination (handle=0x2:0x5) [ 347.454792][T15242] netlink: 'syz.5.2757': attribute type 1 has an invalid length. [ 347.461594][T15242] syz.5.2757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.468731][T15242] CPU: 2 UID: 0 PID: 15242 Comm: syz.5.2757 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.468762][T15242] Tainted: [L]=SOFTLOCKUP [ 347.468767][T15242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.468777][T15242] Call Trace: [ 347.468783][T15242] [ 347.468789][T15242] dump_stack_lvl+0x100/0x190 [ 347.468821][T15242] warn_alloc.cold+0x95/0x1c1 [ 347.468838][T15242] ? __pfx_warn_alloc+0x10/0x10 [ 347.468867][T15242] ? stack_depot_save_flags+0x27/0x9d0 [ 347.468903][T15242] ? __lock_acquire+0x4a5/0x2630 [ 347.468930][T15242] ? xskq_create+0xfb/0x1d0 [ 347.468958][T15242] __vmalloc_node_range_noprof+0x136c/0x1630 [ 347.468986][T15242] ? xskq_create+0xfb/0x1d0 [ 347.469008][T15242] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.469039][T15242] ? xskq_create+0xfb/0x1d0 [ 347.469060][T15242] vmalloc_user_noprof+0x9e/0xe0 [ 347.469082][T15242] ? xskq_create+0xfb/0x1d0 [ 347.469100][T15242] xskq_create+0xfb/0x1d0 [ 347.469120][T15242] xsk_setsockopt+0x743/0xab0 [ 347.469136][T15242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.469152][T15242] ? find_held_lock+0x2b/0x80 [ 347.469165][T15242] ? __fget_files+0x215/0x3d0 [ 347.469187][T15242] ? selinux_socket_setsockopt+0x6a/0x80 [ 347.469214][T15242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.469235][T15242] do_sock_setsockopt+0xf3/0x1d0 [ 347.469255][T15242] __sys_setsockopt+0x195/0x220 [ 347.469283][T15242] __x64_sys_setsockopt+0xbd/0x160 [ 347.469304][T15242] ? do_syscall_64+0x90/0x870 [ 347.469324][T15242] ? lockdep_hardirqs_on+0x78/0x100 [ 347.469344][T15242] do_syscall_64+0x115/0x870 [ 347.469382][T15242] ? clear_bhb_loop+0x40/0x90 [ 347.469403][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.469419][T15242] RIP: 0033:0x7fd30e79ce59 [ 347.469432][T15242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.469447][T15242] RSP: 002b:00007fd30c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.469462][T15242] RAX: ffffffffffffffda RBX: 00007fd30ea15fa0 RCX: 00007fd30e79ce59 [ 347.469472][T15242] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 347.469481][T15242] RBP: 00007fd30e832d6f R08: 0000000000000004 R09: 0000000000000000 [ 347.469490][T15242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.469501][T15242] R13: 00007fd30ea16038 R14: 00007fd30ea15fa0 R15: 00007fff6c9909b8 [ 347.469526][T15242] [ 347.469574][T15242] Mem-Info: [ 347.481991][ T9] usb 11-1: device descriptor read/64, error -71 [ 347.483155][T15242] active_anon:34989 inactive_anon:7579 isolated_anon:0 [ 347.483155][T15242] active_file:15158 inactive_file:12287 isolated_file:0 [ 347.483155][T15242] unevictable:1768 dirty:23 writeback:0 [ 347.483155][T15242] slab_reclaimable:8121 slab_unreclaimable:85718 [ 347.483155][T15242] mapped:23315 shmem:35071 pagetables:4123 [ 347.483155][T15242] sec_pagetables:303 bounce:0 [ 347.483155][T15242] kernel_misc_reclaimable:0 [ 347.483155][T15242] free:439173 free_pcp:3985 free_cma:0 [ 347.499157][T15244] __nla_validate_parse: 1 callbacks suppressed [ 347.499168][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 347.501174][T15242] Node 0 active_anon:138004kB inactive_anon:30316kB active_file:34696kB inactive_file:48492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76356kB dirty:92kB writeback:0kB shmem:136560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:15456kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.519784][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 347.521288][T15242] Node 1 active_anon:2076kB inactive_anon:0kB active_file:25936kB inactive_file:656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17152kB dirty:0kB writeback:0kB shmem:3724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:1036kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.555391][T15251] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 347.556232][T15242] Node 0 [ 347.560361][ T41] audit: type=1400 audit(1781400832.867:5180): avc: denied { relabelto } for pid=15250 comm="syz.4.2759" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 347.562998][T15242] DMA free:9192kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.565584][ T41] audit: type=1400 audit(1781400832.867:5181): avc: denied { associate } for pid=15250 comm="syz.4.2759" name="kvm" dev="devtmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ping_exec_t:s0" [ 347.566481][T15242] lowmem_reserve[]: [ 347.568574][ T41] audit: type=1400 audit(1781400832.877:5182): avc: denied { ioctl } for pid=15250 comm="syz.4.2759" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 347.581099][T15242] 0 1231 1231 1231 1231 [ 347.581125][T15242] Node 0 DMA32 free:160768kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:137880kB inactive_anon:30316kB active_file:34696kB inactive_file:48492kB unevictable:3536kB writepending:92kB zspages:0kB present:2080628kB managed:1261088kB mlocked:0kB bounce:0kB free_pcp:17232kB local_pcp:2676kB free_cma:0kB [ 347.581159][T15242] lowmem_reserve[]: 0 0 0 0 0 [ 347.581180][T15242] Node 1 Normal free:1586356kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2076kB inactive_anon:0kB active_file:25936kB inactive_file:656kB unevictable:3536kB writepending:0kB zspages:5240kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.581212][T15242] lowmem_reserve[]: 0 0 0 0 0 [ 347.581233][T15242] Node 0 DMA: 6*4kB (UM) 6*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 9192kB [ 347.581322][T15242] Node 0 DMA32: 1009*4kB (UM) 1987*8kB (UME) 1470*16kB (UME) 461*32kB (UME) 368*64kB (UME) 152*128kB (UME) 82*256kB (UM) 61*512kB (UM) 7*1024kB (M) 0*2048kB 0*4096kB = 160604kB [ 347.581481][T15242] Node 1 Normal: 274*4kB (UM) 287*8kB (UM) 253*16kB (UME) 254*32kB (UME) 253*64kB (UME) 226*128kB (UME) 186*256kB (UM) 159*512kB (UME) 136*1024kB (UME) 10*2048kB [ 347.587432][T15251] program syz.4.2759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.587838][T15252] program syz.4.2759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.596123][T15242] (UME) 302*4096kB (UM) = 1586448kB [ 347.596144][T15242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.596154][T15242] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 347.596163][T15242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.596171][T15242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 347.596180][T15242] 62660 total pagecache pages [ 347.596184][T15242] 148 pages in swap cache [ 347.596189][T15242] Free swap = 108696kB [ 347.596193][T15242] Total swap = 124996kB [ 347.596198][T15242] 1048443 pages RAM [ 347.596202][T15242] 0 pages HighMem/MovableOnly [ 347.596206][T15242] 283860 pages reserved [ 347.596210][T15242] 0 pages cma reserved [ 347.602464][ T9] usb usb11-port1: attempt power cycle [ 347.827379][ T41] audit: type=1400 audit(1781400833.137:5183): avc: denied { create } for pid=15257 comm="syz.4.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 347.875203][ T41] audit: type=1400 audit(1781400833.187:5184): avc: denied { write } for pid=15260 comm="syz.4.2762" name="/" dev="9p" ino=81526819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.884198][ T41] audit: type=1400 audit(1781400833.187:5185): avc: denied { write } for pid=15260 comm="syz.4.2762" name="/" dev="9p" ino=81526819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.892945][ T41] audit: type=1400 audit(1781400833.187:5186): avc: denied { rename } for pid=15260 comm="syz.4.2762" name="file0" dev="9p" ino=81526821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 347.902243][ T41] audit: type=1400 audit(1781400833.197:5187): avc: denied { write } for pid=15260 comm="syz.4.2762" name="/" dev="9p" ino=81526819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.071910][ T9] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 348.077251][ T41] audit: type=1400 audit(1781400833.387:5188): avc: denied { read } for pid=15268 comm="syz.4.2764" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 348.102236][ T9] usb 11-1: device descriptor read/8, error -71 [ 348.182552][ T91] nci: nci_rsp_packet: unsupported rsp opcode 0xf24 [ 348.183130][T15277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18242 sclass=netlink_route_socket pid=15277 comm=syz.4.2767 [ 348.354040][ T9] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 348.372191][ T9] usb 11-1: device descriptor read/8, error -71 [ 348.432669][ T9706] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 348.491816][ T9] usb usb11-port1: unable to enumerate USB device [ 348.561566][ T9706] usb 10-1: device descriptor read/64, error -71 [ 348.811474][ T9706] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 348.941498][ T9706] usb 10-1: device descriptor read/64, error -71 [ 349.052129][ T9706] usb usb10-port1: attempt power cycle [ 349.391474][ T9706] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 349.411863][ T9706] usb 10-1: device descriptor read/8, error -71 [ 349.651822][ T9706] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 349.672188][ T9706] usb 10-1: device descriptor read/8, error -71 [ 349.781608][ T9706] usb usb10-port1: unable to enumerate USB device [ 351.115091][T15272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.198915][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2779'. [ 351.248681][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2781'. [ 351.315408][T15338] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 351.328881][T15338] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 351.375947][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.376492][T15343] xt_hashlimit: size too large, truncated to 1048576 [ 351.378954][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.384266][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.387164][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.390087][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.393736][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 351.436463][T15346] fuse: Bad value for 'fd' [ 351.544868][T15354] 9p: Bad value for 'rfdno' [ 351.558547][T15304] nci: nci_rsp_packet: unsupported rsp opcode 0xf24 [ 351.601113][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 351.601123][ T41] audit: type=1326 audit(1781400836.907:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.6.2786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeddb9ce59 code=0x0 [ 351.801993][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 351.941498][ T9] usb 10-1: device descriptor read/64, error -71 [ 352.181581][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 352.331519][ T9] usb 10-1: device descriptor read/64, error -71 [ 352.441837][ T9] usb usb10-port1: attempt power cycle [ 352.791488][ T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 352.811945][ T9] usb 10-1: device descriptor read/8, error -71 [ 353.061591][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 353.082860][ T9] usb 10-1: device descriptor read/8, error -71 [ 353.191939][ T9] usb usb10-port1: unable to enumerate USB device [ 353.593097][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.598685][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.614444][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.620382][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.626221][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.958783][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.961020][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.964669][T15369] bridge_slave_0: entered allmulticast mode [ 353.967239][T15369] bridge_slave_0: entered promiscuous mode [ 353.970394][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.972744][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.974873][T15369] bridge_slave_1: entered allmulticast mode [ 353.977716][T15369] bridge_slave_1: entered promiscuous mode [ 353.992740][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.997092][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.012287][T15369] team0: Port device team_slave_0 added [ 354.015287][T15369] team0: Port device team_slave_1 added [ 354.028901][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.031072][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.038889][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.043248][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.045311][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.053031][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.087305][T15369] hsr_slave_0: entered promiscuous mode [ 354.090464][T15369] hsr_slave_1: entered promiscuous mode [ 354.093554][T15369] debugfs: 'hsr0' already exists in 'hsr' [ 354.095872][T15369] Cannot create hsr debugfs directory [ 354.203457][T15369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.207804][T15369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.210944][T15369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 354.300097][T15369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.303460][T15369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.307381][T15369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 354.402179][T15369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.406100][T15369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.410342][T15369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 354.500103][T15350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.503318][T15369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.507584][T15369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.512437][T15369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 354.559965][ T41] audit: type=1400 audit(1781400839.867:5192): avc: denied { associate } for pid=15388 comm="syz.4.2793" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 354.643481][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.753295][T15401] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 354.757393][T15401] __nla_validate_parse: 86 callbacks suppressed [ 354.757408][T15401] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2798'. [ 354.785703][T15399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15399 comm=syz.6.2797 [ 354.802221][ T5747] Bluetooth: hci2: Malformed Event: 0x02 [ 354.827938][T15369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.841189][T15369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.844381][T15369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.852560][T15369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.857126][T15369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.866775][T15369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.869777][T15369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.877068][T15369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.910168][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.912523][T15369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.914828][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.917101][T15369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.928941][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.934910][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.997116][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.008948][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.015512][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.018538][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.028607][T15324] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.031670][T15324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.069114][ T41] audit: type=1400 audit(1781400840.377:5193): avc: denied { write } for pid=15434 comm="syz.4.2807" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 355.096669][T15324] nci: nci_rsp_packet: unsupported rsp opcode 0xf24 [ 355.192971][T15435] kvm: kvm [15434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 355.196400][T15435] kvm: kvm [15434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 355.294275][ T41] audit: type=1400 audit(1781400840.607:5194): avc: denied { setattr } for pid=15451 comm="syz.6.2810" name="file0" dev="9p" ino=81526875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.321212][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.331563][ T8267] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 355.353441][T15369] veth0_vlan: entered promiscuous mode [ 355.359561][T15369] veth1_vlan: entered promiscuous mode [ 355.375095][T15369] veth0_macvtap: entered promiscuous mode [ 355.379502][T15369] veth1_macvtap: entered promiscuous mode [ 355.394798][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.405981][ T41] audit: type=1400 audit(1781400840.717:5195): avc: denied { write } for pid=15451 comm="syz.6.2810" name="/" dev="9p" ino=81526819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.407353][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.425977][T15313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.432288][T15313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.442015][T15313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.447534][T15313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.461975][ T8267] usb 10-1: device descriptor read/64, error -71 [ 355.482575][ T41] audit: type=1400 audit(1781400840.787:5196): avc: denied { mounton } for pid=15451 comm="syz.6.2810" path="/414/file0/file0" dev="9p" ino=81526875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.621731][T15463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2812'. [ 355.701932][ T8267] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 355.711653][ T5747] Bluetooth: hci3: command tx timeout [ 355.779757][T15471] netlink: 'syz.4.2814': attribute type 39 has an invalid length. [ 355.831547][ T8267] usb 10-1: device descriptor read/64, error -71 [ 355.941798][ T8267] usb usb10-port1: attempt power cycle [ 356.276707][T15475] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2815'. [ 356.281589][ T8267] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 356.302723][ T8267] usb 10-1: device descriptor read/8, error -71 [ 356.541838][ T8267] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 356.562322][ T8267] usb 10-1: device descriptor read/8, error -71 [ 356.673852][ T8267] usb usb10-port1: unable to enumerate USB device [ 357.791551][ T5747] Bluetooth: hci3: command tx timeout [ 357.935110][T15422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.988307][T15324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.996761][T15324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.034947][T15485] netlink: 'syz.6.2818': attribute type 7 has an invalid length. [ 358.036785][ T847] libceph: connect (1)[c::]:6789 error -101 [ 358.038612][T15485] netlink: 'syz.6.2818': attribute type 1 has an invalid length. [ 358.040057][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 358.051144][T15303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.053939][T15303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.066772][ T41] audit: type=1400 audit(1781400843.377:5197): avc: denied { mounton } for pid=15369 comm="syz-executor" path="/syzkaller.2oa0k3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 358.128841][T15491] syzkaller0: entered promiscuous mode [ 358.130612][T15491] syzkaller0: entered allmulticast mode [ 358.134914][T15479] ceph: No mds server is up or the cluster is laggy [ 358.198424][T15499] nbd: couldn't find device at index -2127233020 [ 358.202019][ T41] audit: type=1400 audit(1781400843.507:5198): avc: denied { append } for pid=15497 comm="syz.2.2823" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 358.257112][ T41] audit: type=1400 audit(1781400843.567:5199): avc: denied { name_bind 0x1000000 } for pid=15497 comm="syz.2.2823" path="socket:[72477]" dev="sockfs" ino=72477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 358.331481][ T5741] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 358.503555][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 358.507616][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.511537][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 358.515906][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 358.521336][ T5741] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 358.526038][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.529048][ T5741] usb 10-1: Product: syz [ 358.530888][ T5741] usb 10-1: Manufacturer: syz [ 358.532903][ T5741] usb 10-1: SerialNumber: syz [ 358.538247][ T5741] usb 10-1: config 0 descriptor?? [ 358.744428][ T5741] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 358.953854][T15489] netlink: 'syz.5.2819': attribute type 2 has an invalid length. [ 358.956588][T15489] netlink: 'syz.5.2819': attribute type 1 has an invalid length. [ 358.959519][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2819'. [ 358.966611][ T847] usb 10-1: USB disconnect, device number 35 [ 359.538380][ T5747] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 359.607028][T15515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.883756][ T5747] Bluetooth: hci3: command tx timeout [ 359.907597][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2829'. [ 359.976913][ T5747] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 360.064759][T15551] loop2: detected capacity change from 0 to 1 [ 360.073421][T15551] ldm_validate_privheads(): Disk read failed. [ 360.075550][T15551] Dev loop2: unable to read RDB block 1 [ 360.080144][T15551] loop2: unable to read partition table [ 360.083882][T15551] loop2: partition table beyond EOD, truncated [ 360.086526][T15551] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 360.110605][T15555] FAULT_INJECTION: forcing a failure. [ 360.110605][T15555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.116146][ T41] audit: type=1400 audit(1781400845.427:5200): avc: denied { mounton } for pid=15556 comm="syz.4.2836" path="/file0" dev="ramfs" ino=70604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 360.116904][T15555] CPU: 2 UID: 0 PID: 15555 Comm: syz.5.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.116928][T15555] Tainted: [L]=SOFTLOCKUP [ 360.116933][T15555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.116943][T15555] Call Trace: [ 360.116948][T15555] [ 360.116954][T15555] dump_stack_lvl+0x100/0x190 [ 360.116977][T15555] should_fail_ex.cold+0x5/0xa [ 360.116999][T15555] _copy_from_iter+0x1f4/0x1690 [ 360.117023][T15555] ? __asan_memset+0x23/0x50 [ 360.117047][T15555] ? __pfx__copy_from_iter+0x10/0x10 [ 360.117067][T15555] ? __pfx___alloc_skb+0x10/0x10 [ 360.117099][T15555] netlink_sendmsg+0x808/0xda0 [ 360.117122][T15555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.117140][T15555] ? __might_fault+0x40/0x140 [ 360.117172][T15555] ____sys_sendmsg+0x9e1/0xb70 [ 360.117190][T15555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.117212][T15555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.117240][T15555] ___sys_sendmsg+0x190/0x1e0 [ 360.117262][T15555] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.117308][T15555] __sys_sendmsg+0x170/0x220 [ 360.117331][T15555] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.117365][T15555] ? rcu_is_watching+0x12/0xc0 [ 360.117392][T15555] do_syscall_64+0x115/0x870 [ 360.117412][T15555] ? clear_bhb_loop+0x40/0x90 [ 360.117432][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.117448][T15555] RIP: 0033:0x7fd30e79ce59 [ 360.117462][T15555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.117477][T15555] RSP: 002b:00007fd30c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.117493][T15555] RAX: ffffffffffffffda RBX: 00007fd30ea15fa0 RCX: 00007fd30e79ce59 [ 360.117504][T15555] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 360.117513][T15555] RBP: 00007fd30c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.117522][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.117531][T15555] R13: 00007fd30ea16038 R14: 00007fd30ea15fa0 R15: 00007fff6c9909b8 [ 360.117578][T15555] [ 360.123808][T15557] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 360.171214][T15559] nbd: couldn't find device at index -2127233020 [ 360.177228][T15557] overlayfs: failed to set xattr on upper [ 360.177241][T15557] overlayfs: ...falling back to redirect_dir=nofollow. [ 360.177249][T15557] overlayfs: ...falling back to metacopy=off. [ 360.177256][T15557] overlayfs: ...falling back to index=off. [ 360.177263][T15557] overlayfs: ...falling back to uuid=null. [ 360.258925][ T41] audit: type=1400 audit(1781400845.567:5201): avc: denied { setattr } for pid=15566 comm="syz.5.2840" name="NETLINK" dev="sockfs" ino=70613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.406130][ T41] audit: type=1400 audit(1781400845.717:5202): avc: denied { write } for pid=15574 comm="syz.6.2843" path="socket:[72546]" dev="sockfs" ino=72546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 360.453262][T15579] netlink: 868 bytes leftover after parsing attributes in process `syz.4.2844'. [ 360.476602][T15581] openvswitch: netlink: IP tunnel dst address not specified [ 360.526539][ T41] audit: type=1400 audit(1781400845.837:5203): avc: denied { create } for pid=15592 comm="syz.6.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 360.592971][T15587] sch_fq: defrate 4294967295 ignored. [ 360.659860][T15614] FAULT_INJECTION: forcing a failure. [ 360.659860][T15614] name failslab, interval 1, probability 0, space 0, times 0 [ 360.663975][T15614] CPU: 1 UID: 0 PID: 15614 Comm: syz.4.2848 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.664004][T15614] Tainted: [L]=SOFTLOCKUP [ 360.664008][T15614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.664015][T15614] Call Trace: [ 360.664019][T15614] [ 360.664024][T15614] dump_stack_lvl+0x100/0x190 [ 360.664041][T15614] should_fail_ex.cold+0x5/0xa [ 360.664056][T15614] should_failslab+0xc2/0x120 [ 360.664070][T15614] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 360.664094][T15614] ? skb_clone+0x190/0x400 [ 360.664124][T15614] skb_clone+0x190/0x400 [ 360.664151][T15614] dev_queue_xmit_nit+0x255/0xa60 [ 360.664186][T15614] dev_hard_start_xmit+0x2fc/0x7a0 [ 360.664215][T15614] __dev_queue_xmit+0x1baa/0x4950 [ 360.664241][T15614] ? __pfx___dev_queue_xmit+0x10/0x10 [ 360.664267][T15614] ? __skb_clone+0x570/0x760 [ 360.664285][T15614] netlink_deliver_tap+0xa4d/0xcc0 [ 360.664301][T15614] netlink_unicast+0x62b/0x850 [ 360.664317][T15614] ? __pfx_netlink_unicast+0x10/0x10 [ 360.664334][T15614] netlink_sendmsg+0x8b0/0xda0 [ 360.664350][T15614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.664362][T15614] ? __might_fault+0x40/0x140 [ 360.664384][T15614] ____sys_sendmsg+0x9e1/0xb70 [ 360.664396][T15614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.664410][T15614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.664436][T15614] ___sys_sendmsg+0x190/0x1e0 [ 360.664459][T15614] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.664507][T15614] __sys_sendmsg+0x170/0x220 [ 360.664535][T15614] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.664571][T15614] ? rcu_is_watching+0x12/0xc0 [ 360.664595][T15614] do_syscall_64+0x115/0x870 [ 360.664610][T15614] ? clear_bhb_loop+0x40/0x90 [ 360.664624][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.664635][T15614] RIP: 0033:0x7fd4fb79ce59 [ 360.664645][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.664656][T15614] RSP: 002b:00007fd4fc651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.664668][T15614] RAX: ffffffffffffffda RBX: 00007fd4fba15fa0 RCX: 00007fd4fb79ce59 [ 360.664675][T15614] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 360.664681][T15614] RBP: 00007fd4fc651090 R08: 0000000000000000 R09: 0000000000000000 [ 360.664687][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.664693][T15614] R13: 00007fd4fba16038 R14: 00007fd4fba15fa0 R15: 00007ffe28849788 [ 360.664707][T15614] [ 360.975059][T15639] hugetlbfs: Bad value for 'uid' [ 360.978285][T15639] hugetlbfs: Bad value for 'uid' [ 361.044611][T15652] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 361.134866][T15662] overlayfs: failed to resolve './file0': -2 [ 361.179911][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 361.491564][ T5741] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 361.590700][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2871'. [ 361.593943][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2871'. [ 361.654457][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.657384][T15687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15687 comm=syz.2.2873 [ 361.658130][ T5741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.666809][ T5741] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.670784][ T5741] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.674188][ T5741] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.678244][ T5741] usb 10-1: config 0 descriptor?? [ 361.733481][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 361.935563][ T41] audit: type=1400 audit(1781400847.247:5204): avc: denied { getopt } for pid=15701 comm="syz.4.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 361.951599][ T5747] Bluetooth: hci3: command tx timeout [ 362.086366][ T5741] hid_parser_main: 22 callbacks suppressed [ 362.086386][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.103127][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.108145][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.111875][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.114664][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.117677][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.127805][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.133357][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.135876][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.138960][ T5741] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 362.158156][ T5741] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 362.177371][ T41] audit: type=1400 audit(1781400847.487:5205): avc: denied { map } for pid=15723 comm="syz.2.2885" path="/proc/55/task/56/status" dev="proc" ino=74850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 362.344329][ T5741] usb 10-1: USB disconnect, device number 36 [ 362.489824][T15747] FAULT_INJECTION: forcing a failure. [ 362.489824][T15747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.494987][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.2.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.495004][T15747] Tainted: [L]=SOFTLOCKUP [ 362.495008][T15747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.495014][T15747] Call Trace: [ 362.495018][T15747] [ 362.495023][T15747] dump_stack_lvl+0x100/0x190 [ 362.495040][T15747] should_fail_ex.cold+0x5/0xa [ 362.495057][T15747] _copy_to_user+0x32/0xd0 [ 362.495072][T15747] simple_read_from_buffer+0xcb/0x170 [ 362.495087][T15747] proc_fail_nth_read+0x1af/0x230 [ 362.495100][T15747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.495113][T15747] ? rw_verify_area+0xce/0x6d0 [ 362.495123][T15747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.495135][T15747] vfs_read+0x1e4/0xb30 [ 362.495149][T15747] ? __pfx_vfs_read+0x10/0x10 [ 362.495160][T15747] ? __fget_files+0x215/0x3d0 [ 362.495177][T15747] ? __fget_files+0x21f/0x3d0 [ 362.495195][T15747] ksys_read+0x12a/0x250 [ 362.495207][T15747] ? __pfx_ksys_read+0x10/0x10 [ 362.495220][T15747] ? rcu_is_watching+0x12/0xc0 [ 362.495238][T15747] do_syscall_64+0x115/0x870 [ 362.495252][T15747] ? clear_bhb_loop+0x40/0x90 [ 362.495266][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.495277][T15747] RIP: 0033:0x7f0eb835d68e [ 362.495287][T15747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.495297][T15747] RSP: 002b:00007f0eb91e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.495308][T15747] RAX: ffffffffffffffda RBX: 00007f0eb91e76c0 RCX: 00007f0eb835d68e [ 362.495315][T15747] RDX: 000000000000000f RSI: 00007f0eb91e70a0 RDI: 000000000000000c [ 362.495321][T15747] RBP: 00007f0eb91e7090 R08: 0000000000000000 R09: 0000000000000000 [ 362.495327][T15747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.495333][T15747] R13: 00007f0eb8616038 R14: 00007f0eb8615fa0 R15: 00007ffe58626d98 [ 362.495347][T15747] [ 362.604104][T15752] bond7: entered promiscuous mode [ 362.775468][ T41] audit: type=1400 audit(1781400848.087:5206): avc: denied { lock } for pid=15766 comm="syz.2.2898" path="socket:[74325]" dev="sockfs" ino=74325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 362.894167][T15772] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 363.709603][T15784] tipc: Enabling of bearer rejected, failed to enable media [ 363.773796][T15791] netlink: 'syz.6.2906': attribute type 2 has an invalid length. [ 363.776164][T15791] netlink: 'syz.6.2906': attribute type 2 has an invalid length. [ 363.780608][T15791] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 364.048740][T15806] qrtr: Invalid version 0 [ 364.104564][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 364.104580][ T41] audit: type=1400 audit(1781400849.417:5208): avc: denied { mounton } for pid=15805 comm="syz.5.2911" path="/435/file0" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 364.104621][T15807] fuse: Bad value for 'user_id' [ 364.118895][T15807] fuse: Bad value for 'user_id' [ 364.466426][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2913'. [ 364.524646][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2913'. [ 364.937161][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 364.940885][T15841] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 365.040504][T15849] batman_adv: batadv0: Adding interface: gretap2 [ 365.042974][T15849] batman_adv: batadv0: Interface activated: gretap2 [ 365.048568][T15849] ocfs2_dlmfs: Unknown parameter '' [ 365.062033][T15846] kvm: kvm [15845]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 365.066454][T15846] kvm: kvm [15845]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 365.225595][T15864] fuse: Bad value for 'fd' [ 365.262319][T15866] bridge_slave_1: left promiscuous mode [ 365.264301][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.271833][T15866] bond0: (slave bond_slave_0): Releasing backup interface [ 365.275177][T15866] bond_slave_0: left promiscuous mode [ 365.280193][T15866] bond0: (slave bond_slave_1): Releasing backup interface [ 365.283752][T15866] bond_slave_1: left promiscuous mode [ 365.292279][T15866] team0: Port device team_slave_0 removed [ 365.298767][T15866] team0: Port device team_slave_1 removed [ 365.301046][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.310714][T15866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.322422][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.325474][T15866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.329192][T15866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.351699][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.355594][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.358039][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.359925][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.362779][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.366192][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.370120][T15866] binder: 15865:15866 ioctl c0306201 200000000080 returned -14 [ 365.373861][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.378182][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.381934][T15866] binder: 15865:15866 ioctl c0306201 200000000200 returned -22 [ 365.385135][T15872] binder: 15865:15872 ioctl 1279 200000000040 returned -22 [ 365.388461][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.391051][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.395406][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.398449][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.402255][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.404811][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.408086][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.410688][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.416128][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.418720][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.422769][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.425309][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.428518][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.431032][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.434794][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.437362][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.440822][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.443987][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.447391][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.449994][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.453780][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.456324][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.459583][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.462526][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.465725][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.468253][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.472160][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.474639][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.477794][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.480067][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.483637][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.486231][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.489510][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.492479][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.495795][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.498367][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.501949][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.504711][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.508057][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.510651][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.514393][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.516962][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.520192][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.522927][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.526152][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.528536][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.532980][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.535004][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.537632][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.540101][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.543820][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.546475][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.549601][T15867] binder: BINDER_SET_CONTEXT_MGR already set [ 365.552367][T15867] binder: 15865:15867 ioctl 4018620d 200000000100 returned -16 [ 365.862335][ T5747] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 365.863523][T15889] overlay: ./file0 is not a directory [ 365.909065][T15891] netlink: 'syz.2.2937': attribute type 15 has an invalid length. [ 365.915141][T15893] sch_tbf: burst 19920 is lower than device lo mtu (32783) ! [ 366.067054][T15899] overlay: ./bus is not a directory [ 366.155224][ T41] audit: type=1326 audit(1781400851.467:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.2943" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30e79ce59 code=0x0 [ 366.171741][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2941'. [ 366.177149][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2941'. [ 366.432867][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2944'. [ 367.231466][T15853] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 367.978791][T15853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.982941][T15853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.985310][T15853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.988608][T15853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 368.081256][T15939] loop2: detected capacity change from 0 to 8 [ 368.177855][T15958] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2953'. [ 368.181729][T15958] overlayfs: failed to resolve './file0': -2 [ 368.198492][T15958] serio: Serial port ptm0 [ 368.416451][T15971] policy can only be matched on NF_INET_PRE_ROUTING [ 368.416469][T15971] unable to load match [ 368.468592][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2958'. [ 368.485876][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2958'. [ 368.655895][T15976] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 368.775184][ T41] audit: type=1400 audit(1781400854.087:5210): avc: denied { mount } for pid=15985 comm="syz.5.2963" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 368.932585][T15990] xt_hashlimit: size too large, truncated to 1048576 [ 369.171069][T15997] binder: 15996:15997 ioctl c0306201 200000000000 returned -22 [ 369.278355][T16010] overlay: ./file0 is not a directory [ 369.279375][T16012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16012 comm=syz.2.2971 [ 369.311484][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.598357][ T41] audit: type=1400 audit(1781400854.907:5211): avc: denied { ioctl } for pid=16032 comm="syz.6.2976" path="socket:[76122]" dev="sockfs" ino=76122 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.607767][T16033] tipc: Enabled bearer , priority 0 [ 369.611834][T16034] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 369.615749][T16033] syzkaller0: entered promiscuous mode [ 369.617504][T16033] syzkaller0: entered allmulticast mode [ 369.631642][T16035] tipc: Resetting bearer [ 369.646247][T16035] tipc: Disabling bearer [ 369.684545][T16038] netlink: 'syz.5.2977': attribute type 14 has an invalid length. [ 369.744109][ T41] audit: type=1400 audit(1781400855.057:5212): avc: denied { create } for pid=16039 comm="syz.6.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.750406][ T41] audit: type=1400 audit(1781400855.057:5213): avc: denied { bind } for pid=16039 comm="syz.6.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.835348][T16047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 369.842833][ T41] audit: type=1400 audit(1781400855.147:5214): avc: denied { mount } for pid=16046 comm="syz.6.2980" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 369.868190][ T41] audit: type=1400 audit(1781400855.177:5215): avc: denied { unmount } for pid=9881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 370.031792][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.035746][T16063] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 370.138632][ T41] audit: type=1800 audit(1781400855.447:5216): pid=16063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.2985" name="/newroot/459/file0" dev="tmpfs" ino=2491 res=0 errno=0 [ 370.198925][ T41] audit: type=1400 audit(1781400855.507:5217): avc: denied { execute } for pid=16071 comm="syz.5.2987" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 370.241365][ T41] audit: type=1400 audit(1781400855.547:5218): avc: denied { remount } for pid=16076 comm="syz.4.2989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 370.241372][T16080] hugetlbfs: Unknown parameter 'quota' [ 370.371532][ T41] audit: type=1400 audit(1781400855.677:5219): avc: denied { ioctl } for pid=16086 comm="syz-executor" path="socket:[78036]" dev="sockfs" ino=78036 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.374809][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.384804][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.392069][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.396166][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.399485][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.532476][ T5890] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 370.618552][T15607] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.623007][T15607] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.642400][T16107] tmpfs: Unknown parameter 'nr_inode' [ 370.647373][T16107] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2995'. [ 370.665268][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'. [ 370.670897][T16107] block nbd5: not configured, cannot reconfigure [ 370.681675][ T5890] usb 11-1: Using ep0 maxpacket: 32 [ 370.691367][ T5890] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 370.695016][ T5890] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 370.706261][ T5890] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 370.710422][ T5890] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 370.718696][ T5890] usb 11-1: config 0 interface 0 has no altsetting 0 [ 370.723636][ T5890] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 370.727550][ T5890] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 370.730930][ T5890] usb 11-1: Product: syz [ 370.732717][T15607] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.732755][T15607] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.746079][ T5890] usb 11-1: Manufacturer: syz [ 370.751553][ T5890] usb 11-1: SerialNumber: syz [ 370.760563][ T5890] usb 11-1: config 0 descriptor?? [ 370.769769][ T5890] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 370.776762][ T5890] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 370.823915][T15607] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.827090][T15607] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.885908][T15607] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.889157][T15607] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.934472][T16086] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.936857][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.939299][T16086] bridge_slave_0: entered allmulticast mode [ 370.942087][T16086] bridge_slave_0: entered promiscuous mode [ 370.945303][T16086] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.947588][T16086] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.950257][T16086] bridge_slave_1: entered allmulticast mode [ 370.958427][T16086] bridge_slave_1: entered promiscuous mode [ 370.972939][T16074] bond0: option ad_select: unable to set because the bond device is up [ 370.984903][ T5890] usb 11-1: USB disconnect, device number 30 [ 370.987246][ C3] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 371.006561][T16086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.008220][ T5890] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 371.011848][T16086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.063582][T16086] team0: Port device team_slave_0 added [ 371.068427][T16086] team0: Port device team_slave_1 added [ 371.134748][T16086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.136920][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.145177][T16086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.153825][T15607] bridge_slave_1: left allmulticast mode [ 371.155749][T15607] bridge_slave_1: left promiscuous mode [ 371.158206][T15607] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.166237][T15607] bridge_slave_0: left allmulticast mode [ 371.168112][T15607] bridge_slave_0: left promiscuous mode [ 371.170023][T15607] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.194550][T16074] netlink: 'syz.6.2986': attribute type 3 has an invalid length. [ 371.201257][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 371.343424][T15607] erspan0 (unregistering): left promiscuous mode [ 371.464470][ T41] audit: type=1400 audit(1781400856.777:5220): avc: denied { node_bind } for pid=16116 comm="syz.5.2996" saddr=172.20.20.14 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 371.469441][T16117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=16117 comm=syz.5.2996 [ 371.659055][T16124] new mount options do not match the existing superblock, will be ignored [ 371.700982][T15607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.708170][T15607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.718466][T15607] bond0 (unregistering): (slave team0): Releasing backup interface [ 371.724598][T15607] bond0 (unregistering): Released all slaves [ 371.736192][T15607] bond1 (unregistering): Released all slaves [ 371.752912][T15607] bond2 (unregistering): Released all slaves [ 371.766183][T15607] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 371.771333][T16132] cgroup: Unknown subsys name '' [ 371.774535][T15607] bond3 (unregistering): Released all slaves [ 371.783170][T15607] bond4 (unregistering): Released all slaves [ 371.798644][T15607] bond5 (unregistering): Released all slaves [ 371.809764][T15607] bond6 (unregistering): Released all slaves [ 371.819380][T16086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.821634][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.829463][T16086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.901196][T16086] hsr_slave_0: entered promiscuous mode [ 371.904602][T16086] hsr_slave_1: entered promiscuous mode [ 371.907557][T16086] debugfs: 'hsr0' already exists in 'hsr' [ 371.910018][T16086] Cannot create hsr debugfs directory [ 371.982952][T16138] bond0: Error: CAN devices cannot be enslaved [ 372.019910][T15607] : left promiscuous mode [ 372.117812][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.210037][ T5752] block nbd2: Receive control failed (result -32) [ 372.268256][ T5752] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 372.431579][ T5752] Bluetooth: hci0: command tx timeout [ 372.454118][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 372.570526][T16174] bond1: entered promiscuous mode [ 372.698154][T15607] veth0_to_team: left promiscuous mode [ 372.708481][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.712050][T15607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.715385][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.718253][T15607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.730217][T15607] veth1_macvtap: left promiscuous mode [ 372.732226][T15607] veth0_macvtap: left promiscuous mode [ 372.734325][T15607] veth1_vlan: left promiscuous mode [ 372.736371][T15607] veth0_vlan: left promiscuous mode [ 373.010771][T15607] team0 (unregistering): Port device team_slave_1 removed [ 373.023441][T15607] team0 (unregistering): Port device team_slave_0 removed [ 373.054774][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 373.058304][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 373.320770][T16086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.334980][T16086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.338118][T16086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.343094][T16086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.345757][T16086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.354149][T16086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.358769][T16086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.377871][T16086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.387984][T15610] nci: nci_rsp_packet: unsupported rsp opcode 0xf24 [ 373.641505][ T9706] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 373.771612][ T9706] usb 10-1: device descriptor read/64, error -71 [ 374.011641][ T9706] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 374.141811][ T9706] usb 10-1: device descriptor read/64, error -71 [ 374.191641][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.251903][ T9706] usb usb10-port1: attempt power cycle [ 374.511572][ T5752] Bluetooth: hci0: command tx timeout [ 374.591575][ T9706] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 374.611887][ T9706] usb 10-1: device descriptor read/8, error -71 [ 374.851518][ T9706] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 374.872213][ T9706] usb 10-1: device descriptor read/8, error -71 [ 374.985005][ T9706] usb usb10-port1: unable to enumerate USB device [ 376.311196][T16205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.380828][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'. [ 376.396489][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'. [ 376.428084][T16086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.451082][T16086] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.462053][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.464647][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.479913][T15599] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.482521][T15599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.490864][T16258] hfsplus: unable to find HFS+ superblock [ 376.575449][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 376.575461][ T41] audit: type=1400 audit(1781400861.887:5241): avc: denied { connect } for pid=16257 comm="syz.5.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.581522][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3017'. [ 376.591698][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 376.595913][ T5752] Bluetooth: hci0: command tx timeout [ 376.597766][T16258] netlink: 'syz.5.3017': attribute type 12 has an invalid length. [ 376.787059][T16086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.792261][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3018'. [ 376.814337][T16280] FAULT_INJECTION: forcing a failure. [ 376.814337][T16280] name failslab, interval 1, probability 0, space 0, times 0 [ 376.818504][T16280] CPU: 3 UID: 0 PID: 16280 Comm: syz.5.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.818523][T16280] Tainted: [L]=SOFTLOCKUP [ 376.818527][T16280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.818533][T16280] Call Trace: [ 376.818544][T16280] [ 376.818549][T16280] dump_stack_lvl+0x100/0x190 [ 376.818571][T16280] should_fail_ex.cold+0x5/0xa [ 376.818586][T16280] should_failslab+0xc2/0x120 [ 376.818599][T16280] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 376.818616][T16280] ? do_getname+0x35/0x390 [ 376.818632][T16280] ? fput+0x79/0x100 [ 376.818663][T16280] do_getname+0x35/0x390 [ 376.818682][T16280] __x64_sys_link+0x57/0xb0 [ 376.818699][T16280] do_syscall_64+0x115/0x870 [ 376.818738][T16280] ? clear_bhb_loop+0x40/0x90 [ 376.818752][T16280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.818768][T16280] RIP: 0033:0x7fd30e79ce59 [ 376.818778][T16280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.818789][T16280] RSP: 002b:00007fd30c9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 376.818800][T16280] RAX: ffffffffffffffda RBX: 00007fd30ea16090 RCX: 00007fd30e79ce59 [ 376.818807][T16280] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 376.818814][T16280] RBP: 00007fd30c9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 376.818823][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.818830][T16280] R13: 00007fd30ea16128 R14: 00007fd30ea16090 R15: 00007fff6c9909b8 [ 376.818844][T16280] [ 376.986717][T16292] No source specified [ 377.007915][T16086] veth0_vlan: entered promiscuous mode [ 377.018154][T16086] veth1_vlan: entered promiscuous mode [ 377.067552][T16086] veth0_macvtap: entered promiscuous mode [ 377.075551][T16086] veth1_macvtap: entered promiscuous mode [ 377.097874][T16086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.128447][T16086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.139498][T15304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.154911][T15304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.168492][T15304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.172988][T15304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.411504][ T29] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 377.541558][ T29] usb 10-1: device descriptor read/64, error -71 [ 377.801582][ T29] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 377.941575][ T29] usb 10-1: device descriptor read/64, error -71 [ 378.051604][ T29] usb usb10-port1: attempt power cycle [ 378.421492][ T29] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 378.442439][ T29] usb 10-1: device descriptor read/8, error -71 [ 378.671861][ T5752] Bluetooth: hci0: command tx timeout [ 378.703656][ T29] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 378.736604][ T29] usb 10-1: device descriptor read/8, error -71 [ 378.852079][ T29] usb usb10-port1: unable to enumerate USB device [ 380.024093][T16298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.050615][T15311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.053763][T15311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.129360][T15610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.135843][T15610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.155674][T16326] futex_wake_op: syz.2.3029 tries to shift op by 32; fix this program [ 380.157424][ T41] audit: type=1400 audit(1781400865.467:5242): avc: denied { mount } for pid=16086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 380.169365][ T41] audit: type=1400 audit(1781400865.477:5243): avc: denied { mounton } for pid=16323 comm="syz.2.3029" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 380.170891][T16326] exFAT-fs (nullb0): invalid boot record signature [ 380.185905][T16326] exFAT-fs (nullb0): failed to read boot sector [ 380.189514][T16326] exFAT-fs (nullb0): failed to recognize exfat type [ 380.600925][T16362] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 380.604946][T16362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.610013][T16362] btrfs: Unknown parameter 'discard‚dj[V3o7zUoMt [ 383.635997][T16462] dump_stack_lvl+0x100/0x190 [ 383.636030][T16462] should_fail_ex.cold+0x5/0xa [ 383.636069][T16462] ? __pfx_fuse_inode_eq+0x10/0x10 [ 383.636104][T16462] should_failslab+0xc2/0x120 [ 383.636126][T16462] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 383.636152][T16462] ? fuse_alloc_inode+0x2c/0x1e0 [ 383.636182][T16462] ? __pfx_fuse_inode_eq+0x10/0x10 [ 383.636210][T16462] ? __pfx_fuse_inode_set+0x10/0x10 [ 383.636234][T16462] fuse_alloc_inode+0x2c/0x1e0 [ 383.636261][T16462] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 383.636286][T16462] alloc_inode+0x68/0x250 [ 383.636305][T16462] iget5_locked+0x5f/0xa0 [ 383.636341][T16462] fuse_iget+0x200/0x930 [ 383.636364][T16462] ? __pfx_fuse_iget+0x10/0x10 [ 383.636383][T16462] ? __fuse_simple_request+0x58e/0xf00 [ 383.636408][T16462] ? __asan_memset+0x23/0x50 [ 383.636436][T16462] fuse_lookup_name+0x481/0x760 [ 383.636468][T16462] ? __pfx_fuse_lookup_name+0x10/0x10 [ 383.636499][T16462] ? __pfx___mutex_lock+0x10/0x10 [ 383.636572][T16462] fuse_lookup+0x209/0x550 [ 383.636602][T16462] ? __pfx_fuse_lookup+0x10/0x10 [ 383.636644][T16462] ? lockdep_init_map_type+0x5c/0x250 [ 383.636673][T16462] __lookup_slow+0x251/0x460 [ 383.636701][T16462] ? __pfx___lookup_slow+0x10/0x10 [ 383.636751][T16462] lookup_slow+0x50/0x70 [ 383.636780][T16462] path_lookupat+0x5e8/0xc40 [ 383.636805][T16462] filename_lookup+0x202/0x590 [ 383.636826][T16462] ? kasan_save_track+0x14/0x30 [ 383.636843][T16462] ? __pfx_filename_lookup+0x10/0x10 [ 383.636879][T16462] filename_linkat+0x145/0x640 [ 383.636902][T16462] ? __pfx_filename_linkat+0x10/0x10 [ 383.636927][T16462] ? do_getname+0x191/0x390 [ 383.636950][T16462] __x64_sys_link+0x81/0xb0 [ 383.636970][T16462] do_syscall_64+0x115/0x870 [ 383.636988][T16462] ? clear_bhb_loop+0x40/0x90 [ 383.637009][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.637025][T16462] RIP: 0033:0x7fd30e79ce59 [ 383.637037][T16462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.637051][T16462] RSP: 002b:00007fd30c9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 383.637067][T16462] RAX: ffffffffffffffda RBX: 00007fd30ea16090 RCX: 00007fd30e79ce59 [ 383.637077][T16462] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 383.637087][T16462] RBP: 00007fd30c9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 383.637096][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.637105][T16462] R13: 00007fd30ea16128 R14: 00007fd30ea16090 R15: 00007fff6c9909b8 [ 383.637128][T16462] [ 384.277622][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.281164][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.675513][ T5752] Bluetooth: Unexpected continuation frame (len 4) [ 384.864677][T16498] FAULT_INJECTION: forcing a failure. [ 384.864677][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 384.869827][T16498] CPU: 2 UID: 0 PID: 16498 Comm: syz.4.3079 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.869854][T16498] Tainted: [L]=SOFTLOCKUP [ 384.869861][T16498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.869874][T16498] Call Trace: [ 384.869881][T16498] [ 384.869890][T16498] dump_stack_lvl+0x100/0x190 [ 384.869918][T16498] should_fail_ex.cold+0x5/0xa [ 384.869945][T16498] should_failslab+0xc2/0x120 [ 384.869968][T16498] __kmalloc_cache_noprof+0x7a/0x6f0 [ 384.869993][T16498] ? fuse_alloc_inode+0xf7/0x1e0 [ 384.870022][T16498] ? lockdep_init_map_type+0x5c/0x250 [ 384.870051][T16498] ? __pfx_fuse_inode_eq+0x10/0x10 [ 384.870077][T16498] ? __pfx_fuse_inode_set+0x10/0x10 [ 384.870103][T16498] fuse_alloc_inode+0xf7/0x1e0 [ 384.870129][T16498] ? kasan_quarantine_put+0x104/0x240 [ 384.870158][T16498] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 384.870184][T16498] alloc_inode+0x68/0x250 [ 384.870205][T16498] iget5_locked+0x5f/0xa0 [ 384.870227][T16498] fuse_iget+0x200/0x930 [ 384.870249][T16498] ? __pfx_fuse_iget+0x10/0x10 [ 384.870268][T16498] ? __fuse_simple_request+0x58e/0xf00 [ 384.870294][T16498] ? __asan_memset+0x23/0x50 [ 384.870320][T16498] fuse_lookup_name+0x481/0x760 [ 384.870350][T16498] ? __pfx_fuse_lookup_name+0x10/0x10 [ 384.870376][T16498] ? __pfx___mutex_lock+0x10/0x10 [ 384.870421][T16498] fuse_lookup+0x209/0x550 [ 384.870449][T16498] ? __pfx_fuse_lookup+0x10/0x10 [ 384.870489][T16498] ? lockdep_init_map_type+0x5c/0x250 [ 384.870517][T16498] __lookup_slow+0x251/0x460 [ 384.870545][T16498] ? __pfx___lookup_slow+0x10/0x10 [ 384.870593][T16498] lookup_slow+0x50/0x70 [ 384.870620][T16498] path_lookupat+0x5e8/0xc40 [ 384.870644][T16498] filename_lookup+0x202/0x590 [ 384.870663][T16498] ? kasan_save_track+0x14/0x30 [ 384.870690][T16498] ? __pfx_filename_lookup+0x10/0x10 [ 384.870740][T16498] filename_linkat+0x145/0x640 [ 384.870769][T16498] ? __pfx_filename_linkat+0x10/0x10 [ 384.870802][T16498] ? do_getname+0x191/0x390 [ 384.870830][T16498] __x64_sys_link+0x81/0xb0 [ 384.870856][T16498] do_syscall_64+0x115/0x870 [ 384.870877][T16498] ? clear_bhb_loop+0x40/0x90 [ 384.870899][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.870917][T16498] RIP: 0033:0x7f79c159ce59 [ 384.870933][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.870950][T16498] RSP: 002b:00007f79c2394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 384.870967][T16498] RAX: ffffffffffffffda RBX: 00007f79c1816090 RCX: 00007f79c159ce59 [ 384.870978][T16498] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 384.870989][T16498] RBP: 00007f79c2394090 R08: 0000000000000000 R09: 0000000000000000 [ 384.871000][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.871010][T16498] R13: 00007f79c1816128 R14: 00007f79c1816090 R15: 00007fff96a6bbf8 [ 384.871035][T16498] [ 385.570717][ T5752] Bluetooth: hci1: unexpected event for opcode 0x200c [ 385.618753][T16505] program syz.5.3082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.669966][T16508] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 385.681810][ T1137] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 385.688324][ T1137] ata1.00: irq_stat 0x40000000 [ 385.691481][ T1137] ata1.00: failed command: ZAC MANAGEMENT OUT [ 385.694194][ T1137] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 31 [ 385.694194][ T1137] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 385.699329][ T1137] ata1.00: status: { DRDY ERR } [ 385.700947][ T1137] ata1.00: error: { ABRT } [ 385.704042][ T1137] ata1.00: device reported invalid CHS sector 0 [ 385.781692][T16512] IPVS: Unknown mcast interface: vcan0 [ 385.824456][T16510] fuse: Unknown parameter 'L'VAy93&'ЏXqgj.sh&}֛M0x0000000000000004' [ 385.872741][T16516] 9p: Bad value for 'port' [ 386.181573][ T5926] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 386.242098][T16526] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in; [ 386.242098][T16526] program syz.2.3089 not setting count and/or reply_len properly [ 386.341981][ T5926] usb 10-1: Using ep0 maxpacket: 8 [ 386.352163][ T5926] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 386.355534][ T5926] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.359001][ T5926] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.363044][ T5926] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.366457][ T5926] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.371456][ T5926] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.374915][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.501815][T16535] FAULT_INJECTION: forcing a failure. [ 386.501815][T16535] name failslab, interval 1, probability 0, space 0, times 0 [ 386.508717][T16535] CPU: 0 UID: 0 PID: 16535 Comm: syz.2.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.508744][T16535] Tainted: [L]=SOFTLOCKUP [ 386.508750][T16535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.508759][T16535] Call Trace: [ 386.508776][T16535] [ 386.508790][T16535] dump_stack_lvl+0x100/0x190 [ 386.508820][T16535] should_fail_ex.cold+0x5/0xa [ 386.508844][T16535] should_failslab+0xc2/0x120 [ 386.508864][T16535] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 386.508895][T16535] ? security_inode_alloc+0x3b/0x2c0 [ 386.508923][T16535] ? lockdep_init_map_type+0x5c/0x250 [ 386.508948][T16535] security_inode_alloc+0x3b/0x2c0 [ 386.508970][T16535] inode_init_always_gfp+0xc77/0xfb0 [ 386.508994][T16535] ? __pfx_fuse_inode_eq+0x10/0x10 [ 386.509015][T16535] ? __pfx_fuse_inode_set+0x10/0x10 [ 386.509036][T16535] alloc_inode+0x8e/0x250 [ 386.509052][T16535] iget5_locked+0x5f/0xa0 [ 386.509070][T16535] fuse_iget+0x200/0x930 [ 386.509089][T16535] ? __pfx_fuse_iget+0x10/0x10 [ 386.509105][T16535] ? __fuse_simple_request+0x58e/0xf00 [ 386.509127][T16535] ? __asan_memset+0x23/0x50 [ 386.509157][T16535] fuse_lookup_name+0x481/0x760 [ 386.509210][T16535] ? __pfx_fuse_lookup_name+0x10/0x10 [ 386.509236][T16535] ? __pfx___mutex_lock+0x10/0x10 [ 386.509288][T16535] fuse_lookup+0x209/0x550 [ 386.509314][T16535] ? __pfx_fuse_lookup+0x10/0x10 [ 386.509350][T16535] ? lockdep_init_map_type+0x5c/0x250 [ 386.509375][T16535] __lookup_slow+0x251/0x460 [ 386.509400][T16535] ? __pfx___lookup_slow+0x10/0x10 [ 386.509444][T16535] lookup_slow+0x50/0x70 [ 386.509469][T16535] path_lookupat+0x5e8/0xc40 [ 386.509490][T16535] filename_lookup+0x202/0x590 [ 386.509507][T16535] ? kasan_save_track+0x14/0x30 [ 386.509525][T16535] ? __pfx_filename_lookup+0x10/0x10 [ 386.509568][T16535] filename_linkat+0x145/0x640 [ 386.509594][T16535] ? __pfx_filename_linkat+0x10/0x10 [ 386.509623][T16535] ? do_getname+0x191/0x390 [ 386.509648][T16535] __x64_sys_link+0x81/0xb0 [ 386.509670][T16535] do_syscall_64+0x115/0x870 [ 386.509689][T16535] ? clear_bhb_loop+0x40/0x90 [ 386.509709][T16535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.509725][T16535] RIP: 0033:0x7f0eb839ce59 [ 386.509740][T16535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.509755][T16535] RSP: 002b:00007f0eb91c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 386.509770][T16535] RAX: ffffffffffffffda RBX: 00007f0eb8616090 RCX: 00007f0eb839ce59 [ 386.509781][T16535] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 386.509791][T16535] RBP: 00007f0eb91c6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.509801][T16535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.509810][T16535] R13: 00007f0eb8616128 R14: 00007f0eb8616090 R15: 00007ffe58626d98 [ 386.509832][T16535] [ 386.666633][ C2] ata1: illegal qc_active transition (00000000->00020000) [ 386.731922][T16539] autofs: Unknown parameter 'syz0' [ 386.992161][ T1137] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 387.002515][ T1137] ata1.00: configured for UDMA/100 [ 387.137242][T16540] usbtmc 10-1:16.0: simple usb_control_msg failed -32 [ 387.311203][T16542] __nla_validate_parse: 3 callbacks suppressed [ 387.311215][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 387.317119][T16542] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 387.570089][T16149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.581920][T16149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.586351][T16149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.591245][T16149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.596984][T16149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.597710][T15610] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.604721][T15610] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.706273][T15610] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.709751][T15610] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.714541][T16566] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3100'. [ 387.782481][T15610] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.786409][T15610] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.891851][T15610] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.898433][T15610] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.086063][T16553] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.089233][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.092419][T16553] bridge_slave_0: entered allmulticast mode [ 388.096247][T16553] bridge_slave_0: entered promiscuous mode [ 388.118415][T16553] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.121593][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.124692][T16553] bridge_slave_1: entered allmulticast mode [ 388.128615][T16553] bridge_slave_1: entered promiscuous mode [ 388.144622][T15610] bridge_slave_1: left allmulticast mode [ 388.147010][T15610] bridge_slave_1: left promiscuous mode [ 388.149467][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.160446][T15610] bridge_slave_0: left allmulticast mode [ 388.163587][T15610] bridge_slave_0: left promiscuous mode [ 388.166022][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.327909][T15610] bond5 (unregistering): (slave geneve3): Releasing active interface [ 388.330565][T15610] geneve3 (unregistering): left allmulticast mode [ 388.777591][T15610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.783715][T15610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.788271][T15610] bond0 (unregistering): (slave team0): Releasing backup interface [ 388.792120][T15610] bond0 (unregistering): Released all slaves [ 388.796853][T15610] bond1 (unregistering): Released all slaves [ 388.803781][T15610] bond2 (unregistering): Released all slaves [ 388.810641][T15610] bond3 (unregistering): Released all slaves [ 388.817864][T15610] bond4 (unregistering): Released all slaves [ 388.829235][T15610] bond5 (unregistering): Released all slaves [ 388.837535][T15610] bond6 (unregistering): Released all slaves [ 388.846495][T15610] bond7 (unregistering): Released all slaves [ 388.870723][T16553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.876655][T16553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.899600][T16553] team0: Port device team_slave_0 added [ 388.908477][T16553] team0: Port device team_slave_1 added [ 388.915990][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 388.916006][ T41] audit: type=1400 audit(1781400874.227:5262): avc: denied { write } for pid=16584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.927221][T16553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.938423][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.948277][T16553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.954438][T16553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.957122][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.959932][ T41] audit: type=1400 audit(1781400874.267:5263): avc: denied { write } for pid=16587 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.966456][T16553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.988995][ T8267] usb 10-1: USB disconnect, device number 46 [ 388.998763][T15610] tipc: Left network mode [ 389.022936][T15610] IPVS: stopping backup sync thread 14945 ... [ 389.034691][T16553] hsr_slave_0: entered promiscuous mode [ 389.037535][T16553] hsr_slave_1: entered promiscuous mode [ 389.040794][T16553] debugfs: 'hsr0' already exists in 'hsr' [ 389.045447][T16553] Cannot create hsr debugfs directory [ 389.052232][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 389.152967][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 389.153318][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 389.195408][ T41] audit: type=1400 audit(1781400874.507:5264): avc: denied { write } for pid=16595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.241464][ T41] audit: type=1400 audit(1781400874.547:5265): avc: denied { write } for pid=16601 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.287171][T16604] netlink: 'syz.5.3106': attribute type 1 has an invalid length. [ 389.299903][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 389.320484][T16604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.334990][T16553] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.338710][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.350341][T16604] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 389.354642][T16553] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 389.358424][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.365274][T16604] macvlan4: entered promiscuous mode [ 389.367034][T16604] macvlan4: entered allmulticast mode [ 389.369005][T16604] bond4: entered promiscuous mode [ 389.370576][T16604] veth0_to_bond: entered promiscuous mode [ 389.376419][T16604] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 389.379897][T16604] bond4: left promiscuous mode [ 389.381832][T16604] veth0_to_bond: left promiscuous mode [ 389.399284][T16553] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 389.409737][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.413439][T16610] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 389.427733][T16553] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 389.447936][T16610] cramfs: wrong magic [ 389.447978][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.466921][T16610] NILFS (nullb0): couldn't find nilfs on the device [ 389.494327][T16612] ufs: You didn't specify the type of your ufs filesystem [ 389.494327][T16612] [ 389.494327][T16612] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 389.494327][T16612] [ 389.494327][T16612] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 389.504041][T16612] ufs: failed to set blocksize [ 389.553816][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3108'. [ 389.554610][T16553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.557366][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 389.585413][T16553] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.590126][ T41] audit: type=1400 audit(1781400874.897:5266): avc: denied { write } for pid=16622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.599513][T15607] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.601860][T15607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.605945][ T41] audit: type=1400 audit(1781400874.917:5267): avc: denied { read } for pid=16625 comm="syz.4.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.607659][T15607] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.616293][T15607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.629798][T15610] hsr_slave_0: left promiscuous mode [ 389.636853][T15610] hsr_slave_1: left promiscuous mode [ 389.637852][ T41] audit: type=1400 audit(1781400874.947:5268): avc: denied { write } for pid=16631 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.638965][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.650501][T15610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.654352][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.656841][T15610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.671782][T15610] veth1_macvtap: left promiscuous mode [ 389.673986][T15610] veth1_vlan: left promiscuous mode [ 389.676313][T15610] veth0_vlan: left promiscuous mode [ 389.713327][ T5752] Bluetooth: hci4: command tx timeout [ 389.724642][T16636] FAT-fs (nullb0): bogus number of reserved sectors [ 389.728287][T16636] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 389.940462][T15610] team0 (unregistering): Port device team_slave_1 removed [ 389.968122][T15610] team0 (unregistering): Port device team_slave_0 removed [ 390.039777][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 390.163823][ T41] audit: type=1400 audit(1781400875.467:5269): avc: denied { write } for pid=16650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.220520][T16659] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 390.229171][T16659] SELinux: failed to load policy [ 390.285371][ T41] audit: type=1400 audit(1781400875.597:5270): avc: denied { write } for pid=16666 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.334573][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 390.350090][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 390.453339][ T41] audit: type=1400 audit(1781400875.767:5271): avc: denied { write } for pid=16679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.473805][T16553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.519347][T15610] IPVS: stop unused estimator thread 0... [ 390.560225][T16681] nbd5: detected capacity change from 0 to 63 [ 390.566700][T16689] block nbd5: NBD_DISCONNECT [ 390.571376][T16689] block nbd5: Disconnected due to user request. [ 390.576604][T16692] FAULT_INJECTION: forcing a failure. [ 390.576604][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 390.580723][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 390.588539][T16689] block nbd5: shutting down sockets [ 390.589748][T16692] CPU: 3 UID: 0 PID: 16692 Comm: syz.4.3122 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.589775][T16692] Tainted: [L]=SOFTLOCKUP [ 390.589782][T16692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.589792][T16692] Call Trace: [ 390.589799][T16692] [ 390.589805][T16692] dump_stack_lvl+0x100/0x190 [ 390.589832][T16692] should_fail_ex.cold+0x5/0xa [ 390.589857][T16692] should_failslab+0xc2/0x120 [ 390.589878][T16692] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 390.589903][T16692] ? __d_alloc+0x34/0xa40 [ 390.589924][T16692] ? find_held_lock+0x2b/0x80 [ 390.589938][T16692] ? dput.part.0+0xce/0x570 [ 390.589958][T16692] __d_alloc+0x34/0xa40 [ 390.589984][T16692] d_alloc+0x4a/0x1e0 [ 390.590009][T16692] lookup_one_qstr_excl+0x171/0x250 [ 390.590036][T16692] ? mnt_want_write+0x161/0x450 [ 390.590057][T16692] filename_create+0x1cf/0x400 [ 390.590077][T16692] ? __pfx_filename_create+0x10/0x10 [ 390.590114][T16692] filename_linkat+0x18c/0x640 [ 390.590142][T16692] ? __pfx_filename_linkat+0x10/0x10 [ 390.590173][T16692] ? do_getname+0x191/0x390 [ 390.590201][T16692] __x64_sys_link+0x81/0xb0 [ 390.590226][T16692] do_syscall_64+0x115/0x870 [ 390.590248][T16692] ? clear_bhb_loop+0x40/0x90 [ 390.590271][T16692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.590289][T16692] RIP: 0033:0x7f79c159ce59 [ 390.590304][T16692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.590319][T16692] RSP: 002b:00007f79c2394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 390.590335][T16692] RAX: ffffffffffffffda RBX: 00007f79c1816090 RCX: 00007f79c159ce59 [ 390.590347][T16692] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 390.590358][T16692] RBP: 00007f79c2394090 R08: 0000000000000000 R09: 0000000000000000 [ 390.590368][T16692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.590378][T16692] R13: 00007f79c1816128 R14: 00007f79c1816090 R15: 00007fff96a6bbf8 [ 390.590403][T16692] [ 390.672603][T16553] veth0_vlan: entered promiscuous mode [ 390.680653][T16553] veth1_vlan: entered promiscuous mode [ 390.701611][T16553] veth0_macvtap: entered promiscuous mode [ 390.706787][T16553] veth1_macvtap: entered promiscuous mode [ 390.718957][T16553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.728970][ C0] blk_print_req_error: 138 callbacks suppressed [ 390.728983][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.730433][ C3] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.731462][ C0] buffer_io_error: 138 callbacks suppressed [ 390.731474][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 390.734295][ C3] Buffer I/O error on dev nbd5, logical block 1, async page read [ 390.735792][ C2] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.735810][ C2] Buffer I/O error on dev nbd5, logical block 2, async page read [ 390.735844][ C2] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.735857][ C2] Buffer I/O error on dev nbd5, logical block 3, async page read [ 390.751977][T16553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.757695][ T5922] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.761688][ T5922] Buffer I/O error on dev nbd5, logical block 0, async page read [ 390.764207][ T5922] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.766947][ T5922] Buffer I/O error on dev nbd5, logical block 1, async page read [ 390.769420][ T5922] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.773983][T15599] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.774036][ T5922] Buffer I/O error on dev nbd5, logical block 2, async page read [ 390.776941][T15599] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.780100][ T5922] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.786361][ T5922] Buffer I/O error on dev nbd5, logical block 3, async page read [ 390.795023][ T5922] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.798465][ T5922] Buffer I/O error on dev nbd5, logical block 0, async page read [ 390.803309][ T5922] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.806790][ T5922] Buffer I/O error on dev nbd5, logical block 1, async page read [ 390.811196][T15599] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.831132][ T5922] ldm_validate_partition_table(): Disk read failed. [ 390.838129][T15320] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.846101][ T5922] Dev nbd5: unable to read RDB block 0 [ 390.864259][ T5922] nbd5: unable to read partition table [ 390.887085][ T5922] ldm_validate_partition_table(): Disk read failed. [ 390.892886][ T5922] Dev nbd5: unable to read RDB block 0 [ 390.897957][ T5922] nbd5: unable to read partition table [ 390.901563][T16727] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 390.994882][T15601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.998089][T15601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.016060][T15601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.018743][T15601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.030907][ T5825] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 391.036423][ T5825] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.094952][T16746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.233221][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3131'. [ 391.236922][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3131'. [ 391.453678][T16778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=16778 comm=syz.4.3138 [ 391.500508][T16781] binder: 16780:16781 ioctl c0306201 2000000003c0 returned -14 [ 391.624972][T16790] ip6gre1: entered promiscuous mode [ 391.626640][T16790] ip6gre1: entered allmulticast mode [ 391.629430][T15311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.640368][T16790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.641636][T15311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.643749][T16790] tmpfs: Unknown parameter 'gCK˛:V5@blmit' [ 391.649680][T16790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16790 comm=syz.5.3142 [ 391.652717][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.715993][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3145'. [ 391.751280][T16802] loop9: detected capacity change from 0 to 524287997 [ 391.791597][ T5752] Bluetooth: hci4: command tx timeout [ 391.915452][T16814] kvm: kvm [16813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 391.919637][T16814] kvm: kvm [16813]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 391.931079][T16816] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3151'. [ 391.942017][T16817] CIFS: VFS: UNC: path must begin with // or \\ [ 391.945512][T16817] Malformed UNC in devname [ 391.945512][T16817] [ 391.947547][T16817] CIFS: VFS: Malformed UNC in devname [ 391.974774][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.002484][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 392.132245][T16827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16827 comm=syz.5.3152 [ 392.137221][T16826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16826 comm=syz.5.3152 [ 392.149603][T16838] syzkaller0: entered promiscuous mode [ 392.151883][T16838] syzkaller0: entered allmulticast mode [ 392.173350][ T5825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.306411][T16849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16849 comm=syz.5.3154 [ 392.359299][T16855] netlink: 'syz.5.3156': attribute type 1 has an invalid length. [ 392.362881][T16855] netlink: 'syz.5.3156': attribute type 2 has an invalid length. [ 392.395480][T16857] __nla_validate_parse: 1 callbacks suppressed [ 392.395492][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 392.454317][T16858] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 392.462432][T16858] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 392.481065][T16858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.495684][T16858] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.548235][T16861] netlink: 'syz.5.3159': attribute type 11 has an invalid length. [ 392.553908][T16862] netlink: 'syz.5.3159': attribute type 11 has an invalid length. [ 392.666712][T16865] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3160'. [ 392.810739][T16867] cgroup: release_agent respecified [ 392.878675][T16869] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3162'. [ 393.458416][T16894] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 393.461586][T16896] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3169'. [ 393.493743][ T5825] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 393.651702][ T5825] usb 9-1: Using ep0 maxpacket: 8 [ 393.654975][ T5825] usb 9-1: config 0 has no interfaces? [ 393.657815][ T5825] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 393.660610][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 393.663892][ T5825] usb 9-1: Product: syz [ 393.665616][ T5825] usb 9-1: SerialNumber: syz [ 393.670053][ T5825] usb 9-1: config 0 descriptor?? [ 393.761955][T16924] Bluetooth: MGMT ver 1.23 [ 393.801282][T16930] input: syz1 as /devices/virtual/input/input31 [ 393.826209][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3178'. [ 393.830500][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3178'. [ 393.840556][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3178'. [ 393.845971][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3178'. [ 393.850747][T16933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3178'. [ 393.874213][ T5752] Bluetooth: hci4: command tx timeout [ 393.938667][ T9] usb 9-1: USB disconnect, device number 41 [ 394.045351][ T41] kauditd_printk_skb: 24 callbacks suppressed [ 394.045366][ T41] audit: type=1400 audit(1781400879.357:5296): avc: denied { write } for pid=16949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.104357][T16955] syz.2.3185 (16955): /proc/16954/oom_adj is deprecated, please use /proc/16954/oom_score_adj instead. [ 394.128213][ T41] audit: type=1400 audit(1781400879.437:5297): avc: denied { write } for pid=16956 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.145110][T16952] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3184'. [ 394.231483][ T41] audit: type=1400 audit(1781400879.537:5298): avc: denied { write } for pid=16965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.273275][ T41] audit: type=1400 audit(1781400879.587:5299): avc: denied { write } for pid=16974 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.312644][T16977] binder: 16976:16977 unknown command 0 [ 394.323822][T16977] binder: 16976:16977 ioctl c0306201 200000000240 returned -22 [ 394.347432][ T41] audit: type=1400 audit(1781400879.657:5300): avc: denied { write } for pid=16978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.392822][T16982] binder: BINDER_SET_CONTEXT_MGR already set [ 394.401525][T16982] binder: 16976:16982 ioctl 4018620d 200000000100 returned -16 [ 394.413287][ T41] audit: type=1400 audit(1781400879.727:5301): avc: denied { write } for pid=16983 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.556558][T16993] [ 394.557336][T16993] ====================================================== [ 394.559352][T16993] WARNING: possible circular locking dependency detected [ 394.561374][T16993] syzkaller #0 Tainted: G L [ 394.563550][T16993] ------------------------------------------------------ [ 394.565990][T16993] syz.5.3194/16993 is trying to acquire lock: [ 394.567982][T16993] ffffffff8e9b1de0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 394.571322][T16993] [ 394.571322][T16993] but task is already holding lock: [ 394.573909][T16993] ffff888042119c60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 394.577259][T16993] [ 394.577259][T16993] which lock already depends on the new lock. [ 394.577259][T16993] [ 394.581267][T16993] [ 394.581267][T16993] the existing dependency chain (in reverse order) is: [ 394.584270][T16993] [ 394.584270][T16993] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 394.586592][T16993] lock_sock_nested+0x41/0xf0 [ 394.588115][T16993] mptcp_connect+0x660/0xaf0 [ 394.589687][T16993] __inet_stream_connect+0x208/0xfa0 [ 394.591395][T16993] inet_stream_connect+0x57/0xa0 [ 394.593038][T16993] __sys_connect_file+0x141/0x1a0 [ 394.594631][T16993] __sys_connect+0x141/0x170 [ 394.596091][T16993] __x64_sys_connect+0x72/0xb0 [ 394.597613][T16993] do_syscall_64+0x115/0x870 [ 394.599122][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.601115][T16993] [ 394.601115][T16993] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 394.603839][T16993] lock_sock_nested+0x41/0xf0 [ 394.605737][T16993] inet_shutdown+0x67/0x410 [ 394.607638][T16993] nbd_mark_nsock_dead+0xae/0x5c0 [ 394.609690][T16993] recv_work+0x5fb/0x8c0 [ 394.611454][T16993] process_one_work+0xa0e/0x1980 [ 394.613349][T16993] worker_thread+0x5ef/0xe50 [ 394.615264][T16993] kthread+0x370/0x450 [ 394.616948][T16993] ret_from_fork+0x72b/0xd50 [ 394.618852][T16993] ret_from_fork_asm+0x1a/0x30 [ 394.620681][T16993] [ 394.620681][T16993] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 394.623224][T16993] __mutex_lock+0x1a4/0x1b10 [ 394.624997][T16993] nbd_queue_rq+0x428/0x1080 [ 394.626796][T16993] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 394.628793][T16993] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 394.631090][T16993] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 394.633122][T16993] blk_mq_run_hw_queue+0x23c/0x670 [ 394.634842][T16993] blk_mq_dispatch_list+0x51d/0x1360 [ 394.636610][T16993] blk_mq_flush_plug_list+0x130/0x600 [ 394.638464][T16993] __blk_flush_plug+0x2c4/0x4b0 [ 394.640172][T16993] __submit_bio+0x584/0x6c0 [ 394.641737][T16993] submit_bio_noacct_nocheck+0x543/0xbf0 [ 394.643812][T16993] submit_bio_noacct+0xd18/0x2000 [ 394.646103][T16993] submit_bh_wbc+0x681/0x890 [ 394.648216][T16993] block_read_full_folio+0x264/0x8e0 [ 394.650723][T16993] filemap_read_folio+0xfc/0x3b0 [ 394.652990][T16993] do_read_cache_folio+0x2d7/0x6b0 [ 394.654835][T16993] read_part_sector+0xd1/0x370 [ 394.656458][T16993] adfspart_check_ICS+0x91/0x7d0 [ 394.658133][T16993] bdev_disk_changed+0x7a3/0x1250 [ 394.659827][T16993] blkdev_get_whole+0x187/0x290 [ 394.661457][T16993] bdev_open+0x2c7/0xe40 [ 394.662928][T16993] blkdev_open+0x34e/0x4f0 [ 394.664432][T16993] do_dentry_open+0x6ab/0x14d0 [ 394.666042][T16993] vfs_open+0x82/0x3f0 [ 394.667459][T16993] path_openat+0x208c/0x31a0 [ 394.669245][T16993] do_file_open+0x20e/0x430 [ 394.670690][T16993] do_sys_openat2+0x10d/0x1e0 [ 394.672261][T16993] __x64_sys_openat+0x12d/0x210 [ 394.673850][T16993] do_syscall_64+0x115/0x870 [ 394.675367][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.677296][T16993] [ 394.677296][T16993] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 394.679563][T16993] __mutex_lock+0x1a4/0x1b10 [ 394.681185][T16993] nbd_queue_rq+0xba/0x1080 [ 394.682708][T16993] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 394.684471][T16993] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 394.686451][T16993] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 394.688360][T16993] blk_mq_run_hw_queue+0x23c/0x670 [ 394.690656][T16993] blk_mq_dispatch_list+0x51d/0x1360 [ 394.692956][T16993] blk_mq_flush_plug_list+0x130/0x600 [ 394.694809][T16993] __blk_flush_plug+0x2c4/0x4b0 [ 394.696467][T16993] __submit_bio+0x584/0x6c0 [ 394.698053][T16993] submit_bio_noacct_nocheck+0x543/0xbf0 [ 394.699981][T16993] submit_bio_noacct+0xd18/0x2000 [ 394.701737][T16993] submit_bh_wbc+0x681/0x890 [ 394.703292][T16993] block_read_full_folio+0x264/0x8e0 [ 394.705078][T16993] filemap_read_folio+0xfc/0x3b0 [ 394.706738][T16993] do_read_cache_folio+0x2d7/0x6b0 [ 394.708438][T16993] read_part_sector+0xd1/0x370 [ 394.710448][T16993] adfspart_check_ICS+0x91/0x7d0 [ 394.712327][T16993] bdev_disk_changed+0x7a3/0x1250 [ 394.714110][T16993] blkdev_get_whole+0x187/0x290 [ 394.715821][T16993] bdev_open+0x2c7/0xe40 [ 394.717325][T16993] blkdev_open+0x34e/0x4f0 [ 394.718926][T16993] do_dentry_open+0x6ab/0x14d0 [ 394.720565][T16993] vfs_open+0x82/0x3f0 [ 394.722018][T16993] path_openat+0x208c/0x31a0 [ 394.723651][T16993] do_file_open+0x20e/0x430 [ 394.725218][T16993] do_sys_openat2+0x10d/0x1e0 [ 394.726828][T16993] __x64_sys_openat+0x12d/0x210 [ 394.728429][T16993] do_syscall_64+0x115/0x870 [ 394.730123][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.732135][T16993] [ 394.732135][T16993] -> #3 (set->srcu){.+.+}-{0:0}: [ 394.734266][T16993] __synchronize_srcu+0xa2/0x300 [ 394.736005][T16993] blk_mq_quiesce_queue+0x149/0x1c0 [ 394.737774][T16993] elevator_switch+0x17b/0x7e0 [ 394.739478][T16993] elevator_change+0x352/0x530 [ 394.741122][T16993] elevator_set_default+0x29e/0x360 [ 394.742891][T16993] blk_register_queue+0x48e/0x630 [ 394.744597][T16993] __add_disk+0x73f/0xe40 [ 394.746161][T16993] add_disk_fwnode+0x118/0x5c0 [ 394.747792][T16993] nbd_dev_add+0x77a/0xb10 [ 394.749417][T16993] nbd_init+0x291/0x2b0 [ 394.750894][T16993] do_one_initcall+0x121/0x750 [ 394.752637][T16993] kernel_init_freeable+0x6ea/0x7b0 [ 394.754426][T16993] kernel_init+0x1f/0x1e0 [ 394.755959][T16993] ret_from_fork+0x72b/0xd50 [ 394.757529][T16993] ret_from_fork_asm+0x1a/0x30 [ 394.759298][T16993] [ 394.759298][T16993] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 394.761749][T16993] __mutex_lock+0x1a4/0x1b10 [ 394.763344][T16993] elevator_change+0x1bc/0x530 [ 394.765041][T16993] elevator_set_none+0x92/0xf0 [ 394.766706][T16993] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 394.768745][T16993] nbd_start_device+0x1a6/0xbd0 [ 394.770025][T16995] xt_connbytes: Forcing CT accounting to be enabled [ 394.770445][T16993] nbd_genl_connect+0xff2/0x1a40 [ 394.770464][T16993] genl_family_rcv_msg_doit+0x214/0x300 [ 394.770479][T16993] genl_rcv_msg+0x560/0x800 [ 394.773870][T16995] Cannot find set identified by id 0 to match [ 394.774830][T16993] netlink_rcv_skb+0x159/0x420 [ 394.774848][T16993] genl_rcv+0x28/0x40 [ 394.774860][T16993] netlink_unicast+0x585/0x850 [ 394.785657][T16993] netlink_sendmsg+0x8b0/0xda0 [ 394.787341][T16993] ____sys_sendmsg+0x9e1/0xb70 [ 394.789162][T16993] ___sys_sendmsg+0x190/0x1e0 [ 394.790803][T16993] __sys_sendmsg+0x170/0x220 [ 394.792389][T16993] do_syscall_64+0x115/0x870 [ 394.793989][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.796006][T16993] [ 394.796006][T16993] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 394.798742][T16993] blk_alloc_queue+0x610/0x790 [ 394.800440][T16993] blk_mq_alloc_queue+0x174/0x290 [ 394.802196][T16993] __blk_mq_alloc_disk+0x29/0x120 [ 394.803914][T16993] nbd_dev_add+0x492/0xb10 [ 394.805530][T16993] nbd_init+0x291/0x2b0 [ 394.807058][T16993] do_one_initcall+0x121/0x750 [ 394.808724][T16993] kernel_init_freeable+0x6ea/0x7b0 [ 394.810535][T16993] kernel_init+0x1f/0x1e0 [ 394.812052][T16993] ret_from_fork+0x72b/0xd50 [ 394.813691][T16993] ret_from_fork_asm+0x1a/0x30 [ 394.813845][T16995] netlink: 'syz.2.3195': attribute type 21 has an invalid length. [ 394.815340][T16993] [ 394.815340][T16993] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 394.815360][T16993] __lock_acquire+0x14b8/0x2630 [ 394.815374][T16993] lock_acquire+0x1b1/0x370 [ 394.815386][T16993] fs_reclaim_acquire+0xc4/0x100 [ 394.825702][T16993] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 394.827688][T16993] __alloc_skb+0x140/0x710 [ 394.829329][T16993] tcp_stream_alloc_skb+0x34/0x660 [ 394.831065][T16993] tcp_connect+0xf06/0x5530 [ 394.832656][T16993] tcp_v4_connect+0x15fe/0x1b40 [ 394.834333][T16993] __inet_stream_connect+0x208/0xfa0 [ 394.836192][T16993] inet_stream_connect+0x57/0xa0 [ 394.837945][T16993] p9_fd_create_tcp+0x379/0x4d0 [ 394.839676][T16993] p9_client_create+0x563/0xd40 [ 394.841437][T16993] v9fs_session_init+0x3c/0xd20 [ 394.843129][T16993] v9fs_get_tree+0xb8/0xb50 [ 394.844726][T16993] vfs_get_tree+0x92/0x320 [ 394.846256][T16993] path_mount+0x7d0/0x23d0 [ 394.847826][T16993] __x64_sys_mount+0x293/0x310 [ 394.849516][T16993] do_syscall_64+0x115/0x870 [ 394.851097][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.853097][T16993] [ 394.853097][T16993] other info that might help us debug this: [ 394.853097][T16993] [ 394.856208][T16993] Chain exists of: [ 394.856208][T16993] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 394.856208][T16993] [ 394.861035][T16993] Possible unsafe locking scenario: [ 394.861035][T16993] [ 394.863584][T16993] CPU0 CPU1 [ 394.865256][T16993] ---- ---- [ 394.866901][T16993] lock(k-sk_lock-AF_INET); [ 394.868310][T16993] lock(sk_lock-AF_INET); [ 394.871111][T16993] lock(k-sk_lock-AF_INET); [ 394.871561][T16995] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.874006][T16993] lock(fs_reclaim); [ 394.874022][T16993] [ 394.874022][T16993] *** DEADLOCK *** [ 394.874022][T16993] [ 394.874026][T16993] 1 lock held by syz.5.3194/16993: [ 394.874039][T16993] #0: ffff888042119c60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 394.887257][T16993] [ 394.887257][T16993] stack backtrace: [ 394.889160][T16993] CPU: 1 UID: 0 PID: 16993 Comm: syz.5.3194 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.889177][T16993] Tainted: [L]=SOFTLOCKUP [ 394.889181][T16993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.889188][T16993] Call Trace: [ 394.889193][T16993] [ 394.889198][T16993] dump_stack_lvl+0x100/0x190 [ 394.889213][T16993] print_circular_bug.cold+0x178/0x1c7 [ 394.889232][T16993] check_noncircular+0x146/0x160 [ 394.889247][T16993] __lock_acquire+0x14b8/0x2630 [ 394.889261][T16993] ? ipv4_dst_check+0x1a8/0x3b0 [ 394.889279][T16993] lock_acquire+0x1b1/0x370 [ 394.889291][T16993] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 394.889310][T16993] ? __lock_acquire+0x4a5/0x2630 [ 394.889324][T16993] fs_reclaim_acquire+0xc4/0x100 [ 394.889336][T16993] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 394.889354][T16993] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 394.889371][T16993] ? __alloc_skb+0x140/0x710 [ 394.889388][T16993] __alloc_skb+0x140/0x710 [ 394.889403][T16993] ? __pfx___alloc_skb+0x10/0x10 [ 394.889421][T16993] tcp_stream_alloc_skb+0x34/0x660 [ 394.889439][T16993] tcp_connect+0xf06/0x5530 [ 394.889452][T16993] ? __pfx_tcp_connect+0x10/0x10 [ 394.889462][T16993] ? get_random_u16+0x583/0x7d0 [ 394.889478][T16993] ? tcp_fastopen_cookie_check+0x389/0x450 [ 394.889495][T16993] tcp_v4_connect+0x15fe/0x1b40 [ 394.889513][T16993] ? __pfx_tcp_v4_connect+0x10/0x10 [ 394.889534][T16993] ? __lock_acquire+0x4a5/0x2630 [ 394.889547][T16993] ? __lock_acquire+0x4a5/0x2630 [ 394.889560][T16993] __inet_stream_connect+0x208/0xfa0 [ 394.889577][T16993] ? __pfx___inet_stream_connect+0x10/0x10 [ 394.889593][T16993] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.889610][T16993] ? __local_bh_enable_ip+0x9e/0x120 [ 394.889627][T16993] inet_stream_connect+0x57/0xa0 [ 394.889642][T16993] p9_fd_create_tcp+0x379/0x4d0 [ 394.889656][T16993] ? __pfx_p9_fd_create_tcp+0x10/0x10 [ 394.889671][T16993] ? lockdep_init_map_type+0x5c/0x250 [ 394.889685][T16993] p9_client_create+0x563/0xd40 [ 394.889701][T16993] ? __pfx_p9_client_create+0x10/0x10 [ 394.889718][T16993] ? lockdep_init_map_type+0x5c/0x250 [ 394.889732][T16993] ? __raw_spin_lock_init+0x3a/0x110 [ 394.889748][T16993] v9fs_session_init+0x3c/0xd20 [ 394.889764][T16993] ? kasan_save_track+0x14/0x30 [ 394.889775][T16993] v9fs_get_tree+0xb8/0xb50 [ 394.889785][T16993] ? rcu_is_watching+0x12/0xc0 [ 394.889801][T16993] ? __pfx_v9fs_get_tree+0x10/0x10 [ 394.889812][T16993] ? bpf_lsm_capable+0x9/0x10 [ 394.889824][T16993] ? security_capable+0x80/0x260 [ 394.889837][T16993] vfs_get_tree+0x92/0x320 [ 394.889848][T16993] path_mount+0x7d0/0x23d0 [ 394.889865][T16993] ? __pfx_path_mount+0x10/0x10 [ 394.889881][T16993] ? lockdep_hardirqs_on+0x78/0x100 [ 394.889896][T16993] ? putname+0xb1/0x110 [ 394.889909][T16993] ? kmem_cache_free+0x127/0x6c0 [ 394.889926][T16993] ? __x64_sys_mount+0x293/0x310 [ 394.889942][T16993] __x64_sys_mount+0x293/0x310 [ 394.889959][T16993] ? __pfx___x64_sys_mount+0x10/0x10 [ 394.889976][T16993] ? rcu_is_watching+0x12/0xc0 [ 394.889992][T16993] do_syscall_64+0x115/0x870 [ 394.890006][T16993] ? clear_bhb_loop+0x40/0x90 [ 394.890018][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.890029][T16993] RIP: 0033:0x7fd30e79ce59 [ 394.890039][T16993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.890051][T16993] RSP: 002b:00007fd30c9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.890062][T16993] RAX: ffffffffffffffda RBX: 00007fd30ea15fa0 RCX: 00007fd30e79ce59 [ 394.890069][T16993] RDX: 0000200000000040 RSI: 0000200000000680 RDI: 0000200000000640 [ 394.890076][T16993] RBP: 00007fd30e832d6f R08: 0000200000000080 R09: 0000000000000000 [ 394.890082][T16993] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000000 [ 394.890089][T16993] R13: 00007fd30ea16038 R14: 00007fd30ea15fa0 R15: 00007fff6c9909b8 [ 394.890099][T16993] [ 394.897628][T17002] netlink: Conntrack attr has 4 unknown bytes [ 395.181489][ T847] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 395.311449][ T847] usb 9-1: device descriptor read/64, error -71 [ 395.381043][T16993] 9pnet_fd: p9_fd_create_tcp (16993): problem connecting socket to 127.0.0.1 [ 395.551909][ T847] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 395.631715][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.681662][ T847] usb 9-1: device descriptor read/64, error -71 [ 395.801851][ T847] usb usb9-port1: attempt power cycle [ 395.961635][ T5752] Bluetooth: hci4: command tx timeout [ 396.151497][ T847] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 396.171914][ T847] usb 9-1: device descriptor read/8, error -71 [ 396.411496][ T847] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 396.432672][ T847] usb 9-1: device descriptor read/8, error -71 [ 396.542209][ T847] usb usb9-port1: unable to enumerate USB device [ 400.801527][ T41] audit: type=1400 audit(1781400886.107:5302): avc: denied { write } for pid=17009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.832578][ T41] audit: type=1400 audit(1781400886.147:5303): avc: denied { write } for pid=17012 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.893703][ T41] audit: type=1400 audit(1781400886.207:5304): avc: denied { write } for pid=17015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.921488][ T41] audit: type=1400 audit(1781400886.227:5305): avc: denied { write } for pid=17018 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.310031][ T41] audit: type=1400 audit(1781400887.617:5306): avc: denied { write } for pid=17021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.344942][ T41] audit: type=1400 audit(1781400887.657:5307): avc: denied { write } for pid=17024 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.980793][ T41] audit: type=1400 audit(1781400888.287:5308): avc: denied { write } for pid=17027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.019746][ T41] audit: type=1400 audit(1781400888.327:5309): avc: denied { write } for pid=17030 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.111837][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!