last executing test programs: 2m51.891561025s ago: executing program 2 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93", 0x2b}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab336", 0xe}], 0x2, 0x0, 0x0, 0x7400}, 0x4804) 2m51.889922836s ago: executing program 2 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, &(0x7f00000012c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2m51.721447514s ago: executing program 2 (id=78): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001040000bc00100000002dfa5c6e752fa64800009500000000a2dfb3"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) 2m51.697784331s ago: executing program 2 (id=80): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) r2 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$TCFLSH(r4, 0x4b45, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x401, r5, 'id0\x00'}) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffedc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m51.480318982s ago: executing program 2 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1c, 0x200, &(0x7f0000003c40)="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"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$CDROMRESET(r2, 0x5312) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x9, 0x9, 0x80, 0x6}]}) 2m51.388201726s ago: executing program 2 (id=89): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x44f}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x9}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) recvmmsg(r4, &(0x7f000000b7c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000180)={0x5, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) 2m36.319168455s ago: executing program 32 (id=89): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x44f}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x9}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) recvmmsg(r4, &(0x7f000000b7c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000180)={0x5, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) 20.837464642s ago: executing program 4 (id=2148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x800) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000100)=0xffffffffffffff3c) 20.837022447s ago: executing program 4 (id=2150): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb000008000300000000000a0001"], 0x5c}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000340)={0x9, @raw_data="5f969e5b5f0065b277ac059d3c1e8005aacdff6bfe902cd5c36d88527eb2277a7fc34d9657c308107cd9b741265fd42a5ce8cd8184cafac0ecd7f19005ee4757ec37ad1ac030278346599dcc22be5e615773c14472e003d73dae5da6c9d4655919638c551acda8b0e9cd57704b09a2a47cdd63b24602fc0bd2480b4ba9861ab6cc804518633f90b47580f78cc72900140e4a51080ceedbe312cb2d605e8fd044d1204816ee3c56caacf030d017cacdd595c1fe693b199bcf179c3cf2b2299baaa6d3c3c7340fa5de"}) r3 = accept4(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80, 0x80800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d93", 0x55}], 0x1}}], 0x1, 0x4000000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x5, 0x7) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000100)={0x1}) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0xd6a00, 0x97, 0x33}, 0x18) r8 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) listen(r5, 0x6d5) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r10 = accept4$vsock_stream(r3, &(0x7f00000012c0)={0x28, 0x0, 0x0, @local}, 0xfffffffffffffd07, 0x800) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000001340)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001300)={r10}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000200)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000240)=r11) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000001a000100000000000000000081"], 0x24}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) 20.710154583s ago: executing program 4 (id=2152): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x1810, r0}, 0x0) r2 = accept4$ax25(r0, &(0x7f0000000140)={{0x3, @default}, [@rose, @remote, @bcast, @rose, @default, @default, @null, @netrom]}, &(0x7f00000001c0)=0x48, 0x800) ioctl$FIONCLEX(r2, 0x5450) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="d312151d4a3f53760ae134261e4d55db505b0e3ef289f4c97ffeb39f97111c7fe82b7b918438efb3ef29f632c63155e512c443ed7fb2d24acd9a4a71229f88e090fdeebebc9f0dd3fe507359eb9d0c90058f69503d2238c6192b187d68e9fb492f7b7c336bc37fb87b099df1b729f7ad48d25b805939", 0x76}], 0x1) pread64(r1, &(0x7f00000002c0)=""/129, 0x81, 0x1) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) setns(r3, 0x10000000) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000013c0)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001400)='/dev/comedi0\x00', 0x80000, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001440)) flistxattr(r4, &(0x7f0000001480)=""/238, 0xee) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000001580)={@null, 0x6}) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000001680), &(0x7f00000016c0)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001700)={0x0, 0xbb0}, &(0x7f0000001740)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001780)={r5, 0x1}, 0x8) write$tun(r0, &(0x7f00000017c0)={@val={0x0, 0x4}, @val={0x2, 0x0, 0x3, 0x6, 0x7ff, 0xc5c}, @x25={0x1, 0x1, 0xb}}, 0x11) r6 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001800)=@sack_info={r5, 0x1, 0xffffffd5}, 0xc) fsetxattr$security_ima(r2, &(0x7f0000001840), &(0x7f0000001880)=@sha1={0x1, "100491ff22218173a767ab08761e9a1f9cea593a"}, 0x15, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000018c0)={0x7, 0x10001, 0x4, 0x80, 0x3, 0x4, 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000001900)={'xfrm0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001940)={0x1, [0x0]}, &(0x7f0000001980)=0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, &(0x7f00000019c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e22, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x1000, 0x2}) connect$x25(r4, &(0x7f0000001a40), 0x12) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001b00)={0x5, 0x3, 0x0, 0x2, 0x5, 0x0, [{0x4, 0x5, 0x2, '\x00', 0x2504}, {0x8, 0x5d00, 0xbc2, '\x00', 0x1100}, {0x7ff, 0x5, 0x0, '\x00', 0x2900}, {0x6, 0x7, 0x6, '\x00', 0x1e83}, {0x0, 0x3ff, 0x40, '\x00', 0xc938c955eca9cb90}]}) 20.641390681s ago: executing program 4 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x1c4, 0x0, 0x400006}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 20.510105777s ago: executing program 4 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2844, 0x528b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040) 20.170062849s ago: executing program 4 (id=2165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01082bbd7000fedb9f250c0000001800058008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x268, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x27}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1f7c44244ed000eb781b2146f3e3f77feb5e5b9abd1747dea40df95727bc8947a27b7547"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xec5}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe75b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66ba}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdad6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20040}, 0x229bf7213e4a9047) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 20.115675844s ago: executing program 33 (id=2165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01082bbd7000fedb9f250c0000001800058008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x268, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x27}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1f7c44244ed000eb781b2146f3e3f77feb5e5b9abd1747dea40df95727bc8947a27b7547"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xec5}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe75b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66ba}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdad6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20040}, 0x229bf7213e4a9047) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 6.42582889s ago: executing program 5 (id=2402): mkdir(&(0x7f0000000140)='./control\x00', 0x191) r0 = inotify_init1(0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x104, @tick=0xfb6, 0x8, {0x9}, 0xf, 0x2, 0x6}) inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_init1(0x800) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./control\x00', 0x80003, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r2, &(0x7f0000000340)=""/82, 0x52) getdents(r2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x410012c1) rmdir(&(0x7f0000000100)='./control\x00') 6.329563975s ago: executing program 5 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5a68eed0e8cc3f7e}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x70}}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5a68eed0e8cc3f7e}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x70}}, 0x50) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x6a65844, 0x7, 0x9, 0xffffffff, 0x9ec]}, &(0x7f00000000c0)=0x54) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.328781518s ago: executing program 5 (id=2406): r0 = userfaultfd(0x801) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet6(0x10, 0x2, 0x0) (async) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="56cc9da3987ad4db059ac72312385f0aa97de8e5fe9300244a94dc98c43117085ae674bbed47cd4b84f87bcc6b931676728bbcffeaf4b1cd03e289da764b5d4ec3b99798e103858ececcb0a74dc5d8347862028d735ef3ffc60c8aa08e76fc5ae885302f0968647b96771229dcfcd654559ed16c4f5f5b825aed96b749412ea1c725b26e1ce33dbdc00d9e23945bb9bfc8a8bbaeff9b15169335d4b29e0a4459f45dfe85f401ddf7e39911369a1f852beb3247e54484e3e3265071cae74f580bd8b121215efc10f5bd6e4e25f7148ce7680f39b53c552d6d95a4107b17d904fd78eaf9cc4a8c2f04be1eac4870d76ae96a2f51c3d932422d0450e5850a02fdafe567dc2d05ba137c6d47db1e20e2daa0cb75e2bcad4a2945e1e414c21597faaf455e0288525869fdb4ecf8f47c917f0a330510f27b14d582dbcbe1db90d0d0eb9642cb035a28ccfb3e6f8eea79abb4f123eb1724750d86c508801737219ad13f6c297ff33eb2c9813e8322fb67b9d2d88464e59e623072725c5ca0a6080f522d416f7d105eef2cd5f09a05c34c8655cd31534261f5d16fe7cde7fe5c7ed625a0ab1f84246f9588078722cf2009c5402a2699c5b502b56b8e4ea2a69de6cfb688797f647302ed08ec4f494e13576796861209706c398fabb6ecfb45e5f18e198bc3f25c397aa2160d8fa2c746848d6483d7e605699cc7e60f1c29cf77a099d854854bf124502a2107192986e53565bde0e384aae3703f87753e50a5b89f40f4ca8af412545bd61c5fa793dafcf519a0b5802524a817f85be279ec7482d7ce895cada051a7f1065c6d6daff4ab0876c508c22987b07379032cc8724dcaad4c9d0bbec08faf9e4ae88c60cfa4297081a47abc550f7e873ed614151a1be72d7ec22cbff91fd3e5307bf76ad7290c391f85c4b9fd6e68040fbc30b87a747b0fa9d41986c8eb23657b5f3eb47e8e4c22560b9e02aeadf78262954f1311c35d97061f28af57c9ce1e6631020660cb829abc230b274becb4d35e6f63dae601985586095eabc5778d4f774c6cc48b1eda41ab4ee1347ea15bd490b8a94263556551c9e659e1d56cfa6b7abfcaa92d5f6a9725c4c386cd3035a8330e48588af36e348e70969205a608e0813544e38c759dcc2c285cdac3aa4fa98944b103b70ff2d6fa1718a079f16e3546fc1a002534e45a41b7f38cff642ada343461bd5335ffae0526ab6f9f578c6b86f67073a3906eac88ed6881a07d3df9c88fc9717591b9c16b30e9d9bfdd61d6f03c8b000d0f9878ad88f532cfeb9ae7bbb357c24cb3b9dc090b1c068500c990d00bfba04664ed27c49bf7049dec6130eb4167becbb6b0e6f49678c781a1ebaa4ce3d3d2360d2a1769dfa48d94f52cfe91d88d5fa707d491ecea647ba45b4aa300335ffddfa94d1eaa543ab1ed276d5ebe5e1a54c3e89cb0664bf901b8a310f15d983fcc11835f2a91f40cf3a68a6eafd6080e6c4fcb453a4dae3e43eb413322b1205e92a79e4bd5cb14839f0371e0978c37213f2971672be6b8ec4f36fc25f2c096d354cbfe947f3a7eeeffa6e38e361c551944cf9dd57d32953d3e7e24b455fc3b4d8b43386b646ce60a2f1982c8ccf2fc34c1195c30aea052775c94f5d9131628375d4c7187d36220b10efd68f45932d2b577758fe666010936968377dda144282006b7f8bb30a211cd468e36734394fdd36ded11123ac4cf59b8934d8bac1878a23762f526318b6f53cdd600282a8161f9eeee1e3ba8d9959e9dac68db5c7a88436588b340f417b0a362ea0c5f5a6030ebd9715bb8f7f3c3da029d118ce9befd1298e20f0bf3bc044da8aeb0257386acab518f6f1a664abaa363bc75a9d5e1d90e6f37d266025d59d5892f9f14919214fa449340f3d2de29c0491790c157e4f9fcad5d03b3127ac7ec6af192d1b5aa69d936aa31505e65945fc36ba04e08f6e6ff46a33a34fa42f51b0a6eb3cde8634494d77fb26df9d502780fd62263490136e0c037b7285dd6fd2d3b06e39f6258c82bee6d3e4782ea7bc02a006b9d3a564dd3dbac5aea271df49636faae5111d5a5e6733cb7a7c1564d816c9d1aa1fa39047177fe5bbd9a272d50fa36d047533ce2ea17c91cb79162754812aa37d619660c6206fd8697e931cec76e89474f960fd14b901841904aff33b72963b39d30655bd0323d5f837c92eac878effe41782b25bbde4e93f6ff8a34cccf499a5a72565a7fe25fb9878445ee473859e8743aae6e38b6760b6452ecc2d57ae5794214c4f111d9ede05e9e2619dbae7184ef7fb6fe4dbf96fab4195e74c9a40d01842e4dea36ebba095ce1527287064ed94f251104524e11e97481a88138074ca2d67e08c1d63b76ca88390e59a17b81b6b9ef81237509329ee30e15c24d63372bd65ff92b1cf7ed02be8200d97a660e8fa1ba906f91a27881d81cbc5b33145baf034d4d22312aaca81b13a8607d9bef65e793f66dc58bd32e0a5eed9f8ae4ef0fe45d7b733f368951ef19b21383457a9e9109eb1c83d796e3ed98f368654be566e893be30d80388d472325ccd79455fd6f6312e39c8be43509a484ceba35bc67aaa59f1cd5d1dd375c5816edd01a2cf72c4dbd34f486e019b626019e38cf4a03445eec2f2d3c069b6ff7b039025bf8745d3a345b0cb8335a6d75262001c78bffe6ead7dc8972fcfa1ee711eac1c785433740bdbf93cc55bd46fa69cf5d5447cf7af30fe20738a2077ebd2db7e0b67a66033689303056a7b699c6763cea3b80c420e9de87dd0d30de5b15dd6012d3ef609e180c9d261c6283d602317609ce5065c9897a08fb635ddac7b1a12d866a1c828986792e1fab0dc1aa1f116217053bd53afe8cad62efc42fc8ce15c1ada91c88f723c25a762ad75d1d3da94723e84b018d8e856bef83031800a0a8d899f5ff93778bd39a4a415ba2f96c87fdd3a175f01d130369fb0c61900eac1759de5d92c0dcee73cdbe527398a0627f6b6efabdaa68b2ae7365645f59884942fe152153bf0ca55c00e82ec01fa01ffafbaba8872247639fe15e209e3b823693c2a790b77007799d338a7e6c3c5a078a5eb7c6612afa6cb655adc9b7fe259b594e42e2f2df1325d9f36d6e99584cad895b0f8f0e1e975f85aa5dcf34ada08c2803e7d143dfbc2c49c363d67cec2ff0fd1a0a63b407a372f6bffbe1cd0841fb2969e66ebbf5682aa9cf3dec71f512e249b4adfb2439ea7a129691d707b6453af4bb89df10a7742300b40e0619b250ba1a3a97e12bd9eef6b68429e4faf3354d4b30ed84c1452d26957e86170b1099cc666c09dfa0ffd85c5df6ace51bdd5433e29fc79297d4695c79dfc2a84f5245fd7610081d5e9116b4a5a7c126f7929a4b93b7afb6a496caf77476b0dec28e23177fc942c377b2384898698110bc0742c5dcc28ff1a5f6856a472c6d325597d006f54e0864086225a686730567b5b88470e55a68d4bd8d68a7a1baec8dd37e142729920d8cf6373e0f44f73f740a09500ce68ba6f7f35b58cbaa825281299222c6ac39cb73c12aba93f8d33660c08bc331ebbee18fa6fb5851329a7c519f1402abca86ce3e3e26e8780ca0f7dff3f0b230aa2a6b2851277073aa42fd399da17cbb67eee71a93418152baedc14ee464c83e1a3d1e7741c9f1fb93eca09c78d10576b3450f4dfa9adea73f90d1d3f1d2d24ae9ecc626622a76417a6da1bab6b5ec7595f9a50377c2c2f5f9eccf86d808105bbf13c914a645b4e90f2bc2987414c03382b7affac82225406363f9b3f6d33edbe019bf3256ff3e0bd2e2aadcb3a563dac3b063f5f1b30988c43238ded26433f760c3abab24d540996434d58900662af3dc5455268f2640172b072f3be75bc757153eb3614bf2ec8a003d25ff83aa195af892342e1a4abee8ad08b2e0ccabc8b69953da72f3d89457c78341929d1a834d90937542aa91680eb6d064344fb4af5bfa1d79b10d415cc26b7a0f913840ae3b9ba9b97936e886f61df81231e73e3da4bf5fb02aea5f6ddb162eb43e2b0465b5582490d28ef54ce8ab9fce6d94cacc3ee099b3bb4362b578666d7d53c904c51c0f97e7ea604c9488e80c44b960fbf0e1212fd8b5bafbf5d3aa07e2d94928b23a9646f4f4ee954c7b6d3910cd9bb9521b74704c713ff548babee97af4d490af9537f9f960222f4b9c028fd7c6ba17e9566a8b430bda6b1f736886ea78211861aa1768e0fa3c4b89f641256bcd1b9aa1bebb8c1af9bd4a2db48ddbe5e1ca0a63472057f23b23744b84f3914dd206d66fe62d7883da14afa506151a4b1878acb2ce04a1b7d2e5197f2acadceb075b119b78a8096832d0134909c9936e47a253dbc8ee079a7ff83b4091c9aaee09aa984d84c732a1acc48fa4318870893bc40a04d9ee8ac38155a4e366ae4c8f74c9ee46417439a437cdd7567f8317e15d71977696c5aed7e1e23bdac2196e4d71547b456f466ab03911e0c04edbd545d26aedb768c0083a6c073c4eb0b17b46c74e0156dc67a4ce46bed080d0580dc5899e9130055073ce470c0e9c784b90bd6cd7a6eb9981fe205b8aa870c5f9b43a8e8c968d8f500f9ecade9d611950381db280416410cdd08d974fe124991203cddfd1ebde34765b76d31be28a8118779fecc4f8d65350ef9a592a61802e67ae7e01877aa123a6817e858d1e3879385de91d8caca42391b04cecb825b2e36fa055fb6d861567dcfd2ff769102a6410e8df45a369bae107a168e672d4c540deef9a71a3c3e33616fb60cbf78378513a4b5155e79cc09e3dc90db759fa0caae9ffef1c9f4d3bd6d4f98c4ed925e61d4ff75c211210f360a43f5fd5233f0e464c190f75b202b6d108ffd3f721a8e6ee36ee072d00988276b8803324cb751754df65b961dba3c6bef0f8775d4bfbc93c60266b6a446ad010af043f01a9c17702e5c8f486719cc2eb2169e890a82f3158d24e6d9b8a7d77aeaf28c549b6c4611b11431156eb327c0a67b2d56c2c9c5c91c222d1699933f752a4b2ccb6d8549d496a937c648d649e0e5d4a4fcc8875fd92ae3f65281970c10bbee99d48f09c91a0f022d60a35ee56bb9c72aa7928322bf418cb6d71860f34c0e3e7e6dd3186d4b84ff6daa94016a0db4909dc9c5abe59b8e22cc1a14813ba00beaad5856b9c899d6b7553d9f2aa6ad53fe59be2d0d914c787d4f74a2e2ac5d3d04d2c5c62223fafa0be3efe74edd9d1784eaf481073d0c7e13a22aa0dff978e13baaca886d5da6f5ec019db27157270f18c0198d9bedbb5a15eea735021f53ae8a5304524926b5c545183ecf1baf195bf76f6214d74939071233a4901c70c0955e1a2fa71686e0d3e1810c87931e647b6e994dc85f5852286581a5f68421ed3af3609844cbd6cb49f97ac7ffad93957d672f9d8b564dce8da1800540b68fe100c8d95ca64f93bf746e8cde1ce96f0111b4db46be651b5f1e91de5564baa0f149c1a09fa6a5cdb3e07d6ab4f5d6433ab1c6acb02cfbc07fd3fefe39fa2266a01bae35306fdeadcc157502e491be94750923d305293a405c1eb4492e08696ddfc858cd2441883bc8467ddc054c0439292d0f034857c8c9640888003d2683fdee182e125122ce5c4afb78bbbd66df135ae898476943c0f2704bab0160177e7a3a039ff436b92d669c5b5907b89c08bf8ca2474e4097b0aafbb43a07295fdf52b95c51f5c29604bbaefb97098ec4bc8a8150929d8c4a35846a4eb353521510ba8aec7fa0e50419d5a64883fc9e6033ef11fcc2683458015e9dcdb0af1f0eadae9e86c0584939a3c77b2b1ceae71f0de541f89e51e3", 0x1000) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2}) 6.235609643s ago: executing program 5 (id=2408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000180)={0x283e, 0x8001, 0x8, 0xff, 0x5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000065c0)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r9, r9, 0x0, 0xfffe80) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2000, 0x2}}, "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", "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"}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xf000, 0x3}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30bfdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f0050079601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5820a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac980acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de628d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e55037859293e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd41d704bbdba7d282aac778b7ec769ef984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a5518b3c1de451f220c418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 6.058095358s ago: executing program 5 (id=2411): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b32376d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x6, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0xd, 0x4) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000440)={0xa, {0xc, 0x6, 0xa, 0x4}}) 5.86645998s ago: executing program 5 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x4, 0x57}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000000010000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280725eb8620800070062f40800191ff2de84ad7a5c8a9b661e7f222591e72beb1cce91c1a613d55a678a105fe032bf8be82c0c4acdb3ad9e1e01e466dc2c565a52c8c68d2597eb363f5c3b588922d8a8810580fe38c8d485ffcb90f1948788bfa4a78a60ef55849bd99c8819936f8a9800608ad869b56aae3ff5f25978754a9a796078b547ab25f1055b32f33dcab61a7e3a340b1884f26bc46fd680f6224b182bf50ac41c96185a9a2fa8a109c26fe9e3b8a4ea0a4c8c1ba420780de7def9e78f11d3fec6cce7d56fded4f67d9a29ab619fadf68f364fd6e8751e07c0e9000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 5.806039023s ago: executing program 34 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x4, 0x57}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000000010000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280725eb8620800070062f40800191ff2de84ad7a5c8a9b661e7f222591e72beb1cce91c1a613d55a678a105fe032bf8be82c0c4acdb3ad9e1e01e466dc2c565a52c8c68d2597eb363f5c3b588922d8a8810580fe38c8d485ffcb90f1948788bfa4a78a60ef55849bd99c8819936f8a9800608ad869b56aae3ff5f25978754a9a796078b547ab25f1055b32f33dcab61a7e3a340b1884f26bc46fd680f6224b182bf50ac41c96185a9a2fa8a109c26fe9e3b8a4ea0a4c8c1ba420780de7def9e78f11d3fec6cce7d56fded4f67d9a29ab619fadf68f364fd6e8751e07c0e9000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.0591021s ago: executing program 6 (id=2465): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0x3]}}, @enc_lim={0x4, 0x1, 0x3d}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @remote}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hopopts={{0x1c0, 0x29, 0x36, {0x5e, 0x34, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x80}}, @generic={0x1, 0x6, "2bdb86d1ce6a"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x398}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x5) ioctl$TCSETA(r5, 0x8924, &(0x7f0000000100)) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f00000001c0)={0x0, 0x40000094, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 1.589545461s ago: executing program 3 (id=2469): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @broadcast}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1000000010001) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x64}}, 0xd4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x4, 0x4, 0x7, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0xf880, 0x5, 0x1}}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf251000000008000800040000003000018008000100", @ANYRES32=r1, @ANYBLOB="03000400000008000100b1404fba73cc", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c30000000000000000000200001800800030003000000140002007767310000000000000000000000000008000900ff07000050000180080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000080003000200000008000100", @ANYRES32=r1, @ANYBLOB="0800030003000000080003000000000008000600020000002c00018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080008000200000008000600000200000800090001000000"], 0x110}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x2c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040084) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r8], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x1}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x5, 0x1}}, 0x98, 0x572, &(0x7f0000000080)="7ca20daf5518cc1bcc35a5054bb470c16883b58ccff5b2c0955dd0c7d69eac937eeac6c67efd64002be137b071b1692a7770539b8abc87f0e22797e6462b87c9f19376e7e77f23afeec30cb2ce00f900b8504eb8ae8d2bcbb30c0ab65f62ea1dcffb2e131f84b44d7dc349d569f21a087e7f36cef899cd29434e922652e06b67f03f6539cf8482f5d394d2a9e66c1411175712048c3498c0"}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x20400000, 0xc, 0x0, 0xfffffffd, 0x20000, 0x0}) 1.449570982s ago: executing program 3 (id=2470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mknod$loop(0x0, 0xfff, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) (rerun: 64) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4002) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x1d8, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x23, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0x7, 0xc, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb2, 0x6, 0x6, 0x0, 0x1, 0xffffffff, 0x0, 0x6}}, {0x10, 0x2, [0x7, 0xce1, 0x832b, 0x0, 0xfff, 0x7e19]}}, {{0x1c, 0x1, {0xa8, 0xd, 0x3, 0x6, 0x2, 0xfffffffd, 0xb8f, 0x2}}, {0x8, 0x2, [0xfff, 0x3]}}, {{0x1c, 0x1, {0x3, 0x4, 0x3af8, 0x4, 0x2, 0x6, 0x80, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0x9, 0x7, 0x2, 0x80000001, 0x9, 0x6}}, {0x10, 0x2, [0x9, 0x7, 0x1, 0x0, 0x8, 0x9]}}, {{0x1c, 0x1, {0x9, 0x6, 0xa, 0x8f, 0x1, 0x8, 0x4, 0x8}}, {0x14, 0x2, [0x5, 0x4, 0x6, 0x2, 0x0, 0x7c, 0x6, 0x5]}}, {{0x1c, 0x1, {0x5, 0x6b, 0x66d, 0xced, 0x2, 0x59d1e3ab, 0x5e25, 0x4}}, {0xc, 0x2, [0x792, 0x7f, 0x26, 0x8000]}}, {{0x1c, 0x1, {0x40, 0x4, 0x101, 0x8000, 0x2, 0xe5, 0x100, 0x2}}, {0x8, 0x2, [0x1, 0x4a]}}, {{0x1c, 0x1, {0x7, 0x0, 0x2, 0x7, 0x0, 0x5, 0x20000a91, 0x6}}, {0x10, 0x2, [0x9, 0x2, 0xbb, 0x3, 0x3, 0x100]}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async, rerun: 64) r11 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) timer_create(0xefe5b9899fda1222, 0x0, &(0x7f0000001d40)) (async, rerun: 32) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r12}, 0x10) (rerun: 32) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 1.249368469s ago: executing program 3 (id=2473): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x40200, 0x2) sendto$netrom(r1, &(0x7f0000000040)="c6d624cf60dabc", 0x7, 0x4, &(0x7f0000000080)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xd8, 0x0, 0x0, 0x400, 0xa}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x401, 0x6, 0x3, 0x3, r2}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f67562d79af2df58"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfd}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="539f4374ec5a3252716dd16eb1be88b1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7d31cbacba4086e4b5a3334dc07d7a5d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="292b148f1ba940ce06e26e94f79681b4d1035a7ba8d9c94b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "65f5aa324d6e6d48"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b8d7e115978598f16d84ba2684f3aab5"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40801}, 0x20000854) (async) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f00000004c0)={0x400, 0x6eed8c5c}) (async) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) write$binfmt_misc(r1, &(0x7f0000000580)="1e95892eac8fccbc0fb65e92fe49f266cf1ed90e1af8ae99c4439945b0afefc6dea4722b6c3de87ca4f8cc3f68ef190537f8ba21d32aa19aa92156dfc46f99933f8a3bb5f9427e1d02694f6c228eaa32d4f1586aa4e2c95d8c7b3b982ed6ca4d136f3b783b757ec577fa7cbc4e0e4197abda373a5d2b1095ee24d0d54a0a2151cca82a267eb066cc7b96d0685f9d5e331edbd089bf85e2dc6204220f66c2071a813c0990460758dd64d5bc0507c8e0d10dc96a8d7a7b15087a0b1a4dd0baab4c17642d25fddd080ec6d82eeb38360afa6890d595e69d93ffa4305719ea8cee16684be06f427cffa345db3789a91e8de9e947ba56a469f00450a0abfb88bcd0b899a93b1849198f4243d260e2cb72be86232796c46da5040564e75ec2a229e8b56a54324a56442a43b050ee7fe4b7148bb559e94724087681005d03faf803aaa7b4b36720f6ef53771d64b3ef80404b95594c6dabddd08d86b5c9575332ce27449e443c2a0b2cc183d7f127320e91ad6540f3c7dfa7587c1a8d61c0649d8110191521b72f228b55820674786f19bff77b841f1a97f7ec6224542dacbe9af0840dc9315801556b3f236247bac543b4828495de3328a13b51c64fa2fee71997e38911dcd04cfb0e73ab892fdd1da84b6384166325839efc69e8cefd203a59f6d68947cd857fc8330c00487ac993ae41381f142122c184da019794b35ff1b02d12379f89b7c6fd092928e6f61c09188c94b180cca9572ed6ead5c44e10e96495bc916714368e1ed0641d62d0b9e083e3c9bcb2f66e641322d64522602efaaf4b8446ffe3ba6fa49d4494dd8cfa2d51acec086717e9d0cefef277561a07b3bf231f6a2be37b1a3ba98d9c3d135c559c2434f66277525722b9c685c67136d8e1fd578c0ab21e331c8fd521125aa02854b6874712cf438a5ac425ffa35c533cdfb2523606bfd513da7609658ea49ace4c442359ff219cfde31ec9cc9f9ee0e89c0e0296f3d0576e9d2001c8c1cc5f4df65b2e8f6449162e780ca462cf5a052828c99d302c408aa33404c9e47f9e6680d7b829f46418574405aa106f056a893055b55bb95b1eb269c9ddb7666d51b867ba90fe1f010a1631421212a4340044ecc4c3d8ac15adf1a63536e5b1adf23a48206f8f25213caa1d2cb1d0094dbae9a36d71fa32079365b1e013c51c215aead7193c356d8dba3a5ed995a19434888782e9226486b2a33032ea5e403549b7fcd3267da94392c2a7e9bf40aef1849cd6fe7f85da9e4b94c2a99b4dfc76d5b5f01b8ff6890ce6f3fa433c9310d57e1554982cff5e3bfa7aef3a7aad3b4364574bd47d2a48ab83746bb2e367fcbf2fe5f7cc9c7389c19d3c4ba72aa4a2a0bec7d0ee794a734289bbb0fec7193a8e2a8231fcce067544b11b7838b9ce8eaad647c91ee72045214f46d8819096291d122b5c00705cc6f226bd19adaf44ce72b6bf30cde5d83af1978e4654a51aa306086c38d2ff9d1a10fcd1561240b5bd9cd3111eec382747ef103b3190a39e1fb4aece2c943ff6f8d7f3a6bc725038b11883174d97e4a5910e542a55e98be2aa5acf814b9a042b74d5f64581376802be878b5092a00f7ed4e4525bfb5f09d43304845aa16169e20e1058c850c5ba245d11c13d7c59e249418c94b9f9d6cb72931fd704b09f66133d89f0a0639fe08027ee617943a6451908c653e44abe386d24915e6c0a0af79c95748fff8ea65b71043ad28b3b94f1d06aeb38ef936e60f02a6912f49fb2ecd0d67df4a8eecc8e9c3b4de8caaa85b3554e8814f4a6d2fcdfce31062a84a8d039574be1245ab2f79afcb7c1acfaa94493b5c513c2bafdcc78116d1197a8ccdce76f2dc2effde375a6e365d367b92f2e2e2d7e5912ffcf1ee4178df6d83a47b6d557732f9adf66956c839f52144e044c68ea5def4aebc11c60a7b7830d48a34d405eec2d06941ec6424818ab88e8052b024b75df0d77c3497ba7f388d03d5663e82ae99244013096ef86e1f6bea2c1d1f807304d02e57c768a2dabcbabe1e9cadc7b491ffa6adae9918fb479c2dbc9dc9c81ca432aff3d3482145b77e9fc2cc9a99fba698417341c78a26e495a403088a1e0273636e84de60a6289d7a889bb19cb6fb580fb992fbb5d67001e02102ea875ddbc71efeb2b5f9f72ba633c63d68511914902032e20803823328852fe01d319e5dac04cd73e1af4592b9db979961dcd5452015f69e5a26e19cf34e18521164f29f9e872edc5fdaf350de704648836a472de9ad24bb99dad8eedd5c0f72167fbf7a7ba081c6ffdbf8995cbaf14bf60125b111a09f89b06ebd35e76b3db2d7b8731f67b735a39396a495084e45ae7a345124746361fb77807187a04a6bc757eaad73b25c4d5a5cfb6a334af2352e2b7cacffad7097436b428a2b1c31843c68f5bebcf7374e3f6bc94ec5e35c45cdff55071780fc5626840f30aa0ac09890caa9d8ef21565e32009507d27c9eabca91397b138f086fba372441c24c753016b045b58036f79d164a24f7c3e04cea27742e5fece5dd48ecbab868dd333a6e3a8ef8dd7e42d4dc2668ea5c9819f935cf69e688d74da4ef233af1f2f2cb6d84d6a6788b98d4295cdcad6ccd82cc4d49472f2edcd1da1d73e7c6238fd1dd8928a18dd842c86d240a547986bde95175968c85bbe47d8cc14ba140af9774b42c559595216d86fd3d506c5141859e5f51f80b714ebb5f3e57957cfe01dd01db83d148915d0c36c5a46053e9b90940e533eed734bd61e07d6042a6b115255f649fe279f4aa227bf45c2cb91975ce026bf0bbc9006ed4818d60793aa3904ac98e71eca88e241c550858788abe3e7e69270e960ecf4d5872136179579108f3174e56cac8da11ac7ff3bd603722d9ff0e7cfa83dcc477fa477feda53baf63104f501df987e13c3b042f95d12c34dc0e204bd30d3ac528f4741684482dfdf301413dcdfc3e5977e90c3abc39cd93d11a806d440936736d63d3988dbc589273dccf62fd5023ce7d0aa3f0c8c039d1bd4f3615a3b690f2a6ece2f8a0161267fbb9e67e7165b3ce141990724a352d50863241404bb5c7626a768dace3dbaa9342de78ec77b4097073de49e66d33e557f162ab8211dc64a2d88af5e3fa5ffa2eb2a7d69cf4a60556f427dd80ff274282a9be821a65ebd88b2a6b341c83e5ed17c6bba56d99a38371838e4c48c3041cc158255307c41066dcdf5880c86a53e01b2fb61eb392d5fde97cc11ace50cbc6530b4c4e097384e635871149e09af0cb89bd051b300136ecc28334f18ece2d00f4fe29039ba5dbe8dcf843cc0075bc652b657618e0e473c7e49e1815da64b658b2f5d58ddfe9888d67c49b7804aa7660e1e59366f5ad6ab98c28edaadb35a4068d8a37cd0c5d14c4522e69e08149b58ae24a9a827073ee3599c0253fc7d4d67efcb493d3dfa430df9a56fb6735617d602f4388fdbed5226c4fee035ab6f9c0790750c5aac625bed3384d45b8676a450a18e7d34024aab35a4cf5a0e829fe4ed980ecabf95c23812bb14b61b49edca067e21a1e72ae7ffb70f9e8a158716cf0372e9d550af755a524c23cd2cca3ee30022e9e6a00e6e91cb1c3e9161e3528be4da91470ab42a27a0aab4b5d3e7b01077cdb885aa0ddfbfd798067f315a61d440a4147bf610bebca475ba714b251f7f8c0914fb7a775885e5a0ce94d5c1479007aa399cead1786e343154d002b7753cc5761b61d13e49aa262af14348f2574d1993ae0e41061897a3f3176706d88706143699dc997daf5d505f08d3289766265ea56f06ae6657dbea35e8e443bb41ff2c4720e05d191cbe28a47835336137f3f114139c3e641b81b95c9a3c19be8735252ecd420389816498d5042f14681379426b7581de8f3db4bb5f129e899883010b6c54ac31a6ac1e74f4fcaebe40ec409f0fe146b6ebe64476deb70764e3c4d17838a0d163172bb6f15989086b929e7c388038149ec12b34dbf8a4eeefa088522ed0040fb0daff8a7c0fed318ee3d92438a169a0a7516b9c47893ebac1f998bfa5bd0fcfd2d0abf7f4bcae9e36d756614ca28c6a2cf7b95ef2b39557a05b678691baa59b8723fed74ccbfd657ce8c431a1f52adf426976970e7f9b06e252a26305b564ffc241198663cb26667ff2ba581664192a1654db6eeb1fe4449330f32c7814fdd094bcad945933166942ea07a68b5ca478bd5bb2a494a5ee30b67d089d02106d4a0c993bc6197beb75e9cd18c89dfed24a13c85acda9babca23728036b2866141ea8e6cd210d5761669a06e5ebf0d6b691e92ce9b9181a63b3221558c34293477121a43e0c0875beedb3d47fcc61ed44fa7ec67218ea762ee58ee137ee1ec6fe6c17e96d61d8ab52b2708e8575eb3d9ac3a57312114691c6097b7cade0a25a4350cb8e5023ace6145342d8c89b318f93607f482afd431789da6974bb568436892c789a88847a3144f73af3e74c602201b050b14a9f820081d14c2df83bff5a7bd5ed21284e3014fecc604326e3081a305a1080fdbdfc1e3d728b9f7247612b5f93a26ed9c10fbab3b906dbc0fad6b2b0e7a20d2be1c5ad041921b726cd1ca6be76b70705d9ce86e836230dcb2230b01faf502430deba31e3f14d71d32dff37da6cc7c326ab2db28ee53a9d4e6110976dc284ffc1b756f63ca521db06123211b614ab06ea125e904f961459084ad7563086d63c26f769a2b1d8ab3a09a4fb2f304783ff2a0aeeeea5424da15a7a599347dcfb559d28c0eb49dc4bf49090e23fe9cb6951918705423f844968bd4def84a1fa3cb1d2c70164ee783707a941d3d160f777aaff1b56cd1ff56d07f1f3d7bc4a27eea3cf647d1e203398c346161c6431b28b4f3bc7ae703210b4265131dd69fa232659bd70d86fcfc0c6f802cca118e9032bbb77f179aabc7349e101beeaee958b8b5ccdcc74a51254146e6151b47c4d380aa0e577adc3128101e5e9c8c2478600e02d9e13586a8cca88c571d1d795b0e1f06aaa94aae19762e408c9ea911861f1c0a23111ca11f721152ec9c6760e68027f32931beb6d5f7e8f2982916fd78a746f5daa7fb84cc106131df60b5a45a03c1f11033f7255179ba5c303a6a3cd79430fdecdd4c5aa91dc6a500c82e06eb2efc2c876aa7f2252e4e331df816799d1d3f8530ba9a169f56199a12bffe137f6c29e7abedb3cc051a14db6d30b2f18cbdebdeac3e99285b2add7a5f50fbad52962115b05a810d0d190c21e383253b628d7259d6181587579ae8c6206f48c20b9c5b2777c6a57ecc311998f94335b3478684b55b8bb09038525e7043885f4731b0d2613e147feb89d4d48fbbac274b62d9ee9554068782e945faffa21e8223e1c7421087bcf285737ec0eafa97aeb08efc061ee27a7b2e853230256502a16f1ac0460996341cc7ecafefdd628a07927f50a0faa1359c8f0868135b6f69f382d4e417b75377905a083e414df3f27bb79f4f16050f0be715646650c79f102dd7d3941063689fa875390cc7ab8b21d1a4e3136ef8480cda0bbc874bfe94412921ead7cd9e266693af1ff0abba2eb025611beccffc471277ded98fcdc565bce3a5f5f4fdee8f5b1d837c7004f321f4fa302b225b7ae83c6945aac1d8452af1b713d829128b72467c497f9c2164aaff6792d1af576853e7ece4565fa1842d06805bc2bf0124a710f8928f9f22dd9f80f413e9b09b1f5785e661eec35108e11d627a668b8ee251cefd8ab3f4985002bfe511d6143cedf79533ef817fee5107b4a92d50b1b7cd9e0a1516f5b9d0503143b19ab7c37602d66d8e7ded3de6c5f", 0x1000) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000001580)=0x1) (async) r5 = socket$kcm(0x29, 0xd, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000015c0)={r0, r1}) (async) write$P9_RSTAT(r1, &(0x7f0000001600)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x7, 0x1, {0x0, 0x2, 0x2}, 0x4000000, 0x0, 0x7, 0x605, 0x8, 'nl80211\x00', 0x0, '', 0x4, '+&$.', 0x8, 'nl80211\x00'}}, 0x4e) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000036c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000003780)={{r5}, r6, 0x0, @inherit={0x50, &(0x7f0000003700)={0x0, 0x1, 0x7, 0x10000, {0x24, 0x4, 0xb407, 0x40, 0xef0}, [0x3ff]}}, @devid}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000048c0)={&(0x7f0000004780), &(0x7f00000047c0)=""/235, 0xeb}) write$binfmt_script(r0, &(0x7f0000004900)={'#! ', './file0', [{0x20, '^['}, {0x20, '+&$.'}, {0x20, '-{'}, {0x20, '+&$.'}, {0x20, '\\)'}, {0x20, 'nl80211\x00'}], 0xa, "e1b3e0385f0e9211fe66bf39e10cf267d969bf3ce8ae2ecdc1753ac3fb95b7b1e1da7cd5f5a9a6b8a6440fec368eea0379cf4eef8ce1f96efbfabfb05afe799376663562c0ea5c4b9d9cb7d0c5b4365044a0a2ec3bef7ee15cdd68d81bc3080dba895fe12079d1d0870d3a5b3c2502b6728bb49791585be77d32e2db563402036432a20fe1a6467ab76c0c5e146f165b836ee539"}, 0xbb) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000049c0), &(0x7f0000004a00)=0x30) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000004a40)={@local, 0x3, 0x2, 0x3, 0x6, 0x7ff, 0x6}, 0x20) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000004b80)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x400104c0}, 0xc, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x78, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0xf}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x78}}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000004bc0)=0x10001, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000004c00)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x12, @remote, 0x653}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x5}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x8, @local, 0x8}, @in={0x2, 0x4e20, @remote}], 0xb4) pread64(r5, &(0x7f0000004cc0)=""/33, 0x21, 0x5) 1.248407308s ago: executing program 6 (id=2474): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x400c011}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x428000, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x400c011}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x428000, 0x0) (async) 1.247765731s ago: executing program 3 (id=2475): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000300)=0x7fff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x4, 0xfa, 0xe, 0x3ff, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x10, 0x7ff}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="8595b56512ab26af6069fcb6448993a0f1ce2b865ab45d50a51642f51948fe89ab0fc7d9f883ff2b5b6296d9be1b8c8fa85c5bc95462b1f6d8cec2cdd046ad5b8352765e4ec26472087ab3", 0x4b}, {&(0x7f0000000400)="51b1b2f7e04f442b67e776a6eabe94dddbb3b3a27f80fc97badcddb04310ad412679f21f6f711af9e003aebadefaef489c950f2be0fd9a770dae24d6759e0a55b82324fb48b7c706f28c25579b9d208a872d98e61bc082a00c16d54940f860f7f269111045b027e3ec734c8f2d5b7590d1f18152200216529b999845ffc3f4295c9357803a20811e86f6ce47818935c478200ec0b61580af0298b3213db324a342cdc833be79f567fa1b7b98e679337e0467e468807bd47893d0c7c66db1d7d9d9f77add401280d937da7c7848687bd29eb7ec4b002f24ed31", 0xd9}, {&(0x7f0000000500)}, {&(0x7f0000000540)="a1e857adf95235d010287e9dcc182f3317e9d953360e348fdfba9c11b8bcbca60269dbcb4dae0edabe2c5304f36beef2e51652f9abbcd41700ad8a69bb230ac35f48b1c4b7c545a7bc278794c9d8d4f2becd9780ba5c6ba23513336ace6c66a41042c183a260ead27de501f73ba3d0690cd099f4900cff3b77e655bd", 0x7c}, {&(0x7f00000005c0)="43a7e4bfcb4d80aa60749e529c7b62ffa686f9ed1ddd6bebae04053cf6d23249d518175d65a7bfcbb11b5c69bdd5bcc93f9c57ce550192eec6959b19a1e84dc6e711a7b42373cc46d165869339dd4b51d116c1f56c1f6c5eead5ac5fd907dd21f2023345b7d41959285971d4602f587079f150dd0702f7aca5d8c444022c4f54d011db346e0661a7f35499b6a679904b2274778e041f50375429910cd1b8b862685a79d4f0b60c2d6ac33a429fcc9a034ae64dee7081b3c0ba016e8cbc00a9b0788586072124311689745052a1acb13c52c2e8f4c18b91bdc9a7e882ea2ba297ef7f4d76f3db84b0ce532c", 0xeb}], 0x5, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x95, 0x0, 0x2, [0x9, 0x3]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7af}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @local}}}], 0xa8}, 0x4894) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', r4, 0x29, 0x7, 0x2, 0xec0, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x6, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r4, 0x4, 0x8000, 0xe, 0x7fff, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0xc0, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x3a, 0x1, [{0x5, 0x11, "46f58a971149cbc72edc6064336ca1"}, {0x6, 0x11, "420592abe1e55a1d21ec8d10e772a3"}, {0x0, 0x12, "c644e9e4c49f1e9fe9c39e99472cca98"}]}, @end]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b40)={'sit0\x00', r5, 0x40, 0x20, 0x5, 0x7f0e, {{0x6, 0x4, 0x2, 0x18, 0x18, 0x66, 0x0, 0xa7, 0x4, 0x0, @empty, @remote, {[@generic={0x88, 0x3, "92"}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x150, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x200020c5}, 0x20000800) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, r11, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xc}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xff81}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xd}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x3}]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x50840}, 0x60010) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x9c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bc97ef5fc9b5cf9ec935ea4da8d7e6d7"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d6d8e408bbc15663c87d4173df3be29d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c8e29ff2277f672d0278ad17f7fa147e"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e32f4cfda2b91410d1d5ece46daff9a8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001200)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=@ipv6_newroute={0x2c, 0x18, 0x300, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xe5, 0x0, 0x5, 0x0, 0x8, 0x400}, [@RTA_PREF={0x5, 0x14, 0x84}, @RTA_EXPIRES={0x8, 0x17, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x100) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001340)="79123ba8fe48afa4d9e3e0ba4e0da987d50137a0ec235139bc7c308c22efd43a4318ae25c2cfd161e366498047d37e903ee870b21872f1d6db129da4876c90a73b6888fd4cccab51947a4fde14fb33747b36bdc0220a6cea1c659732d94ba6110a4f9c0f6ab342cf463580ba0517febfc2056f0c1c52e5ad5310f591ff1271ed15963d498451e2815952a9e53a2377378fb16d7fe26c876478249cd4824d71a8174fb1574a203acf1b41b7879cf9", 0xae) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001480)={'ip6tnl0\x00', &(0x7f0000001400)={'ip6_vti0\x00', r5, 0x2f, 0x4, 0x5, 0x8, 0x28, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x6, 0x8}}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x174, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x3f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "153361dd223f73be20721d11af"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2559e36456"}, @NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "038563c70956dc3c53b013f8ab"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e6463af8b7e677367a6092cdad"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3475468635"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d48eef4d407"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x174}, 0x1, 0x0, 0x0, 0x30044050}, 0x24000000) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000001700), 0x200000, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x110) ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_INO_PATHS(r12, 0xc0389423, &(0x7f0000001880)={0x2, 0x10, [0xffffffffffffff81, 0x6, 0x4, 0x502b], &(0x7f0000001840)=[0x0, 0x0]}) (async, rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000018c0)=0xd, 0x4) 1.168796561s ago: executing program 6 (id=2476): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f00000000c0)="d873d8f20532bae719c8c800c7874810a4136110a4aa632bb0cb05d0e0c1530558", &(0x7f0000000180)=""/198, &(0x7f00000002c0)="d1db1b0315fd4814563c90bcfdb37a427bf0da6f35c9e3350c1da2c80e20998581082fb99be3157311bbff264f46c8e591a91025806588369c120fd53be76c3c19e2bd1a406768fabd5561e839dd2ea5d9feb00acaf056bedc73c36b507d", &(0x7f0000000340)="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", 0x8}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x200) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2002}) sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000001380)={0x9, 0x18, '\x00', 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0]}) write$selinux_create(r5, &(0x7f0000000040)=@objname={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x3, 0x20, './file0\x00'}, 0x65) 1.109273107s ago: executing program 3 (id=2477): syz_open_dev$vim2m(&(0x7f00000000c0), 0x40025f5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1.049018034s ago: executing program 3 (id=2478): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r4, &(0x7f0000000180)='q', 0x1, 0x100004) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r5, r4, 0x0, 0xd39a) recvfrom$inet6(r5, 0x0, 0x0, 0x10042, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0xfffe, {0x0, 0x0, 0x0, r6, {0xc}, {0x3, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x520, 0x0, 0x0, 0xffffffff, 0xf0, 0x0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xd, @ipv4=@rand_addr=0x64010100, @ipv4=@broadcast, @icmp_id=0x68, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@remote, @icmp_id=0x68, @icmp_id=0x67}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xff000000], 'xfrm0\x00', 'vlan0\x00', {}, {}, 0x1b, 0x1, 0x4, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xffff, 0x101], 0x200, 0x0, 0xb59eb13dbbf953ce}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@remote, @ipv6=@remote, @icmp_id=0x65, @icmp_id=0x66}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'pimreg\x00', 'batadv_slave_1\x00', {}, {}, 0x16, 0x6, 0x5}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xc, 0x1, 0x91ae, 0x6f35, 0x5, 0x80, 0x2}}, @common=@mh={{0x28}, {"28ad", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 1.048607472s ago: executing program 6 (id=2479): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x79, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000019c0)=0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000282a02, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4010) (async) pwrite64(r1, &(0x7f00000000c0)="d16679f08b65054800cc70be3f33652ab9251f8d8387255f1e8ddfc0d3c924f870f7f471207fc26b8b9597878c761f13281dd106ddfedadcb3b5857b4bb67b4b468c21440f2e3eb3708aec37d3d91111e842014ff3165708b36fff9b8e98e09b6efea445e6c8c75a9a86afb63c695425169ef1da1b99dee067ac016c8a6cd42261c388beb912df961b8c2410460c90de0ab7fe6f", 0x94, 0x9) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3e) 979.553054ms ago: executing program 6 (id=2480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580100ca7700000000001001ffdb000000000000fe88000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffff7f000000000000000000000000000000000600000000000000ffffffffffffffff0000000000000000000000000000000000000000ffffffff000000000a000000af000000000000001c00170000000000000000002abd70000000400029bd7000000000004c001400636d6163286165732900"/272], 0x158}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x103}) socket$nl_route(0x10, 0x3, 0x0) 976.235763ms ago: executing program 6 (id=2481): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x11) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) 389.810142ms ago: executing program 0 (id=2484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x7) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x2, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) fanotify_mark(r1, 0x200, 0x1078, r1, &(0x7f00000000c0)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r2, 0xabd3b000) 339.934081ms ago: executing program 0 (id=2486): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 339.31696ms ago: executing program 1 (id=2487): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) (async) r5 = io_uring_setup(0x1d3f, &(0x7f0000000a80)={0x0, 0x13f1, 0x80, 0x1, 0x240}) io_uring_setup(0x4049, &(0x7f0000000b00)={0x0, 0x3eac, 0x200, 0x3, 0x2cd, 0x0, r5}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x140b, 0x2, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004084}, 0x8840) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4, 0x470bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b1027a0712a8b4af4858003f3dcf3635a2469df6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x7f, 0xea, &(0x7f0000000340)=""/234, 0x40f00, 0x28, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x5, 0x2, 0xfff}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0x7, 0x7}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x6}, 0x94) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x20044000) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000940)=0x1) (async) r13 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) pwrite64(r13, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f00000000c0), &(0x7f0000000780)=r9}, 0x20) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000100002022dbd7000fedbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2100094e220097020000a016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000d6ff000000000000000000000000000000000000010400000000000000000000000000000100000000000000d704000000000000ff07000000000000020000000000000001000100000002000100000000000000ffff0000090000000f0000002bbd7000043500000200041000"/158], 0xf0}}, 0x4040) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x486, 0x1f61, 0xffffffffffffffff, 0x0, 0x6}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1010}, 0x4) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001100010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1020000a000000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 199.245045ms ago: executing program 1 (id=2488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x19, 0x1c, 0x18b, &(0x7f0000000480)="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"}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f00000001c0)={[{@huge_within_size}]}) (async) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) ftruncate(r3, 0x472e) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9371}, 0x1c) (async) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x3e, 0x34, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xf2, [@private=0xa010100]}, @generic={0x88, 0x3, "c0"}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0x4, 0x6}, 0x6) dup3(r0, r2, 0x0) 198.747452ms ago: executing program 1 (id=2489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x20008800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4014) 198.492855ms ago: executing program 0 (id=2490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x6}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x6}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) (async) 99.132892ms ago: executing program 1 (id=2491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x13102, 0x161) (async) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x48, &(0x7f0000000500)={'trans=virtio,', {[{@loose}]}}) 98.476957ms ago: executing program 0 (id=2492): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x6, @broadcast, 'vlan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="74bf3a98923e5ec1", 0x8}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x5, 0xc, 0x49, @remote, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80, 0x10, 0x800, 0x2000000}}) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x65212568241f1f7c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newaddr={0x20, 0x14, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x38, 0x9, 0xc8, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b52, &(0x7f0000000000)) 97.662892ms ago: executing program 1 (id=2493): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r4, &(0x7f0000000140)=""/250, 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) 95.901848ms ago: executing program 0 (id=2494): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c6, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r1, 0x5, 0x70bd27, 0x20003, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000010) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4ece2e1d1288186f, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000006c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x81, 0xfffffffc]}, {r5, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x10001, 0x9]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c6, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r1, 0x5, 0x70bd27, 0x20003, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000010) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4ece2e1d1288186f, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) (async) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000006c0)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x81, 0xfffffffc]}, {r5, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x10001, 0x9]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) (async) 9.072566ms ago: executing program 0 (id=2495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xeb8, 0x30, 0x9, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x4, 0x10000000, 0x4, 0x9}, 0x0, 0x2}, [{0x2, 0x7fffffff, 0x5, 0xe036, 0x7, 0x7}, {0x5, 0xfffffffd, 0x3, 0x1, 0x1, 0x3}, {0x5, 0xbb, 0x40, 0x20000000, 0x230, 0x373fceac}, {0x4, 0x2, 0x8, 0x80, 0x80000001, 0x6}, {0x4, 0x6, 0xe, 0x800, 0x9, 0xfffffff4}, {0x7fff, 0x6, 0x1, 0x3b6, 0x4dc4, 0x7}, {0x7, 0xfff, 0x9, 0xb9, 0x0, 0x6}, {0xb7, 0x1a57, 0x4f4, 0x1, 0x5, 0xe98}, {0x5, 0x4, 0x1ff, 0x3, 0xd6f, 0x1}, {0x4, 0x2699, 0x7, 0x9, 0x31, 0x80}, {0xa502, 0x8, 0x80000000, 0xfffffffc, 0x7, 0x5307}, {0xd0a9, 0xd82b, 0x4, 0x5, 0x933, 0x6}, {0x4, 0xfffffff1, 0x0, 0x4, 0x7, 0x3}, {0x0, 0x73, 0x8, 0x7fff, 0x8, 0xab}, {0x1, 0xfffffff7, 0x3, 0x7f, 0x9, 0x3}, {0x4, 0x7, 0x5, 0x14, 0x1, 0x1000}, {0x5, 0x8000, 0x101, 0x59, 0x0, 0x4}, {0x7, 0x1ff, 0xc979, 0x1, 0x2, 0x2}, {0x7, 0x8, 0x1, 0x5, 0x3, 0x53d}, {0x81, 0x81, 0x5, 0xa, 0x9, 0x5}, {0x9, 0x81, 0x4, 0x5, 0x5, 0x3}, {0x10001, 0xfffffff5, 0x8, 0x473, 0x3, 0x80000000}, {0x7fff, 0x2, 0x4, 0x9, 0x400}, {0x2, 0x81, 0x81, 0x1, 0xa71, 0x2c}, {0x4, 0x9, 0x7, 0x6, 0x7, 0x8}, {0x5, 0x0, 0x1, 0x453d, 0x8, 0xa7abd46}, {0x8001, 0x9, 0x81, 0xffff, 0x37d6, 0x5}, {0x2, 0x3, 0x2, 0x9, 0xf9d5, 0x2}, {0xf, 0x2e, 0x3, 0xfffffff1, 0x3, 0x7}, {0x40f4, 0x1, 0x50aa, 0x2, 0x9, 0x1}, {0x2, 0x8, 0x9, 0x13c00, 0x0, 0x1}, {0x6df, 0x7, 0x3, 0x4818, 0x4, 0xffffff25}, {0x7fff, 0x2a, 0x3, 0xd28, 0x7fffffff, 0x1}, {0x10001, 0xffff, 0x7, 0x9, 0x273, 0x101}, {0x4, 0x6, 0x8, 0x6, 0x7, 0x2400}, {0x2, 0x174a, 0xc345, 0x5, 0x6, 0xb9cb51a}, {0x7, 0xffffffff, 0x3, 0x1, 0x3ff, 0x9}, {0x8, 0x76f, 0x8, 0x8, 0x0, 0x8000}, {0x5, 0x21, 0x100, 0x3, 0x6}, {0x72a6, 0x4, 0x4cb, 0x3, 0x7, 0x9}, {0x7, 0x2, 0x10, 0x80, 0xed, 0x5b}, {0xe, 0x7, 0x9, 0xfffffff7, 0x46e1, 0x81}, {0x5, 0x7, 0x1, 0x1e36, 0xfe, 0xfffffe84}, {0x7, 0x8, 0x4, 0x2, 0x8001, 0x1000}, {0x8, 0x8, 0x41d, 0xc, 0xfffffff8, 0xfffff001}, {0x9, 0x4688, 0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0xffffffff, 0x6, 0xffffffff, 0x7fff}, {0xe, 0x5, 0x10e1, 0xb387, 0x40, 0x2}, {0x10000, 0x1, 0x89a9, 0x0, 0x2, 0x1}, {0x2, 0xfffffffc, 0x80000000, 0x0, 0x0, 0xc}, {0x3, 0x9, 0x3, 0xf, 0x0, 0x4}, {0x9, 0xb, 0x6aaeba77, 0x100, 0x7, 0x1}, {0x6, 0x10000, 0xe, 0xfff, 0x80, 0x6}, {0x0, 0xfffffffc, 0x2, 0x8, 0x1, 0x53e}, {0x6, 0x2, 0x5, 0x3, 0x0, 0x5}, {0x6, 0xfffffff8, 0x0, 0x81, 0x100, 0x7}, {0x3, 0x4, 0x8, 0x40, 0x9, 0x5}, {0x3, 0x8001, 0x3, 0x4, 0x7ff, 0x3}, {0x3, 0xfffffffa, 0x4, 0x9, 0x8, 0x3}, {0x2, 0x9, 0x7, 0xbf3f, 0x800, 0x7fff}, {0x80000001, 0x1, 0x9, 0xc, 0x200, 0xffff7fff}, {0x9, 0x7, 0x100, 0x8, 0x7, 0x1}, {0x3, 0x101, 0x2, 0xffffffcb, 0x8, 0xfffffffa}, {0x10000, 0x200, 0x2800000, 0x3, 0x401, 0x401}, {0x3, 0x1, 0x17, 0xbf7, 0xffff, 0x4}, {0x1c, 0xa1d, 0x1, 0x6, 0xffffffff, 0xc97f}, {0x8000, 0x98, 0x5, 0x4, 0x21c, 0xf}, {0xfffffff0, 0x5, 0x80000001, 0x5, 0x0, 0xdcf4}, {0x100000, 0x1, 0x2, 0xc1c, 0xdb, 0x3}, {0xe3, 0x4, 0x8, 0x8, 0x5, 0x6}, {0x7, 0x8, 0xca7f, 0x6, 0x10, 0x7}, {0x3, 0x92f, 0x9, 0x7, 0xc000, 0x5e2bd237}, {0xffffffff, 0x2, 0x800, 0x8, 0x0, 0x6}, {0x0, 0x6, 0x7, 0x100, 0x4dd, 0x8}, {0x5, 0x3, 0x9, 0x6, 0x7, 0x3}, {0x8, 0xa5, 0x6, 0x1, 0x3, 0x6}, {0x4, 0x0, 0x7, 0x10000, 0x401, 0x1}, {0xb0, 0x7, 0xfffffffe, 0x7fff, 0x9}, {0x7fff, 0x8, 0xd6, 0xffffffff, 0x5, 0x4}, {0x1ff, 0x2, 0x8, 0x7, 0xd24, 0x9}, {0x5, 0x4, 0x7000, 0xb, 0x1, 0x10001}, {0x7, 0x3, 0x9, 0x2403, 0xb5, 0x5}, {0xf9, 0x3, 0x4, 0x80000001, 0x2, 0x3}, {0x332, 0x80000000, 0x8, 0x3, 0x0, 0x80}, {0x7, 0x7fffffff, 0x8, 0x10001, 0x0, 0x4}, {0x4, 0x1, 0x3, 0x0, 0xc9, 0x3}, {0x7fffffff, 0x7fff, 0x6, 0x5, 0x3, 0x93}, {0xfffff001, 0x3, 0x2, 0x6f91, 0x1, 0x397}, {0x80, 0x1, 0x0, 0x8001, 0x52ef78a4, 0x100}, {0x2, 0x3, 0x1eee, 0x9, 0x6, 0xf31b}, {0x3ff, 0x10, 0x3, 0x9, 0x180, 0xa}, {0xa, 0x2, 0x6, 0x3ff, 0x7ff, 0x80000001}, {0xfffff9a7, 0x6, 0x10000, 0x3, 0xf71, 0x5}, {0xb15, 0x4, 0x4ae8, 0x1f0, 0x8454, 0xffff0001}, {0x101, 0x7795, 0xf99, 0x81, 0xa83, 0x8}, {0x1, 0x10, 0x4, 0x7fffffff, 0x8, 0x9}, {0x64, 0x2, 0x6, 0x400, 0x1ff, 0x5}, {0x80000000, 0x1ff, 0x10001, 0x7, 0x7f, 0x8}, {0x2, 0x7, 0xd, 0x3ff, 0x7, 0x9}, {0x80, 0x5, 0x3, 0xff, 0x7, 0xa}, {0x1c, 0x6, 0x6, 0x1ff, 0x0, 0xc990}, {0x710b, 0x2, 0x3, 0xa, 0x40, 0x10000}, {0x78, 0x1, 0x21, 0x0, 0x9, 0x3}, {0xbf, 0x0, 0x7f, 0x0, 0x3, 0x9}, {0xa, 0x10001, 0x2, 0x997, 0x8, 0x4}, {0x8, 0x5, 0x2, 0xf, 0x40, 0x5}, {0xffffffff, 0x1, 0x9, 0x7, 0x2, 0x401}, {0x5, 0x0, 0x1, 0x7, 0x8, 0xd}, {0xfff, 0x4, 0x8, 0x7, 0x5, 0x4}, {0xa, 0x3, 0x4, 0x8, 0x4, 0x90}, {0x4, 0x2, 0xfffffffe, 0x7, 0x6, 0xff14}, {0x3, 0x1, 0x1ff, 0x8, 0x10001, 0x351}, {0x6, 0x8fa, 0x7ff, 0x0, 0x0, 0x4}, {0x1, 0xffff8000, 0x200, 0xad, 0x6, 0x9}, {0x4, 0x2, 0x9, 0x5, 0x40, 0x6}, {0x7b, 0xc9, 0x2, 0x0, 0x7, 0x93e}, {0x4, 0x7, 0xd, 0x3, 0x4, 0x3}, {0x7fff, 0x81, 0xc, 0x5, 0xffff528a, 0x118}, {0x9, 0xd, 0x1, 0xa5, 0x0, 0x2}, {0x0, 0x2, 0x4, 0x0, 0x7, 0x80}, {0x0, 0xfffffff9, 0x2, 0x6}, {0xfffffffc, 0x5393, 0x9, 0xfff, 0x5, 0xbba}, {0x1, 0x8, 0x8, 0x0, 0x82, 0x8}, {0x7, 0x5, 0x10001, 0x2, 0x3ff, 0x3ff}, {0x1, 0x1, 0x9, 0x0, 0x6, 0x9}, {0x6, 0xfffffffc, 0x1, 0x3, 0x7, 0x5}, {0xc1, 0xb46e, 0x3, 0x8, 0x4, 0x9}, {0x8, 0x10001, 0xd, 0xf, 0x6, 0x5}], [{0x0, 0xacfc3e76f8145cfd}, {0x2}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x6}, {0x2}, {}, {0x6, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3255080e03fa1f2e, 0x1}, {0x5}, {0x3}, {}, {0x1}, {0x5}, {}, {}, {0x3}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x3}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xeb8}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5f5}}, './file0\x00'}) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0x8, 0x101, 0x2, {0xc, 0x5, 0x6, 0xfffffc01}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980912}}) 0s ago: executing program 1 (id=2496): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x9, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) kernel console output (not intermixed with test programs): erent from the interface descriptor's value: 3 [ 169.858353][ T851] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.862351][ T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.991996][ T7033] usb 9-1: USB disconnect, device number 25 [ 170.069931][ T851] usb 8-1: usb_control_msg returned -32 [ 170.072000][ T851] usbtmc 8-1:16.0: can't read capabilities [ 170.395548][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.676076][T11386] tipc: Enabling of bearer rejected, failed to enable media [ 170.701428][ T6017] usb 6-1: USB disconnect, device number 19 [ 170.744699][T11387] ipt_REJECT: ECHOREPLY no longer supported. [ 170.781720][ T7033] usb 8-1: USB disconnect, device number 10 [ 170.877697][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.342900][T11433] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 171.363294][T11433] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.484185][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 171.484201][ T40] audit: type=1400 audit(1768026600.488:699): avc: denied { ioctl } for pid=11445 comm="syz.1.1562" path="socket:[38732]" dev="sockfs" ino=38732 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.574495][ T5939] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 171.670991][T11461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.681118][T11473] binder: BINDER_SET_CONTEXT_MGR already set [ 171.682168][T11461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.683097][T11473] binder: 11472:11473 ioctl 4018620d 2000000000c0 returned -16 [ 171.684818][T11474] binder_alloc: 11472: binder_alloc_buf size 8 failed, no address space [ 171.702331][T11474] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 171.757060][T11479] binder: 11478:11479 ioctl 5311 200000000000 returned -22 [ 171.786696][ T40] audit: type=1400 audit(1768026600.788:700): avc: denied { getopt } for pid=11480 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.809097][T11461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.814083][T11461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.917159][T11461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.921762][T11461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.926973][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.970014][ T40] audit: type=1326 audit(1768026600.978:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 171.982104][ T40] audit: type=1326 audit(1768026600.988:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 171.990430][ T40] audit: type=1326 audit(1768026600.988:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 171.998468][ T40] audit: type=1326 audit(1768026600.988:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 172.008384][ T40] audit: type=1326 audit(1768026600.988:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 172.016511][ T40] audit: type=1326 audit(1768026600.998:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 172.024159][ T40] audit: type=1326 audit(1768026600.998:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 172.031787][ T40] audit: type=1326 audit(1768026600.998:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.4.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 172.084250][T11461] netdevsim netdevsim0 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.088416][T11461] netdevsim netdevsim0 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.100292][T11491] __nla_validate_parse: 5 callbacks suppressed [ 172.100305][T11491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1576'. [ 172.107279][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 172.120762][T11491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1576'. [ 172.188237][ T6147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.191298][ T6147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.206511][ T6147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.210279][ T6147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.232655][ T6147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.245364][ T6147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.262243][ T6147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.264963][ T6147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.269018][T11505] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 172.301078][T11505] bond1: (slave geneve3): Opening slave failed [ 172.315979][T11508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.320015][T11508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.347009][T11511] netlink: 'syz.4.1578': attribute type 15 has an invalid length. [ 172.435645][ T53] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 172.593048][ T53] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 172.597484][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 172.601556][ T53] usb 6-1: Product: syz [ 172.603500][ T53] usb 6-1: Manufacturer: syz [ 172.606130][ T53] usb 6-1: SerialNumber: syz [ 172.611163][ T53] usb 6-1: config 0 descriptor?? [ 172.617210][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 172.624301][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 172.632778][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.638356][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 172.644277][ T53] usb 6-1: media controller created [ 172.660262][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.818873][T11503] dvb-usb: bulk message failed: -22 (4/0) [ 172.821146][T11503] cxusb: i2c read failed [ 172.966712][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.095269][ T851] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 173.116262][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.119872][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.246685][ T851] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 173.249566][ T851] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.253668][ T851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 173.260370][ T851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 173.264280][ T851] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.268782][ T851] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.272102][ T851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.276194][ T851] usb 9-1: config 0 descriptor?? [ 173.278661][T11543] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.359067][T11556] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 173.361285][T11556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.363958][T11556] vhci_hcd vhci_hcd.0: Device attached [ 173.430443][T11557] vhci_hcd: cannot find the pending unlink 1023 [ 173.540068][T11556] syz.3.1594 (11556): drop_caches: 2 [ 173.568466][T11557] vhci_hcd: connection closed [ 173.571522][ T6123] vhci_hcd vhci_hcd.3: stop threads [ 173.575350][ T6123] vhci_hcd vhci_hcd.3: release socket [ 173.578019][ T6123] vhci_hcd vhci_hcd.3: disconnect device [ 173.595271][ T6058] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 173.598075][ T6058] usb 43-1: enqueue for inactive port 0 [ 173.665460][ T6058] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 173.685761][ T851] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 173.695267][ T851] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 173.885687][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.888522][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.999222][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.340190][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.343524][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.349872][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.352595][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.355465][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.358110][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.360705][T11583] netlink: 'syz.3.1605': attribute type 3 has an invalid length. [ 174.579221][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 174.638188][T11602] No control pipe specified [ 174.678056][T11607] bond5: option downdelay: invalid value (18446744073709551615) [ 174.680524][T11607] bond5: option downdelay: allowed values 0 - 2147483647 [ 174.683948][T11607] bond5 (unregistering): Released all slaves [ 174.886695][T11627] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 174.932907][T11633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1623'. [ 174.953657][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 175.040426][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.043457][ T53] cxusb: set interface failed [ 175.045039][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 175.052443][T11643] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1626'. [ 175.059025][T11643] wlan1: mtu less than device minimum [ 175.086892][ T53] DVB: Unable to find symbol mt352_attach() [ 175.089041][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 175.093455][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 175.096075][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 175.145273][ T53] rc_core: IR keymap rc-dvico-mce not found [ 175.147534][ T53] Registered IR keymap rc-empty [ 175.150340][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 175.154318][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input28 [ 175.160322][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 175.162758][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 175.172807][ T53] usb 6-1: USB disconnect, device number 20 [ 175.199232][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 175.316661][T11670] !: entered promiscuous mode [ 175.320498][T11670] !: left promiscuous mode [ 175.374826][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 175.414812][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 175.436322][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 175.756335][ T55] usb 9-1: USB disconnect, device number 26 [ 175.904881][T11715] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.908771][T11715] overlayfs: failed to set xattr on upper [ 175.911449][T11715] overlayfs: ...falling back to redirect_dir=nofollow. [ 175.914377][T11715] overlayfs: ...falling back to metacopy=off. [ 175.917175][T11715] overlayfs: ...falling back to index=off. [ 175.919748][T11715] overlayfs: ...falling back to uuid=null. [ 176.075534][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.155721][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.313799][T11700] veth0_macvtap: left promiscuous mode [ 176.459068][T11733] hub 1-0:1.0: USB hub found [ 176.461002][T11733] hub 1-0:1.0: 6 ports detected [ 176.635259][ T55] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 176.678894][T11753] binder: 11752:11753 ioctl c0306201 200000000080 returned -14 [ 176.839852][ T55] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 176.843762][ T55] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 176.847166][ T55] usb 1-1: Product: QEMU USB Tablet [ 176.848945][ T55] usb 1-1: Manufacturer: QEMU [ 176.850642][ T55] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 176.874689][ T55] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000B/input/input29 [ 176.928287][T11763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.938151][ T55] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 176.969618][T11766] validate_nla: 50 callbacks suppressed [ 176.969632][T11766] netlink: 'syz.0.1667': attribute type 29 has an invalid length. [ 176.978195][T11766] netlink: 'syz.0.1667': attribute type 29 has an invalid length. [ 177.108212][T11778] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 177.115630][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.148176][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 177.148187][ T40] audit: type=1800 audit(2000000002.389:769): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1669" name="nullb0" dev="tmpfs" ino=1805 res=0 errno=0 [ 177.209056][ T40] audit: type=1400 audit(2000000002.449:770): avc: denied { ioctl } for pid=11782 comm="syz.3.1673" path="socket:[44477]" dev="sockfs" ino=44477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 177.474322][ T40] audit: type=1400 audit(2000000002.709:771): avc: denied { mounton } for pid=11796 comm="syz.3.1678" path="/420/file0" dev="autofs" ino=42754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 177.516831][T11802] kAFS: unparsable volume name [ 177.558300][ T40] audit: type=1400 audit(2000000002.799:772): avc: denied { lock } for pid=11805 comm="syz.4.1681" path="socket:[44503]" dev="sockfs" ino=44503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 177.652915][T11809] __nla_validate_parse: 7 callbacks suppressed [ 177.652940][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 177.823108][T11815] sp0: Synchronizing with TNC [ 177.846905][ T830] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 177.894550][T11817] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 177.897284][T11817] netlink: 16118 bytes leftover after parsing attributes in process `syz.0.1685'. [ 177.905033][T11817] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 177.908142][T11817] netlink: 16118 bytes leftover after parsing attributes in process `syz.0.1685'. [ 177.925860][T11819] smc: net device bond0 applied user defined pnetid SYZ0 [ 178.007465][ T830] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.010601][ T830] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.015013][ T830] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.024047][ T830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 178.028237][ T830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.039328][ T830] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.042853][ T830] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.052253][ T830] usb 9-1: Product: syz [ 178.054177][ T830] usb 9-1: Manufacturer: syz [ 178.061676][ T830] cdc_wdm 9-1:1.0: skipping garbage [ 178.064001][ T830] cdc_wdm 9-1:1.0: skipping garbage [ 178.068160][ T830] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 178.070814][ T830] cdc_wdm 9-1:1.0: Unknown control protocol [ 178.155865][ T6058] net_ratelimit: 1 callbacks suppressed [ 178.155878][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.218172][T11845] overlayfs: conflicting options: nfs_export=on,index=off [ 178.236768][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.263029][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.266682][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.270313][ T40] audit: type=1326 audit(2000000003.509:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.4.1681" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x0 [ 178.322574][ T40] audit: type=1400 audit(2000000003.559:774): avc: denied { write } for pid=11805 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 178.333338][ T6058] usb 9-1: USB disconnect, device number 27 [ 178.346796][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 178.349725][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 178.434284][ T40] audit: type=1400 audit(2000000003.669:775): avc: denied { append } for pid=11864 comm="syz.1.1703" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.434356][T11865] random: crng reseeded on system resumption [ 178.489302][T11869] 9pnet_virtio: no channels available for device syz [ 178.525261][ T7033] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 178.655322][ T7033] usb 8-1: device descriptor read/64, error -71 [ 178.677491][T11873] syz_tun: refused to change device tx_queue_len [ 178.713585][T11876] tmpfs: Too few inodes for current use [ 178.771246][T11878] netlink: 'syz.1.1709': attribute type 15 has an invalid length. [ 178.885604][T11885] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 178.889110][T11885] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 178.895436][ T7033] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 178.972970][T11895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.975968][T11895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.979283][T11895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.035576][ T7033] usb 8-1: device descriptor read/64, error -71 [ 179.078718][T11897] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1714'. [ 179.155596][ T7033] usb usb8-port1: attempt power cycle [ 179.195588][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.495440][ T7033] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 179.546001][ T7033] usb 8-1: device descriptor read/8, error -71 [ 179.795243][ T7033] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 179.815882][ T7033] usb 8-1: device descriptor read/8, error -71 [ 179.872134][ T40] audit: type=1400 audit(2000000005.109:776): avc: denied { execmod } for pid=11904 comm="syz.0.1718" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 179.901229][T11909] cgroup: Unknown subsys name 'cpuset' [ 179.936697][ T7033] usb usb8-port1: unable to enumerate USB device [ 179.941927][T11915] sctp: [Deprecated]: syz.1.1721 (pid 11915) Use of int in max_burst socket option deprecated. [ 179.941927][T11915] Use struct sctp_assoc_value instead [ 180.096770][T11924] Process accounting resumed [ 180.116156][T11926] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 180.235559][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.528049][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1732'. [ 180.563373][T11944] netlink: 'syz.0.1733': attribute type 322 has an invalid length. [ 180.662995][T11961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 180.674419][T11961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.679885][T11961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.700842][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 180.723782][T11963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48421 sclass=netlink_route_socket pid=11963 comm=syz.0.1737 [ 180.779103][ T40] audit: type=1400 audit(2000000006.019:777): avc: denied { create } for pid=11964 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 181.270961][T11975] overlayfs: overlapping lowerdir path [ 181.276211][T11975] syz_tun: entered allmulticast mode [ 181.282414][T11975] pimreg: entered allmulticast mode [ 181.292328][T11975] overlayfs: overlapping lowerdir path [ 181.296365][T11974] syz_tun: left allmulticast mode [ 181.407990][T11981] sctp: [Deprecated]: syz.1.1744 (pid 11981) Use of int in maxseg socket option. [ 181.407990][T11981] Use struct sctp_assoc_value instead [ 181.564471][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 181.570516][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 181.729352][T12014] binder: 12013:12014 ioctl c0306201 0 returned -14 [ 181.880100][T12031] netlink: 'syz.1.1759': attribute type 9 has an invalid length. [ 181.918004][T12014] 9p: Bad value for 'wfdno' [ 181.947913][T12037] Process accounting resumed [ 182.063514][ T53] IPVS: starting estimator thread 0... [ 182.069214][T12055] tipc: Started in network mode [ 182.071389][T12055] tipc: Node identity ac14140f, cluster identity 4711 [ 182.082642][T12055] tipc: New replicast peer: 255.255.255.255 [ 182.095272][T12055] tipc: Enabled bearer , priority 10 [ 182.098901][T12054] /dev/nullb0: Can't lookup blockdev [ 182.099087][ T40] audit: type=1400 audit(2000000007.339:778): avc: denied { mounton } for pid=12052 comm="syz.0.1767" path="/500/bus" dev="tmpfs" ino=2688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 182.145642][T12060] loop7: detected capacity change from 0 to 7 [ 182.152305][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.155592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.159950][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.162879][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.165839][T12056] IPVS: using max 43 ests per chain, 103200 per kthread [ 182.169011][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.172530][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.178803][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.181830][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.184857][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.188234][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.191253][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.194235][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.197601][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.197633][ T40] audit: type=1400 audit(2000000007.439:779): avc: denied { module_request } for pid=12068 comm="syz.0.1772" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 182.206052][T12060] ldm_validate_partition_table(): Disk read failed. [ 182.208692][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.247523][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.250905][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.251289][ T40] audit: type=1400 audit(2000000007.489:780): avc: denied { bpf } for pid=12068 comm="syz.0.1772" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.254669][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.262414][ T40] audit: type=1326 audit(2000000007.489:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12068 comm="syz.0.1772" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b238f7c9 code=0x0 [ 182.265071][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.265595][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.280455][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 182.283208][T12060] Dev loop7: unable to read RDB block 0 [ 182.285920][T12060] loop7: unable to read partition table [ 182.288383][T12060] loop7: partition table beyond EOD, truncated [ 182.290915][T12060] loop_reread_partitions: partition scan of loop7 (VÅå=ì³pÿ7ª·¤ ËŠ6ΘhÄ ¶–)·rìjó‡ÅêzNâ5î& ‘ôÑŠqMqÏ-+ƒ-¶@ß+) failed (rc=-5) [ 182.438375][ T40] audit: type=1400 audit(2000000007.679:782): avc: denied { perfmon } for pid=12091 comm="syz.3.1779" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.496118][T12100] program syz.4.1780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.617671][ T40] audit: type=1326 audit(2000000007.859:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.628759][ T40] audit: type=1326 audit(2000000007.859:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.638079][ T40] audit: type=1326 audit(2000000007.859:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.647835][ T40] audit: type=1326 audit(2000000007.859:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.665252][ T40] audit: type=1326 audit(2000000007.859:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.674819][ T40] audit: type=1326 audit(2000000007.859:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.1784" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42a678f7c9 code=0x7ffc0000 [ 182.748829][T12115] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 182.751647][T12115] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 182.754238][T12115] __nla_validate_parse: 4 callbacks suppressed [ 182.754246][T12115] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1785'. [ 182.762243][T12115] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 182.764994][T12115] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 182.975284][ T851] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 183.085364][ T7033] tipc: Node number set to 2886997007 [ 183.126857][ T851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.130552][ T851] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.135554][ T851] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.138594][ T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.143462][ T851] usb 8-1: config 0 descriptor?? [ 183.205273][ T53] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 183.297473][T12127] net_ratelimit: 8 callbacks suppressed [ 183.297484][T12127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.330502][T12131] comedi comedi2: comedi_config --init_data is deprecated [ 183.355387][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.362893][ T53] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 183.367305][ T53] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 183.370621][ T53] usb 9-1: config 0 interface 0 has no altsetting 0 [ 183.376283][ T53] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.379281][ T53] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.382483][ T53] usb 9-1: Product: syz [ 183.384074][ T53] usb 9-1: Manufacturer: syz [ 183.397015][ T53] usb 9-1: SerialNumber: syz [ 183.400834][ T53] usb 9-1: config 0 descriptor?? [ 183.405840][ T53] hub 9-1:0.0: bad descriptor, ignoring hub [ 183.407920][ T53] hub 9-1:0.0: probe with driver hub failed with error -5 [ 183.412032][ T53] usb 9-1: selecting invalid altsetting 0 [ 183.447314][T12141] bond5: option arp_validate: invalid value (2048) [ 183.450547][T12141] bond5 (unregistering): Released all slaves [ 183.557760][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.560940][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.564415][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.568121][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.571288][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.574618][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.580310][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.583054][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.587114][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.589811][ T851] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 183.594506][ T851] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 183.606673][T12150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=12150 comm=syz.0.1798 [ 183.616978][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 183.698661][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 183.902440][T12175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.908387][T12175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.911566][T12175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.925444][T12175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.949886][ T53] usb 8-1: USB disconnect, device number 15 [ 183.992765][T12183] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 184.011820][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.026464][ T851] usb 9-1: USB disconnect, device number 28 [ 184.185284][ T851] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 184.202166][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 184.205671][ T6058] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 184.207072][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 184.336101][T12195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.351868][ T851] usb 9-1: unable to get BOS descriptor or descriptor too short [ 184.356910][ T851] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 184.356929][ T6058] usb 6-1: Using ep0 maxpacket: 8 [ 184.360530][ T851] usb 9-1: can't read configurations, error -71 [ 184.364282][ T6058] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.369528][ T6058] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.373431][ T6058] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.377584][ T6058] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.383114][ T6058] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.388084][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.399642][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.576636][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 184.599164][ T6058] usb 6-1: usb_control_msg returned -32 [ 184.601830][ T6058] usbtmc 6-1:16.0: can't read capabilities [ 184.637017][T12181] sp0: Synchronizing with TNC [ 184.661609][T12202] overlay: Unknown parameter 'userxattr:/' [ 184.668844][T12202] 9pnet_fd: p9_fd_create_unix (12202): problem connecting socket: ./file0: -111 [ 184.811891][T12207] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1816'. [ 184.893522][T12211] overlayfs: failed to clone upperpath [ 185.000284][T12219] Cannot find add_set index 65532 as target [ 185.058565][T12220] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1821'. [ 185.222230][ T7033] usb 6-1: USB disconnect, device number 21 [ 185.275432][ T6116] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.436084][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.617712][T12224] new mount options do not match the existing superblock, will be ignored [ 185.773585][T12235] VFS: Mount too revealing [ 185.884568][T12248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1830'. [ 185.891923][T12248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1830'. [ 185.986124][T12259] ip6gre1: entered promiscuous mode [ 185.988614][T12259] ip6gre1: entered allmulticast mode [ 185.993336][ T6116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.000252][ T6116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.015669][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.076594][ T830] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 186.092297][ T5939] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 186.245678][ T830] usb 6-1: Using ep0 maxpacket: 32 [ 186.249133][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 186.256275][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.262226][ T830] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 186.266755][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.271048][T12285] overlayfs: failed to clone upperpath [ 186.271921][ T830] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 186.275682][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.278894][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.285509][ T830] usb 6-1: Product: syz [ 186.287487][ T830] usb 6-1: Manufacturer: syz [ 186.289466][ T830] usb 6-1: SerialNumber: syz [ 186.292663][ T830] usb 6-1: config 0 descriptor?? [ 186.298916][ T830] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input30 [ 186.305478][ T53] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 186.313250][ T5325] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.322657][ T5325] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.331149][ T5325] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.338633][ T5325] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.425352][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.455519][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 186.459150][ T53] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.462325][ T53] usb 8-1: config 179 has no interface number 0 [ 186.464552][ T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.469857][ T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.474296][ T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.479350][ T53] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.486150][ T53] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.489877][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.497147][T12265] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.505753][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.508670][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.515338][T12246] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.529327][ T830] usb 6-1: USB disconnect, device number 22 [ 186.789973][ T7033] usb 8-1: USB disconnect, device number 16 [ 186.818091][T12313] fuse: Bad value for 'fd' [ 186.854254][T12315] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.310126][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 187.310138][ T40] audit: type=1400 audit(2000000012.549:797): avc: denied { accept } for pid=12354 comm="syz.1.1868" path="socket:[47117]" dev="sockfs" ino=47117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.304425][T12387] loop6: detected capacity change from 0 to 2640 [ 188.308046][T12387] buffer_io_error: 5 callbacks suppressed [ 188.308056][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.313529][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.316272][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.318827][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.321289][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.323790][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.328538][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.331778][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.334260][T12387] ldm_validate_partition_table(): Disk read failed. [ 188.336816][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.339463][T12387] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.343209][T12387] Dev loop6: unable to read RDB block 0 [ 188.345992][T12387] loop6: unable to read partition table [ 188.348483][T12387] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 188.437590][T12373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.439969][T12373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.442345][T12373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.444412][T12373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.448514][T12373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.487149][T12394] __nla_validate_parse: 6 callbacks suppressed [ 188.487161][T12394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1880'. [ 188.555737][ T6127] net_ratelimit: 5 callbacks suppressed [ 188.555753][ T6127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.615488][ T40] audit: type=1400 audit(2000000013.859:798): avc: denied { nlmsg_read } for pid=12401 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 188.685246][ T53] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 188.700974][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1885'. [ 188.704361][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1885'. [ 188.766355][ T40] audit: type=1400 audit(2000000014.009:799): avc: denied { ioctl } for pid=12416 comm="syz.0.1888" path="socket:[47123]" dev="sockfs" ino=47123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.836993][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.841093][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.851034][T12429] /dev/nullb0: Can't lookup blockdev [ 188.853106][T12429] /dev/nullb0: Can't lookup blockdev [ 188.855262][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.859809][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.862918][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.877150][ T53] usb 8-1: config 0 descriptor?? [ 189.116824][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.119651][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.358676][ T53] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 189.371391][T12464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1901'. [ 189.522802][T12474] : renamed from bond0 (while UP) [ 189.562269][ T40] audit: type=1400 audit(2000000014.799:800): avc: denied { connect } for pid=12476 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.574843][ T40] audit: type=1400 audit(2000000014.819:801): avc: denied { read } for pid=12476 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.629279][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 189.755372][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.765419][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.005056][T12491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 190.008768][T12491] overlayfs: failed to resolve '/î8'‚¤—ZRÁ«›‹M³”]2': -2 [ 190.437115][ T40] audit: type=1400 audit(2000000015.679:802): avc: denied { setattr } for pid=12495 comm="syz.4.1914" name="RAW" dev="sockfs" ino=46859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.475304][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.477648][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.735388][ T7033] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 190.767305][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'. [ 190.828486][T12510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.879875][ T7033] usb 6-1: device descriptor read/64, error -71 [ 190.933112][T12514] kvm: kvm [12513]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 190.937332][T12514] kvm: kvm [12513]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 191.125359][ T7033] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 191.143735][T12522] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1922'. [ 191.147696][T12522] tipc: Invalid UDP bearer configuration [ 191.147741][T12522] tipc: Enabling of bearer rejected, failed to enable media [ 191.266502][ T7033] usb 6-1: device descriptor read/64, error -71 [ 191.385660][ T7033] usb usb6-port1: attempt power cycle [ 191.395231][T12539] fuse: Bad value for 'user_id' [ 191.397299][T12539] fuse: Bad value for 'user_id' [ 191.426629][ T5986] usb 8-1: USB disconnect, device number 17 [ 191.620028][T12547] new mount options do not match the existing superblock, will be ignored [ 191.755260][ T7033] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 191.786760][ T7033] usb 6-1: device descriptor read/8, error -71 [ 191.814072][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1938'. [ 191.956304][T12568] batman_adv: batadv0: Adding interface: gretap2 [ 191.958578][T12568] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.972086][T12568] batman_adv: batadv0: Interface activated: gretap2 [ 192.045274][ T7033] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 192.065895][ T7033] usb 6-1: device descriptor read/8, error -71 [ 192.091675][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 192.185539][ T7033] usb usb6-port1: unable to enumerate USB device [ 192.555391][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.890164][T12579] orangefs_mount: mount request failed with -4 [ 194.246693][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.645280][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.876420][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.435378][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.358861][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.997044][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.635865][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.277186][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.765588][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.396500][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.399442][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.581937][T12615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.596068][T12617] autofs4:pid:12617:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 210.865358][ T5986] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 210.974415][T12626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1959'. [ 211.045262][ T5986] usb 9-1: Using ep0 maxpacket: 8 [ 211.048231][ T5986] usb 9-1: config 0 interface 0 has no altsetting 0 [ 211.050440][ T5986] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 211.053362][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.058847][ T5986] usb 9-1: config 0 descriptor?? [ 211.319689][ T40] audit: type=1400 audit(2000000036.559:803): avc: denied { module_load } for pid=12628 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 211.436113][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.516619][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.623987][ T7033] usb 9-1: USB disconnect, device number 31 [ 211.940815][T12687] vivid-000: ================= START STATUS ================= [ 211.944202][T12687] vivid-000: Test Pattern: 75% Colorbar [ 211.950157][T12687] vivid-000: Fill Percentage of Frame: 100 [ 211.952654][T12687] vivid-000: Horizontal Movement: Move Right [ 211.955650][T12687] vivid-000: Vertical Movement: Move Down Slow [ 211.958274][T12687] vivid-000: OSD Text Mode: All [ 211.960415][T12687] vivid-000: Show Border: false [ 211.961982][T12687] vivid-000: Show Square: false [ 211.964139][T12687] vivid-000: Sensor Flipped Horizontally: false [ 211.968250][T12687] vivid-000: Sensor Flipped Vertically: true [ 211.970934][T12687] vivid-000: Insert SAV Code in Image: false [ 211.973741][T12687] vivid-000: Insert EAV Code in Image: false [ 211.977864][T12687] vivid-000: Insert Video Guard Band: false [ 211.980731][T12687] vivid-000: Reduced Framerate: false [ 211.983208][T12687] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 211.986976][ T40] audit: type=1400 audit(2000000037.229:804): avc: denied { mounton } for pid=12688 comm="syz.3.1973" path="/470/file0/file0" dev="9p" ino=71827763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.987005][T12696] 9pnet_virtio: no channels available for device syz [ 211.989133][T12687] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 211.989186][T12687] vivid-000: Enable Capture Cropping: false grabbed [ 211.989212][T12687] vivid-000: Enable Capture Composing: true grabbed [ 211.989240][T12687] vivid-000: Enable Capture Scaler: true grabbed [ 211.989266][T12687] vivid-000: Timestamp Source: End of Frame [ 211.989286][T12687] vivid-000: Colorspace: sRGB [ 211.989305][T12687] vivid-000: Transfer Function: Default [ 211.989325][T12687] vivid-000: Y'CbCr Encoding: Default [ 211.989344][T12687] vivid-000: HSV Encoding: Hue 0-179 [ 211.989363][T12687] vivid-000: Quantization: Limited Range [ 211.989381][T12687] vivid-000: Apply Alpha To Red Only: false [ 211.989398][T12687] vivid-000: Standard Aspect Ratio: 4x3 [ 211.989418][T12687] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 211.989442][T12687] vivid-000: DV Timings: 640x480p59 inactive [ 211.989465][T12687] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 211.989485][T12687] vivid-000: Maximum EDID Blocks: 2 [ 211.989505][T12687] vivid-000: Limited RGB Range (16-235): false [ 211.989524][T12687] vivid-000: Rx RGB Quantization Range: Automatic [ 211.989545][T12687] vivid-000: Power Present: 0x00000001 [ 211.989567][T12687] tpg source WxH: 320x180 (Y'CbCr) [ 211.989579][T12687] tpg field: 1 [ 211.989585][T12687] tpg crop: (0,0)/320x180 [ 211.989599][T12687] tpg compose: (0,0)/320x180 [ 211.989610][T12687] tpg colorspace: 8 [ 211.989618][T12687] tpg transfer function: 0/2 [ 211.989633][T12687] tpg Y'CbCr encoding: 0/1 [ 211.989642][T12687] tpg quantization: 2/2 [ 211.989652][T12687] tpg RGB range: 0/2 [ 211.989662][T12687] vivid-000: ================== END STATUS ================== [ 211.999339][ T40] audit: type=1400 audit(2000000037.239:805): avc: denied { read } for pid=12694 comm="syz.0.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.017642][T12695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 212.080070][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.083644][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.087714][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.091287][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.094748][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.098809][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.102458][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.109477][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.210963][T12706] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 212.216917][T12705] delete_channel: no stack [ 212.537776][ T40] audit: type=1400 audit(2000000037.779:806): avc: denied { shutdown } for pid=12713 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.558497][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 212.636157][T12726] kvm: apic: phys broadcast and lowest prio [ 212.639918][T12725] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 212.806520][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.846319][T12749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 213.003402][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 213.010003][T12773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1993'. [ 213.205638][ T830] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 213.355605][ T830] usb 9-1: Using ep0 maxpacket: 8 [ 213.358939][ T830] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.362372][ T830] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.366773][ T830] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.369511][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.374936][ T830] usbtmc 9-1:16.0: bulk endpoints not found [ 213.863866][T12806] libceph: resolve '4' (ret=-3): failed [ 213.900783][ T40] audit: type=1400 audit(2000000039.139:807): avc: denied { set_context_mgr } for pid=12814 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 214.130135][ T5939] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 214.163141][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 214.174535][T12838] netlink: 'syz.0.2012': attribute type 3 has an invalid length. [ 214.178054][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 214.218325][T12842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'. [ 214.253791][T12846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2014'. [ 214.256928][T12850] 9pnet_virtio: no channels available for device syz [ 214.266767][ T40] audit: type=1400 audit(2000000039.509:808): avc: denied { read write } for pid=12845 comm="syz.1.2014" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.278640][T12846] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 214.286836][ T40] audit: type=1400 audit(2000000039.509:809): avc: denied { open } for pid=12845 comm="syz.1.2014" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.581274][T12862] SELinux: failed to load policy [ 214.687275][T12873] fuse: Unknown parameter 'gd' [ 214.828491][ T5939] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 214.983909][T12894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.986916][T12894] batadv_slave_0: entered promiscuous mode [ 214.988628][T12894] batadv_slave_0: entered allmulticast mode [ 215.132511][T12903] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 215.449686][ T40] audit: type=1400 audit(2000000040.689:810): avc: denied { setopt } for pid=12917 comm="syz.3.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.674576][T12927] syz.3.2043: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 215.806178][T12934] vxlan0: entered promiscuous mode [ 215.808592][T12934] vxlan0: entered allmulticast mode [ 215.894226][ T40] audit: type=1400 audit(2000000041.129:811): avc: denied { map } for pid=12940 comm="syz.3.2049" path="socket:[50379]" dev="sockfs" ino=50379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.901716][ T40] audit: type=1400 audit(2000000041.129:812): avc: denied { read } for pid=12940 comm="syz.3.2049" path="socket:[50379]" dev="sockfs" ino=50379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.962861][ T7033] usb 9-1: USB disconnect, device number 32 [ 216.036153][T12955] input: syz0 as /devices/virtual/input/input32 [ 216.074497][ T851] hid_parser_main: 5 callbacks suppressed [ 216.074509][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.079460][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.082295][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.085276][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.087428][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.089732][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.092544][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.096093][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.098736][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.101578][ T851] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 216.137862][ T851] hid-generic 0005:00B6:0009.000E: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 216.141227][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.148615][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.152564][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.157878][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.161436][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.168924][T12957] __nla_validate_parse: 2 callbacks suppressed [ 216.168943][T12957] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2054'. [ 216.197501][T12955] /dev/sr0: Can't open blockdev [ 216.243076][T12964] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 216.246510][T12964] overlayfs: missing 'lowerdir' [ 216.250040][T12964] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 216.280946][T12966] overlayfs: failed to resolve './bus': -2 [ 216.385389][T12961] chnl_net:caif_netlink_parms(): no params data found [ 216.391720][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 216.391733][ T40] audit: type=1400 audit(2000000041.629:819): avc: denied { map } for pid=12973 comm="syz.3.2059" path="socket:[51226]" dev="sockfs" ino=51226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.456332][ T40] audit: type=1400 audit(2000000041.699:820): avc: denied { mounton } for pid=12989 comm="syz.3.2060" path="/500/file0" dev="9p" ino=71827761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.462701][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.471266][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.471997][ T40] audit: type=1400 audit(2000000041.709:821): avc: denied { getattr } for pid=12989 comm="syz.3.2060" name="/" dev="9p" ino=71827761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 216.474466][T12961] bridge_slave_0: entered allmulticast mode [ 216.487834][T12961] bridge_slave_0: entered promiscuous mode [ 216.491997][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.494408][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.496925][T12961] bridge_slave_1: entered allmulticast mode [ 216.499601][T12961] bridge_slave_1: entered promiscuous mode [ 216.516702][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.521559][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.537585][T12961] team0: Port device team_slave_0 added [ 216.540874][T12961] team0: Port device team_slave_1 added [ 216.566838][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.570072][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.572096][T12994] smc: removing ib device syz2 [ 216.578801][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.579878][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.587270][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.595615][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.636235][ T1147] net_ratelimit: 16 callbacks suppressed [ 216.636248][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.681198][T12961] hsr_slave_0: entered promiscuous mode [ 216.683678][T12961] hsr_slave_1: entered promiscuous mode [ 216.685457][T12995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.691846][T12961] debugfs: 'hsr0' already exists in 'hsr' [ 216.694164][T12961] Cannot create hsr debugfs directory [ 216.899753][T12961] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.904463][T12961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.008482][T12961] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.012208][T13001] netlink: 'syz.1.2063': attribute type 21 has an invalid length. [ 217.012622][T12961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.097258][T12961] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.100500][T12961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.205922][T12961] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.210746][T12961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.269643][T13015] netlink: 'syz.1.2069': attribute type 3 has an invalid length. [ 217.272542][T13015] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 217.275841][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.280232][T13015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2069'. [ 217.285488][T13015] NCSI netlink: No device for ifindex 0 [ 217.286478][ T6123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.325732][T13024] program syz.3.2071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.348332][T13015] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 217.371021][T13015] cramfs: wrong magic [ 217.382177][T12961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.388122][T12961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.392691][T12961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.399766][T12961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.510597][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.532442][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.549419][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.552011][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.558581][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.560962][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.594194][T12961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.683330][ T40] audit: type=1400 audit(2000000042.919:822): avc: denied { append } for pid=13067 comm="syz.3.2082" name="pfkey" dev="proc" ino=4026533008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 217.741730][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.789044][T12961] veth0_vlan: entered promiscuous mode [ 217.801150][T12961] veth1_vlan: entered promiscuous mode [ 217.817002][ T40] audit: type=1400 audit(2000000043.049:823): avc: denied { execute } for pid=13076 comm="syz.4.2086" path="/dev/dsp" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 217.829719][T12961] veth0_macvtap: entered promiscuous mode [ 217.836194][T12961] veth1_macvtap: entered promiscuous mode [ 217.869285][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.896753][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.923043][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.004590][ T6132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.008489][ T6132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.011537][ T6132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.023138][ T6132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.075362][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.078248][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.104118][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.112959][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.179928][ T40] audit: type=1400 audit(2000000043.419:824): avc: denied { mounton } for pid=12961 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 218.235658][ T5948] Bluetooth: hci0: command tx timeout [ 218.357602][T13119] autofs4:pid:13119:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 218.362771][T13119] autofs4:pid:13119:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 218.395634][ T40] audit: type=1400 audit(2000000043.639:825): avc: denied { ioctl } for pid=13122 comm="syz.1.2099" path="socket:[48756]" dev="sockfs" ino=48756 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.405049][ T40] audit: type=1400 audit(2000000043.639:826): avc: denied { lock } for pid=13122 comm="syz.1.2099" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 218.550772][ T40] audit: type=1400 audit(2000000043.789:827): avc: denied { map } for pid=13120 comm="syz.0.2100" path="socket:[48766]" dev="sockfs" ino=48766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.839818][T13145] ip6gre2: entered promiscuous mode [ 218.842307][T13145] ip6gre2: entered allmulticast mode [ 219.054207][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 219.083563][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 219.195464][ T53] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 219.379623][ T53] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.383321][ T53] usb 8-1: config 0 has no interface number 0 [ 219.386683][ T53] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.391797][ T53] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 219.397381][ T53] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.401734][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.406305][ T53] usb 8-1: config 0 descriptor?? [ 219.408689][T13150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.415469][ T53] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 219.569904][T13165] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 219.614373][ T29] usb 8-1: USB disconnect, device number 18 [ 219.616949][T13168] geneve1: entered allmulticast mode [ 219.964971][T13177] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2117' sets config #1 [ 220.218452][ T40] audit: type=1400 audit(2000000045.459:828): avc: denied { search } for pid=13191 comm="syz.4.2120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 220.218591][T13192] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 220.248464][T13192] SELinux: failed to load policy [ 220.325271][ T5948] Bluetooth: hci0: command tx timeout [ 220.673813][T13216] netlink: 'syz.4.2130': attribute type 8 has an invalid length. [ 220.735314][ T53] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 220.801278][ T5986] hid-generic 00A0:0086:0003.000F: hidraw1: HID v0.05 Device [syz1] on syz0 [ 220.886929][ T53] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 220.895213][ T53] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 220.900044][ T53] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 220.904624][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.910708][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.914504][ T53] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.917939][ T53] usb 6-1: Product: syz [ 220.919737][ T53] usb 6-1: Manufacturer: syz [ 220.921780][ T53] usb 6-1: SerialNumber: syz [ 220.926173][ T53] usb 6-1: config 0 descriptor?? [ 220.929129][T13204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.945904][ T53] usb 6-1: selecting invalid altsetting 0 [ 220.969661][T13246] dlm: non-version read from control device 8224 [ 220.972821][T13246] dlm: non-version read from control device 8224 [ 221.103725][T13270] netlink: 'syz.4.2147': attribute type 8 has an invalid length. [ 221.115490][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 221.142215][T13204] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 221.198074][ T53] usb 6-1: USB disconnect, device number 27 [ 221.577632][T13315] bridge_slave_0: left allmulticast mode [ 221.579567][T13315] bridge_slave_0: left promiscuous mode [ 221.581693][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.586675][T13315] bridge_slave_1: left allmulticast mode [ 221.588570][T13315] bridge_slave_1: left promiscuous mode [ 221.590536][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.598518][T13315] bond0: (slave bond_slave_0): Releasing backup interface [ 221.603103][T13315] bond0: (slave bond_slave_1): Releasing backup interface [ 221.613071][T13315] team0: Port device team_slave_0 removed [ 221.619207][T13315] team0: Port device team_slave_1 removed [ 221.621680][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.624561][T13315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.628594][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.630967][T13315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.634217][T13315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.644873][T13316] team0: Mode changed to "random" [ 221.651985][T13315] vlan0: entered promiscuous mode [ 221.658951][T13315] team0: Port device vlan0 added [ 221.734549][T13320] tmpfs: Bad value for 'huge' [ 221.766181][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.002176][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.007101][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.010269][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.016464][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.020040][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.126982][T13326] chnl_net:caif_netlink_parms(): no params data found [ 222.202998][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.205424][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.207833][T13326] bridge_slave_0: entered allmulticast mode [ 222.210721][T13326] bridge_slave_0: entered promiscuous mode [ 222.214288][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.217201][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.219658][T13326] bridge_slave_1: entered allmulticast mode [ 222.222868][T13326] bridge_slave_1: entered promiscuous mode [ 222.250017][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.261170][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.283948][T13326] team0: Port device team_slave_0 added [ 222.288212][T13326] team0: Port device team_slave_1 added [ 222.308824][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.311518][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.321472][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.326133][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.328469][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.337923][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.365238][T13326] hsr_slave_0: entered promiscuous mode [ 222.367625][T13326] hsr_slave_1: entered promiscuous mode [ 222.369896][T13326] debugfs: 'hsr0' already exists in 'hsr' [ 222.371886][T13326] Cannot create hsr debugfs directory [ 222.395448][ T5939] Bluetooth: hci0: command tx timeout [ 222.496378][T13326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.502370][T13326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.506932][T13326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.511536][T13326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.533102][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.535756][T13326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.538385][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.540684][T13326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.592853][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.610394][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.617854][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.653661][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.665459][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.668581][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.680510][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.683671][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.698133][T13361] overlayfs: cannot append lower layer [ 222.723708][T13352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2172'. [ 222.729495][T13352] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 222.745825][T13352] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.838512][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.839510][T13376] kAFS: unable to lookup cell '(,c¾ûL' [ 222.844176][T13376] kAFS: unable to lookup cell '\,' [ 222.903389][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 222.903408][ T40] audit: type=1400 audit(2000000048.139:831): avc: denied { override_creds } for pid=13388 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.039499][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.064855][T13326] veth0_vlan: entered promiscuous mode [ 223.078839][T13326] veth1_vlan: entered promiscuous mode [ 223.114707][T13326] veth0_macvtap: entered promiscuous mode [ 223.122367][T13326] veth1_macvtap: entered promiscuous mode [ 223.139565][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.142908][ T29] Process accounting resumed [ 223.147848][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.160695][ T6132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.164221][ T6132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.169569][ T6132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.173044][ T6132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.237099][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.239731][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.259605][ T6132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.263185][ T6132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.275319][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 223.305244][ T53] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 223.455193][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 223.458184][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.461738][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.464863][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.468568][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.471749][ T53] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.474759][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.480548][ T53] hub 6-1:1.0: bad descriptor, ignoring hub [ 223.482644][ T53] hub 6-1:1.0: probe with driver hub failed with error -5 [ 223.486905][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 223.488611][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 223.491424][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 223.493421][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 223.537140][T13430] input: syz1 as /devices/virtual/input/input33 [ 223.596181][T13433] SELinux: policydb string length 14080 does not match expected length 8 [ 223.600055][T13433] SELinux: failed to load policy [ 223.602853][T13433] netlink: 'syz.5.2192': attribute type 10 has an invalid length. [ 223.608115][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2192'. [ 223.675883][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.730210][T13436] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 223.732687][T13436] [U] J"—e:ÀÆ" [ 223.764004][T13438] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 223.785434][ T6032] usb 6-1: USB disconnect, device number 28 [ 223.818126][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2195'. [ 224.075419][ T5939] Bluetooth: hci3: command tx timeout [ 224.095303][ T53] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 224.249652][ T53] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 224.253822][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 224.257514][ T53] usb 8-1: Product: syz [ 224.259420][ T53] usb 8-1: Manufacturer: syz [ 224.261461][ T53] usb 8-1: SerialNumber: syz [ 224.267532][ T53] usb 8-1: config 0 descriptor?? [ 224.278566][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 224.282014][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 224.287586][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.291046][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 224.293611][ T53] usb 8-1: media controller created [ 224.300671][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.378011][ T10] hid_parser_main: 4101 callbacks suppressed [ 224.378024][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 224.385399][ T10] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz0 [ 224.385998][T13457] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 224.391821][ T40] audit: type=1400 audit(2000000049.629:832): avc: denied { relabelto } for pid=13456 comm="syz.0.2201" name="34" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 224.403340][ T40] audit: type=1400 audit(2000000049.629:833): avc: denied { associate } for pid=13456 comm="syz.0.2201" name="34" dev="tmpfs" ino=193 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 224.475474][ T5939] Bluetooth: hci0: command tx timeout [ 224.480179][T13440] cxusb: i2c wr: len=80 is too big! [ 224.480179][T13440] [ 224.484534][ T53] cxusb: set interface failed [ 224.489899][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 224.508621][ T53] DVB: Unable to find symbol mt352_attach() [ 224.510920][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 224.512858][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 224.515668][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 224.565779][ T53] rc_core: IR keymap rc-dvico-mce not found [ 224.568208][ T53] Registered IR keymap rc-empty [ 224.571411][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 224.576359][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input34 [ 224.578371][T13462] batadv_slave_1: entered promiscuous mode [ 224.586026][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 224.588654][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 224.592797][ T53] usb 8-1: USB disconnect, device number 19 [ 224.608270][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 224.640144][T13461] batadv_slave_1: left promiscuous mode [ 224.708046][T13469] netlink: 'syz.1.2204': attribute type 21 has an invalid length. [ 224.748267][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 224.770909][T13478] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2206'. [ 224.982445][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 224.985900][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2212'. [ 225.048457][ T40] audit: type=1400 audit(2000000050.289:834): avc: denied { name_bind } for pid=13499 comm="syz.1.2214" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 225.094087][T13503] syz.1.2215: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 225.126664][T13503] misc userio: The device must be registered before sending interrupts [ 225.193379][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 225.193437][T13513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2218'. [ 225.220518][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2219'. [ 225.248165][T13524] batman_adv: batadv0: Adding interface: dummy0 [ 225.250245][T13524] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.260007][T13524] batman_adv: batadv0: Interface activated: dummy0 [ 225.264423][ T5939] Bluetooth: hci1: unexpected event for opcode 0x203b [ 225.269311][T13523] batadv0: mtu less than device minimum [ 225.274187][T13523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.279300][T13523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.283913][T13523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.288983][T13523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.294490][T13523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 225.304089][T13531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13531 comm=syz.1.2222 [ 225.310584][T13528] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 225.378965][T13535] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 225.384243][T13535] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 225.705430][ T6058] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 225.846531][ T6058] usb 5-1: device descriptor read/64, error -71 [ 225.903640][T13568] XFS (nbd5): SB validate failed with error -5. [ 226.095332][ T6058] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.122936][T13594] syzkaller1: entered promiscuous mode [ 226.125504][T13594] syzkaller1: entered allmulticast mode [ 226.155318][ T5939] Bluetooth: hci3: command tx timeout [ 226.180533][T13596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13596 comm=syz.1.2243 [ 226.225656][ T6058] usb 5-1: device descriptor read/64, error -71 [ 226.345889][ T6058] usb usb5-port1: attempt power cycle [ 226.427310][T13612] netlink: 'syz.1.2247': attribute type 2 has an invalid length. [ 226.435085][T13612] bridge0: entered allmulticast mode [ 226.473501][T13614] bond5: option downdelay: invalid value (18446744073709551615) [ 226.478086][T13614] bond5: option downdelay: allowed values 0 - 2147483647 [ 226.481636][T13614] bond5 (unregistering): Released all slaves [ 226.705314][ T6058] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.725961][ T6058] usb 5-1: device descriptor read/8, error -71 [ 226.742860][T13635] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 226.745764][T13635] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 226.749061][T13635] cramfs: wrong magic [ 226.752567][T13636] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 226.754883][T13636] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 226.760144][T13636] cramfs: wrong magic [ 226.965746][ T6058] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 226.996972][ T6058] usb 5-1: device descriptor read/8, error -71 [ 227.054794][T13662] ref_ctr increment failed for inode: 0x87 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880385bbd40 [ 227.055873][ T40] audit: type=1804 audit(2000000052.289:835): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2261" name="/newroot/23/file0" dev="tmpfs" ino=135 res=1 errno=0 [ 227.060100][T13662] afs: Unknown parameter 'au3§iÁHtoçk¬‚ë1Dú' [ 227.074042][ T40] audit: type=1804 audit(2000000052.309:836): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2261" name="/newroot/23/file0" dev="tmpfs" ino=135 res=1 errno=0 [ 227.105780][ T6058] usb usb5-port1: unable to enumerate USB device [ 227.252604][T13674] input: syz1 as /devices/virtual/input/input39 [ 227.517315][ T6123] net_ratelimit: 15 callbacks suppressed [ 227.517334][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.699265][T13690] netlink: 'syz.5.2270': attribute type 21 has an invalid length. [ 227.702297][T13690] netlink: 'syz.5.2270': attribute type 6 has an invalid length. [ 227.739166][T13694] bpf: Bad value for 'mode' [ 227.739723][T13697] openvswitch: netlink: Invalid VLAN frame [ 227.782393][T13703] comedi comedi2: comedi_config --init_data is deprecated [ 227.806766][ T5939] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 227.830165][T13708] netlink: 'syz.5.2275': attribute type 10 has an invalid length. [ 227.850486][T13708] veth0_vlan: left promiscuous mode [ 227.854645][T13708] veth0_vlan: entered promiscuous mode [ 227.859356][T13708] team0: Device veth0_vlan failed to register rx_handler [ 227.901365][T13710] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 227.905649][T13710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.167466][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.175399][ T6017] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 228.245809][ T5939] Bluetooth: hci3: command tx timeout [ 228.252401][T13736] 9pnet_virtio: no channels available for device syz [ 228.327615][ T6017] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 228.331017][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.335094][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.339679][ T6017] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.344418][ T6017] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.347384][ T6017] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.349769][ T6017] usb 6-1: Manufacturer: syz [ 228.352538][ T6017] usb 6-1: config 0 descriptor?? [ 228.395473][ T6032] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 228.547366][ T6032] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.550075][ T6032] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.553433][ T6032] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.558047][ T6032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 228.561653][ T6032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 228.567621][ T6032] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.570545][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.573062][ T6032] usb 10-1: Product: syz [ 228.574449][ T6032] usb 10-1: Manufacturer: syz [ 228.579046][ T6032] cdc_wdm 10-1:1.0: skipping garbage [ 228.580786][ T6032] cdc_wdm 10-1:1.0: skipping garbage [ 228.583487][ T6032] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 228.585847][ T6032] cdc_wdm 10-1:1.0: Unknown control protocol [ 228.601056][T13756] __nla_validate_parse: 11 callbacks suppressed [ 228.601072][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2291'. [ 228.608248][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 228.661974][T13757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1812 sclass=netlink_tcpdiag_socket pid=13757 comm=syz.0.2291 [ 228.763078][ T6017] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 228.775389][ T6017] appleir 0003:05AC:8243.0011: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 228.824281][ T1346] usb 10-1: USB disconnect, device number 2 [ 229.268497][ T1346] IPVS: starting estimator thread 0... [ 229.321702][T13791] tmpfs: Bad value for 'mpol' [ 229.355394][T13782] IPVS: using max 43 ests per chain, 103200 per kthread [ 229.378329][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2303'. [ 229.381518][T13802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2303'. [ 229.386960][T13801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.436382][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.462072][T13809] random: crng reseeded on system resumption [ 229.469837][T13809] netlink: 'syz.0.2306': attribute type 10 has an invalid length. [ 229.478319][T13809] team0: Device veth1_macvtap failed to register rx_handler [ 230.116921][T13819] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 230.121258][ T40] audit: type=1400 audit(2000000055.359:837): avc: denied { setattr } for pid=13818 comm="syz.0.2310" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 230.315501][ T5939] Bluetooth: hci3: command tx timeout [ 230.435825][T13829] overlayfs: failed to resolve './file2': -2 [ 230.446237][T13828] gtp0: entered promiscuous mode [ 230.529480][T13836] netlink: 'syz.5.2315': attribute type 7 has an invalid length. [ 230.537246][ T6122] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.540881][T13836] netlink: 'syz.5.2315': attribute type 7 has an invalid length. [ 230.543585][ T6122] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.546980][ T6122] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.550163][ T6122] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.568893][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2317'. [ 230.644346][T13850] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 230.712259][T13857] SELinux: policydb version -179544204 does not match my version range 15-35 [ 230.717492][T13857] SELinux: failed to load policy [ 230.809234][T13862] Bluetooth: Invalid esc byte 0x00 [ 230.817058][T13862] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 230.828759][ T6122] Bluetooth: (null): Invalid header checksum [ 230.957690][ T5986] usb 6-1: USB disconnect, device number 29 [ 230.990980][T13879] IPVS: stopping backup sync thread 13880 ... [ 230.990984][T13880] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 231.004935][T13881] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 231.005039][T13879] IPVS: stopping backup sync thread 13881 ... [ 231.016238][T13884] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 231.016337][T13879] IPVS: stopping backup sync thread 13884 ... [ 231.019295][ T40] audit: type=1400 audit(2000000056.259:838): avc: denied { ioctl } for pid=13883 comm="syz.0.2330" path="socket:[54022]" dev="sockfs" ino=54022 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 231.031109][T13879] IPVS: stopping backup sync thread 13887 ... [ 231.031399][T13887] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 231.148516][T13899] Bluetooth: MGMT ver 1.23 [ 231.177987][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'. [ 231.181316][T13902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2335'. [ 231.248429][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'. [ 231.252523][T13902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2335'. [ 231.396911][ T40] audit: type=1400 audit(2000000056.639:839): avc: denied { create } for pid=13912 comm="syz.5.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 231.406692][ T40] audit: type=1400 audit(2000000056.649:840): avc: denied { setopt } for pid=13912 comm="syz.5.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 231.417259][T13913] netlink: 'syz.5.2338': attribute type 1 has an invalid length. [ 231.432694][T13913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.435920][T13914] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 231.524992][T13929] fuse: Bad value for 'fd' [ 231.626784][T13937] hub 2-0:1.0: USB hub found [ 231.629157][T13937] hub 2-0:1.0: 2 ports detected [ 231.676880][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.680174][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.684407][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.689051][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.691579][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.694498][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.697993][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.700912][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.703450][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.706949][ T5986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 231.710834][ T5986] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.03 Device [syz1] on syz1 [ 231.717470][T13948] netfs: Couldn't get user pages (rc=-14) [ 231.725910][T13948] ip6t_srh: unknown srh match flags 4000 [ 232.098119][T13958] No control pipe specified [ 232.173685][T13964] erspan3: entered promiscuous mode [ 232.267235][T13974] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.270772][T13974] UDF-fs: Scanning with blocksize 512 failed [ 232.273070][T13974] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.277045][T13974] UDF-fs: Scanning with blocksize 1024 failed [ 232.279812][T13974] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.282358][T13974] UDF-fs: Scanning with blocksize 2048 failed [ 232.284452][T13974] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.287332][T13974] UDF-fs: Scanning with blocksize 4096 failed [ 232.293557][ T40] audit: type=1326 audit(2000000057.529:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13973 comm="syz.1.2357" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4858f7c9 code=0xffff0000 [ 232.505571][ T29] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 232.660272][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.664603][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.668121][ T29] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.671811][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.677377][ T29] usb 8-1: config 0 descriptor?? [ 232.681664][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.684528][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 232.690753][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.694732][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.697322][ T29] usb 8-1: media controller created [ 232.700717][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.710507][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 232.713117][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 232.718500][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input40 [ 232.724944][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 232.728932][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 232.777633][ T40] audit: type=1400 audit(2000000058.019:842): avc: denied { create } for pid=13981 comm="syz.0.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 232.784348][ T40] audit: type=1400 audit(2000000058.019:843): avc: denied { write } for pid=13981 comm="syz.0.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 232.884000][T13972] dvb-usb: bulk message failed: -22 (2/0) [ 232.889256][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 232.891576][ T29] dvb-usb: error while querying for an remote control event. [ 232.964840][ T40] audit: type=1400 audit(2000000058.199:844): avc: denied { map } for pid=13981 comm="syz.0.2360" path="pipe:[48398]" dev="pipefs" ino=48398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 233.048174][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 233.049988][ T29] dvb-usb: error while querying for an remote control event. [ 233.050156][T13987] tipc: Enabled bearer , priority 10 [ 233.082799][T13993] comedi comedi1: s526: I/O port conflict (0x9,64) [ 233.133670][ T10] usb 8-1: USB disconnect, device number 20 [ 233.141277][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 233.285683][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.399297][T14008] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 233.435462][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 233.483176][T14013] sctp: [Deprecated]: syz.1.2368 (pid 14013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.483176][T14013] Use struct sctp_sack_info instead [ 233.593798][T14022] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 233.598819][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 233.602047][ T29] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.604603][ T29] usb 10-1: config 0 has no interface number 0 [ 233.606685][ T29] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.609958][ T29] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.613059][ T29] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.616063][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.619247][T14022] bond5: entered promiscuous mode [ 233.619888][ T29] usb 10-1: config 0 descriptor?? [ 233.622627][T14022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.626656][ T29] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 233.637283][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 233.647421][T14022] bond5: (slave bridge3): making interface the new active one [ 233.650227][T14022] bridge3: entered promiscuous mode [ 233.652696][T14022] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 233.689213][T14025] sg_write: process 1734 (syz.1.2372) changed security contexts after opening file descriptor, this is not allowed. [ 233.763043][T14032] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 233.829738][ T10] usb 10-1: USB disconnect, device number 3 [ 233.915591][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.950795][T14044] program syz.1.2378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.017289][T14049] overlayfs: failed to resolve './file1': -2 [ 234.112996][ T40] audit: type=1400 audit(2000000059.349:845): avc: denied { listen } for pid=14061 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.120806][ T40] audit: type=1400 audit(2000000059.359:846): avc: denied { accept } for pid=14061 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.136912][T14064] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 234.136912][T14064] program syz.3.2386 not setting count and/or reply_len properly [ 234.184324][T14066] binder: 14065:14066 ioctl c0306201 200000000640 returned -22 [ 234.190521][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 234.193845][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 234.199135][T14066] EXT4-fs (nbd3): unable to read superblock [ 234.279114][T14072] Cannot find set identified by id 3 to match [ 234.297613][T14072] virtio-fs: tag not found [ 234.318026][ T6032] hid-generic 0005:0006:5508.0013: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 234.429794][T14079] cgroup: none used incorrectly [ 234.557499][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.213514][T14077] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.220756][T14082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.267351][T14094] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2393'. [ 235.311043][T14096] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 235.350833][T14102] xt_connbytes: Forcing CT accounting to be enabled [ 235.373461][T14101] ip6gre0: entered promiscuous mode [ 235.379984][T14101] team0: Device ip6gre0 is of different type [ 235.421559][T14106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.432354][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 235.477499][T14113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.481231][T14110] netlink: 'syz.5.2397': attribute type 1 has an invalid length. [ 235.484666][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 235.488789][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 235.512645][T14110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.532802][ T6127] Bluetooth: hci4: Frame reassembly failed (-84) [ 235.561455][T14120] trusted_key: encrypted_key: master key parameter is missing [ 235.619071][T14128] fuse: blksize only supported for fuseblk [ 235.676535][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2404'. [ 235.885506][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 235.885524][ T40] audit: type=1804 audit(2000000061.099:848): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2408" name="/newroot/69/file1" dev="fuse" ino=1 res=1 errno=0 [ 235.899441][ T40] audit: type=1800 audit(2000000061.099:849): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2408" name="/" dev="fuse" ino=1 res=0 errno=0 [ 236.059959][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 236.224082][ T6147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.228048][ T6147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.290751][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.296743][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.299796][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.303383][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.306630][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.351554][ T6147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.357349][ T6147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.432107][ T6147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.435656][ T6147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.493591][ T40] audit: type=1400 audit(2000000061.729:850): avc: denied { map } for pid=14191 comm="syz.0.2420" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 236.504401][ T40] audit: type=1400 audit(2000000061.729:851): avc: denied { execute } for pid=14191 comm="syz.0.2420" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 236.513212][T14183] chnl_net:caif_netlink_parms(): no params data found [ 236.542011][ T6147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.545651][ T6147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.621044][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.625378][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.627873][T14183] bridge_slave_0: entered allmulticast mode [ 236.630725][T14183] bridge_slave_0: entered promiscuous mode [ 236.634066][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.637927][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.641058][T14183] bridge_slave_1: entered allmulticast mode [ 236.645002][T14183] bridge_slave_1: entered promiscuous mode [ 236.682697][T14183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.688503][T14183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.712532][T14183] team0: Port device team_slave_0 added [ 236.716977][ T6147] bridge_slave_1: left allmulticast mode [ 236.718798][ T6147] bridge_slave_1: left promiscuous mode [ 236.720795][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.727413][ T6147] bridge_slave_0: left allmulticast mode [ 236.729625][ T6147] bridge_slave_0: left promiscuous mode [ 236.731709][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.841592][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 237.174116][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.179987][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.185800][ T6147] bond0 (unregistering): Released all slaves [ 237.284148][ T6147] bond1 (unregistering): Released all slaves [ 237.376413][ T6147] bond2 (unregistering): Released all slaves [ 237.383694][T14183] team0: Port device team_slave_1 added [ 237.403637][T14204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.426171][T14205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.459019][T14183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.465209][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.480735][T14183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.485943][T14183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.488038][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.496265][T14183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.594841][T14183] hsr_slave_0: entered promiscuous mode [ 237.595333][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.595480][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 237.600435][T14183] hsr_slave_1: entered promiscuous mode [ 237.604575][T14183] debugfs: 'hsr0' already exists in 'hsr' [ 237.606536][T14183] Cannot create hsr debugfs directory [ 237.684817][ T40] audit: type=1400 audit(2000000062.919:852): avc: denied { name_bind } for pid=14235 comm="syz.3.2435" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 237.732693][T14240] SELinux: failed to load policy [ 237.812323][ T6147] hsr_slave_0: left promiscuous mode [ 237.816167][ T6147] hsr_slave_1: left promiscuous mode [ 237.819266][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.822683][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.827764][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.831032][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.843876][ T6147] veth1_macvtap: left promiscuous mode [ 237.848619][ T6147] veth0_macvtap: left promiscuous mode [ 237.851032][ T6147] veth1_vlan: left promiscuous mode [ 238.331303][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 238.361593][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 238.408183][ T5939] Bluetooth: hci3: command tx timeout [ 238.759729][T14183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.778299][T14183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.788181][T14183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.793006][T14183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.804275][T14290] program syz.1.2449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.881093][T14183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.894454][T14183] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.901400][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.903750][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.934675][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.937068][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.963244][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.036632][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.143080][T14183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.314960][T14183] veth0_vlan: entered promiscuous mode [ 239.323078][T14183] veth1_vlan: entered promiscuous mode [ 239.347735][T14183] veth0_macvtap: entered promiscuous mode [ 239.352757][T14183] veth1_macvtap: entered promiscuous mode [ 239.362590][T14183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.369082][T14183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.377029][ T6147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.380068][ T6147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.389872][ T6147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.392649][ T6147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.433316][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.446380][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.467419][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.469847][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.513162][ T40] audit: type=1326 audit(2000000064.749:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.0.2457" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee058f7c9 code=0x0 [ 239.674133][T14339] input: syz0 as /devices/virtual/input/input42 [ 239.749469][T14342] __nla_validate_parse: 3 callbacks suppressed [ 239.749484][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 239.762477][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.770209][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.774768][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.782260][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.787156][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.854973][ T40] audit: type=1400 audit(2000000065.089:854): avc: denied { lock } for pid=14354 comm="syz.6.2463" path="socket:[57270]" dev="sockfs" ino=57270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.894854][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 239.959716][T14346] chnl_net:caif_netlink_parms(): no params data found [ 240.073106][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.076782][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.079137][T14346] bridge_slave_0: entered allmulticast mode [ 240.082899][T14346] bridge_slave_0: entered promiscuous mode [ 240.119521][T14367] block nbd6: shutting down sockets [ 240.127451][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.130241][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.132880][T14346] bridge_slave_1: entered allmulticast mode [ 240.136148][T14346] bridge_slave_1: entered promiscuous mode [ 240.157329][T14374] mkiss: ax0: crc mode is auto. [ 240.159789][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.179870][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.199705][T14346] team0: Port device team_slave_0 added [ 240.204202][T14346] team0: Port device team_slave_1 added [ 240.220812][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.223429][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.233963][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.238893][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.241197][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.251959][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.284361][T14346] hsr_slave_0: entered promiscuous mode [ 240.287083][T14346] hsr_slave_1: entered promiscuous mode [ 240.288464][T14376] netlink: 'syz.3.2467': attribute type 11 has an invalid length. [ 240.289260][T14346] debugfs: 'hsr0' already exists in 'hsr' [ 240.294271][T14376] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2467'. [ 240.294503][T14346] Cannot create hsr debugfs directory [ 240.327687][ T6122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.422768][T14384] 9pnet_fd: p9_fd_create_tcp (14384): problem connecting socket to 127.0.0.1 [ 240.457902][T14346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.463185][T14346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.475726][ T5939] Bluetooth: hci3: command tx timeout [ 240.483691][T14389] overlayfs: workdir and upperdir must be separate subtrees [ 240.494255][ T40] audit: type=1400 audit(2000000065.729:855): avc: denied { ioctl } for pid=14383 comm="syz.3.2469" path="socket:[60422]" dev="sockfs" ino=60422 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.579430][T14346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.584327][T14346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.691024][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 240.695866][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 240.707695][T14346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.712707][T14346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.785956][T14406] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2474'. [ 240.790011][T14406] netlink: Conntrack attr has 4 unknown bytes [ 240.799529][T14346] netdevsim netdevsim1 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.803196][T14346] netdevsim netdevsim1 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.897933][ T40] audit: type=1400 audit(2000000066.139:856): avc: denied { mounton } for pid=14417 comm="syz.3.2477" path="/596/file1/file0" dev="hugetlbfs" ino=58802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 240.953190][T14346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.958861][T14346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.963682][T14346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.971262][T14346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.048307][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.064884][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.073345][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.075699][ T6108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.086440][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.089478][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.224992][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.249289][T14346] veth0_vlan: entered promiscuous mode [ 241.254430][T14346] veth1_vlan: entered promiscuous mode [ 241.273918][T14346] veth0_macvtap: entered promiscuous mode [ 241.279141][T14346] veth1_macvtap: entered promiscuous mode [ 241.288091][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.297733][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.306586][ T6137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.310882][ T6137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.315472][ T6137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.319171][ T6137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.375870][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.379310][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.400632][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.403969][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.512615][T14443] bond1: ARP target 4.0.0.0 is already present [ 241.517274][T14443] bond1: option arp_ip_target: invalid value (4) [ 241.521683][T14443] bond1 (unregistering): Released all slaves [ 241.566002][T14446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2483'. [ 241.674544][T14458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=14458 comm=syz.1.2487 [ 241.846866][ T5939] Bluetooth: hci4: command tx timeout [ 241.941231][T14480] random: crng reseeded on system resumption [ 242.032279][T14488] ------------[ cut here ]------------ [ 242.034290][T14488] WARNING: ./include/linux/skbuff.h:3122 at packet_sendmsg+0x49eb/0x54a0, CPU#3: syz.1.2496/14488 [ 242.037821][T14488] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 242.039573][T14488] CPU: 3 UID: 0 PID: 14488 Comm: syz.1.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.043820][T14488] Tainted: [L]=SOFTLOCKUP [ 242.045541][T14488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.049238][T14488] RIP: 0010:packet_sendmsg+0x49eb/0x54a0 [ 242.051201][T14488] Code: 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 59 08 00 00 41 8b 9e cc 00 00 00 48 01 eb e9 88 c5 ff ff e8 56 64 7d f7 90 <0f> 0b 90 e9 a3 df ff ff e8 48 64 7d f7 48 8b 54 24 18 48 b8 00 00 [ 242.057629][T14488] RSP: 0018:ffffc90006e9fae0 EFLAGS: 00010293 [ 242.059605][T14488] RAX: 0000000000000000 RBX: ffffc90006e9fd58 RCX: ffffffff8a416439 [ 242.062843][T14488] RDX: ffff88802f7bc980 RSI: ffffffff8a41849a RDI: 0000000000000007 [ 242.065494][ T6016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.066665][T14488] RBP: ffffffffffffff84 R08: 0000000000000007 R09: 000000000000ffff [ 242.073300][T14488] R10: ffffffffffffff84 R11: 0000000000000000 R12: ffff888053ce0a00 [ 242.077219][T14488] R13: 000000000000002c R14: ffff888022c8c000 R15: 000000000000000e [ 242.080398][T14488] FS: 00007fcfe64ac6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 242.083852][T14488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.086412][T14488] CR2: 00007fcfe64abf98 CR3: 000000004eb64000 CR4: 0000000000352ef0 [ 242.087545][ T6147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.089405][T14488] Call Trace: [ 242.089416][T14488] [ 242.089431][T14488] ? sock_has_perm+0x258/0x2f0 [ 242.089461][T14488] ? __pfx_sock_has_perm+0x10/0x10 [ 242.089477][T14488] ? __pfx_packet_sendmsg+0x10/0x10 [ 242.089500][T14488] __sys_sendto+0x4a3/0x520 [ 242.089514][T14488] ? __pfx___sys_sendto+0x10/0x10 [ 242.089530][T14488] ? fd_install+0x223/0x570 [ 242.093553][ T6147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.094555][T14488] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.094593][T14488] __x64_sys_sendto+0xe0/0x1c0 [ 242.094607][T14488] ? do_syscall_64+0x91/0xf80 [ 242.094626][T14488] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.116663][T14488] do_syscall_64+0xcd/0xf80 [ 242.118217][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.120207][T14488] RIP: 0033:0x7fcfe558f7c9 [ 242.121761][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.128086][T14488] RSP: 002b:00007fcfe64ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.130799][T14488] RAX: ffffffffffffffda RBX: 00007fcfe57e6090 RCX: 00007fcfe558f7c9 [ 242.133863][T14488] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000004 [ 242.136587][T14488] RBP: 00007fcfe5613f91 R08: 0000200000000140 R09: 0000000000000014 [ 242.139111][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.142109][T14488] R13: 00007fcfe57e6128 R14: 00007fcfe57e6090 R15: 00007ffdd27ec0e8 [ 242.144984][T14488] [ 242.146392][T14488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.148817][T14488] CPU: 3 UID: 0 PID: 14488 Comm: syz.1.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.152558][T14488] Tainted: [L]=SOFTLOCKUP [ 242.154003][T14488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.157645][T14488] Call Trace: [ 242.158740][T14488] [ 242.159710][T14488] dump_stack_lvl+0x3d/0x1f0 [ 242.161229][T14488] vpanic+0x640/0x6f0 [ 242.162499][T14488] ? packet_sendmsg+0x49eb/0x54a0 [ 242.164263][T14488] panic+0xca/0xd0 [ 242.165498][T14488] ? __pfx_panic+0x10/0x10 [ 242.167286][T14488] ? check_panic_on_warn+0x1f/0xb0 [ 242.169014][T14488] check_panic_on_warn+0xab/0xb0 [ 242.170644][T14488] __warn+0x108/0x3c0 [ 242.171985][T14488] __report_bug+0x2a0/0x520 [ 242.173650][T14488] ? packet_sendmsg+0x49eb/0x54a0 [ 242.175441][T14488] ? __pfx___report_bug+0x10/0x10 [ 242.177284][T14488] ? __pfx_skb_set_owner_w+0x10/0x10 [ 242.179089][T14488] ? alloc_skb_with_frags+0x53e/0x860 [ 242.181222][T14488] ? sock_alloc_send_pskb+0x755/0x980 [ 242.182988][T14488] ? packet_sendmsg+0x49eb/0x54a0 [ 242.184815][T14488] report_bug+0xb2/0x220 [ 242.186236][T14488] ? packet_sendmsg+0x49eb/0x54a0 [ 242.188275][T14488] handle_bug+0x127/0x260 [ 242.190042][T14488] exc_invalid_op+0x17/0x50 [ 242.191766][T14488] asm_exc_invalid_op+0x1a/0x20 [ 242.193442][T14488] RIP: 0010:packet_sendmsg+0x49eb/0x54a0 [ 242.195414][T14488] Code: 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 59 08 00 00 41 8b 9e cc 00 00 00 48 01 eb e9 88 c5 ff ff e8 56 64 7d f7 90 <0f> 0b 90 e9 a3 df ff ff e8 48 64 7d f7 48 8b 54 24 18 48 b8 00 00 [ 242.201915][T14488] RSP: 0018:ffffc90006e9fae0 EFLAGS: 00010293 [ 242.204229][T14488] RAX: 0000000000000000 RBX: ffffc90006e9fd58 RCX: ffffffff8a416439 [ 242.207245][T14488] RDX: ffff88802f7bc980 RSI: ffffffff8a41849a RDI: 0000000000000007 [ 242.210147][T14488] RBP: ffffffffffffff84 R08: 0000000000000007 R09: 000000000000ffff [ 242.212918][T14488] R10: ffffffffffffff84 R11: 0000000000000000 R12: ffff888053ce0a00 [ 242.215438][T14488] R13: 000000000000002c R14: ffff888022c8c000 R15: 000000000000000e [ 242.217961][T14488] ? packet_sendmsg+0x2989/0x54a0 [ 242.219566][T14488] ? packet_sendmsg+0x49ea/0x54a0 [ 242.221196][T14488] ? sock_has_perm+0x258/0x2f0 [ 242.222879][T14488] ? __pfx_sock_has_perm+0x10/0x10 [ 242.224651][T14488] ? __pfx_packet_sendmsg+0x10/0x10 [ 242.226358][T14488] __sys_sendto+0x4a3/0x520 [ 242.227823][T14488] ? __pfx___sys_sendto+0x10/0x10 [ 242.229445][T14488] ? fd_install+0x223/0x570 [ 242.230961][T14488] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.232714][T14488] __x64_sys_sendto+0xe0/0x1c0 [ 242.234249][T14488] ? do_syscall_64+0x91/0xf80 [ 242.235877][T14488] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.237669][T14488] do_syscall_64+0xcd/0xf80 [ 242.239183][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.241079][T14488] RIP: 0033:0x7fcfe558f7c9 [ 242.242869][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.249384][T14488] RSP: 002b:00007fcfe64ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.252007][T14488] RAX: ffffffffffffffda RBX: 00007fcfe57e6090 RCX: 00007fcfe558f7c9 [ 242.254491][T14488] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000004 [ 242.257116][T14488] RBP: 00007fcfe5613f91 R08: 0000200000000140 R09: 0000000000000014 [ 242.259713][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.262233][T14488] R13: 00007fcfe57e6128 R14: 00007fcfe57e6090 R15: 00007ffdd27ec0e8 [ 242.265231][T14488] [ 242.267176][T14488] Kernel Offset: disabled [ 242.268617][T14488] Rebooting in 86400 seconds..