last executing test programs: 3m17.772171767s ago: executing program 0 (id=86): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580), 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000200000000000000000000000f2bfce760000000005"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000030000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000535d5c8a95"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.718275443s ago: executing program 0 (id=87): socket$netlink(0x10, 0x3, 0xf) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000015c000/0x3000)=nil, 0x3000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) setpgid(0x0, r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x63, 0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000100)={0x1, 0xf08b}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x20000, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 3m17.336816012s ago: executing program 0 (id=94): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x36, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}]}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0003f0000000f003"], 0x0, 0x0, 0x0}, 0x0) 3m15.408471328s ago: executing program 0 (id=115): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x0, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000, 0xfffffffe], [0x11, 0xffff0003, 0x3, 0xfffffffc, 0xffffffff, 0xe109, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x8, 0x10000, 0xec6a, 0x0, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x10000, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xef9a, 0x2af, 0x5, 0x9, 0x0, 0x10004, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x1, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x5, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x0, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000, 0xfffffffe], [0x11, 0xffff0003, 0x3, 0xfffffffc, 0xffffffff, 0xe109, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x8, 0x10000, 0xec6a, 0x0, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x10000, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xef9a, 0x2af, 0x5, 0x9, 0x0, 0x10004, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x1, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x5, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) (async) 3m15.349063002s ago: executing program 0 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'nq\x00', 0x36, 0x2, 0x6b}, {@loopback, 0x4e22, 0x0, 0x3, 0x3ff, 0x9}}, 0x44) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x2, 0x6, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000140)={0x563, 0x9, 0x7fff, 0x3}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) fcntl$setstatus(r4, 0x4, 0x1400) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0xa3}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x1, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0x0, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0xbf, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m15.028512112s ago: executing program 0 (id=118): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x581000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x80547000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m14.950039296s ago: executing program 32 (id=118): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x581000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x80547000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m37.288162935s ago: executing program 2 (id=618): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000200)={@host, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x8}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000400)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003ffe64de51aa936c3dc05708637a2c0000378013000339e0a1"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setreuid(0xee01, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) 2m36.418266506s ago: executing program 2 (id=624): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) r5 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r7, 0x0) setpriority(0x2, 0xff, 0x0) 2m36.17716824s ago: executing program 2 (id=630): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, 0x0, 0x4000) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000cc0)) (async) r5 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xac, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xfa}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_ADT={0x1b, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x79}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6156}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4c5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4080}, 0x20000001) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82102, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000200)={r9, 0x6, 0x0, r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x7, 0x2, r9}) r10 = fsmount(r5, 0x0, 0x0) fchdir(r10) (async) r11 = fanotify_init(0x1a, 0x1) (async) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r11, 0x1, 0x1023, r12, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async, rerun: 32) r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r14) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 2m36.17403951s ago: executing program 2 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x98}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) mount$bind(&(0x7f00000015c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b941a, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000001540)={{'\x00', 0x2}, {0x9a2}, 0x40, 0x0, 0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)="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", 0x192, 0x0, &(0x7f00000004c0)={0x2, 0x47, {0x1, 0xc, 0x2b, "098beb072a3d36d045d77ef43d501c51833182da8575ba6f4ae46b9b9ac87fa3fe4558769ea2bf633c8404", 0xf, "90f8f2769a172ee645f9801063cc19"}, 0x1000, "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"}, 0x1053}) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xb}]}, 0x10) (async) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000040)=""/23, &(0x7f0000000100)=0x17) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (rerun: 64) 2m36.118403597s ago: executing program 2 (id=634): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd23, 0x204081) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc, 0x0, 0x4, 0x2], [0x4, 0x0, 0x0, 0x1ff], [0x400000000000001]}) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r1, &(0x7f0000000000)="3597d959b51e88dc2ee79e9c8de591653081b7a4428a1862a5d3b7b242e36d4887cedf4ab17a1a3a62575a044201ffb1c5ead2471489ef4c11dfba8a9402c5f0ef954abbf22a28b94371ac", 0x4b) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r3 = dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x1a726b84, 0x2, 0x36}) 2m35.407097592s ago: executing program 2 (id=639): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0xb5, 0x6}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x450) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_io_uring_setup(0x2e66, &(0x7f00000001c0)={0x0, 0xbf98, 0x40, 0x2, 0x38e}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x793c, &(0x7f0000000300)={0x0, 0x185e, 0x200, 0x3, 0x1cd}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_io_uring_setup(0x793c, &(0x7f0000000300)={0x0, 0x185e, 0x200, 0x3, 0x1cd}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x4edc, 0x1, 0x2, 0x115}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3407, 0x400, 0x0, 0x2a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3adb, 0x100, 0x1, 0x3a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa828, 0x2, 0x3, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a9c, 0x10480, 0x0, 0x1ff}}], 0x4, &(0x7f0000001740)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x934, 0x0, &(0x7f0000000740)=@buf_1k="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"}}, &(0x7f00000017c0)) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x4edc, 0x1, 0x2, 0x115}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3407, 0x400, 0x0, 0x2a6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3adb, 0x100, 0x1, 0x3a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa828, 0x2, 0x3, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a9c, 0x10480, 0x0, 0x1ff}, 0xffffffffffffffff}], 0x4, &(0x7f0000001740)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x934, 0x0, &(0x7f0000000740)=@buf_1k="b111b38592e0a83322825f08e2dc00ef68d6b09d453e2f83fa0b2a16d77c3eccb8a34b374beab935276b7dc525f5192af69f6ed7cf12aa5144a5bdd71eda4e18e7dce2289d01c4dc133c6f8bf9ebe375efae513fda511d32f159a92cb9080c5e4a251a94e0d6bc9310c11f8563b39c04883fadbb33180950a6739358cd00b2fed55a4da29b8ec88fd47f0d2d683d8f58512dc35cc3f1e8436c0979b7c91b77c65f8bd17d9b2cfaa4523c693e4c6dba48e5a71522af5f823921cd9d1cf4e500742106f355338995101526af17247d12a20d4374b3c0737452e9c4a177278297ce7187b03b99ee2eb2de13207b52163269dfc942dd7be325ad06d983dc28f75407ed0350cec78c9636da6e0916a07cc3445ea6a7143973f04d9336da718e2531aa2103472e5bb1995488e66ac1aa5c918ca1760782be85fd7299b0c552c64d42e55666ef1d3954cf13e0f027b7a17a6385254421844cc9390c8e7db4909fee07549064e82a84f6e1803bb2cfacd539a6673cecc123ba10f1ac405f75a835a8aac20648dd80519a4cbabfc595e10b409da1a858b75ae8f3e406d630805764a8aba1ddc7db14dd4421046de3fd32f9f70f0c91bccc8d9cc1ac012b832aad7723ba6f52ed770c48bcfc58f683c990b3c674b572ced144a5a406708e679e457e062d339bc19fe3542b32e2818187b9881711859f0cf6315f94119c2511a274f8c2a541186f6ac5708eb6b69e68e5479d7930bfaed353f866720ab7ccd590ea58c366f7ec197d9ca5c6ab5d9bf3f785ba7c662f7d2317964e5c368833850233656307d6fc5e91db2bb984a9a22caf384e8336f94268e41131785857bc34d100d8157a1497d9c9b365f4fc5c8eee85976d9fde6f2b40012d69b479db8c65c8a72914055e0b88240c0d74461917bd259b9e4fd3a1627420ad93fbec91607c9db4bc5959857d8b80545cacd0f74245bc7943481e9a4f2e07b666fa76135d1710b73a06565a31ac50ac635855bcc24a098e60132843af00a9aa24510da3cb8adc979066c44910c0706cd26d34dbef9c9506830d5f7f615f1d63d53d6f9fecfb3950d400de71117189925d593863d88f4fefe2b30b8ae92d911a24f2c7d7833b85da2c9eee51c5a1298782fc8220dd7becb4686b66743a60cd3e10191995213d6a1e08514bd7b62d5fb1857d0e159b5401544a98cce6a03e3b0cbe50668a822508d72fa38b24fc9337ab9ec7ae32c5c54b727c9b59d8ba3eed032656428f92695f14bc9e4a0072736e5ddf020902c2f6277304baa0a6d5130ae2920be7dfcadd10ebe8e0342a0752925902630fcc8287343f2e1fdf7fc99f10cd1d95b95f75f7d65c674a9caefe37598cac477bb2c52dc4e6f0e06e9247f2d00bbd5504951c37f23e370bd62e8c8c80fa45710ccc69616ce8d72e076da1c71b5960b6730b0c70f4faaf2eae3c"}}, &(0x7f00000017c0)) syz_io_uring_setup(0xbce, &(0x7f0000001800)={0x0, 0x48b8, 0x8, 0x3, 0xe0}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)) (async) syz_io_uring_setup(0xbce, &(0x7f0000001800)={0x0, 0x48b8, 0x8, 0x3, 0xe0}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001940)=0x0) syz_ublk_add_dev(r3, r4, r5, r8, &(0x7f00000019c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xc811, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001980)=@any_dev={0x1, 0x6f0, 0x0, 0x0, 0x1000, 0x9a74, r10}}}, &(0x7f0000001a40)) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x20200, 0x0) ioctl$CDROMPLAYTRKIND(r12, 0x5304, &(0x7f0000001ac0)={0xc, 0x9, 0x1e, 0x4}) (async) ioctl$CDROMPLAYTRKIND(r12, 0x5304, &(0x7f0000001ac0)={0xc, 0x9, 0x1e, 0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001b00)={0x0, 0x0, 0x10}, &(0x7f0000001b40)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b80)={r13, 0x10}, &(0x7f0000001bc0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b80)={r13, 0x10}, &(0x7f0000001bc0)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000001c00), 0x6) (async) bind$bt_hci(r14, &(0x7f0000001c00), 0x6) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r16, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x464, 0x2, 0x70bd2b, 0x25dfdbfd, "7ac312e724289e614b89407842994440b228da20d70d9aa1c95cf6f40a180f9c57cd", ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40844}, 0x4) (async) sendmsg$AUDIT_USER_TTY(r16, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x464, 0x2, 0x70bd2b, 0x25dfdbfd, "7ac312e724289e614b89407842994440b228da20d70d9aa1c95cf6f40a180f9c57cd", ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40844}, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x4240, 0x105, 0x9}, 0x18) syz_emit_ethernet(0x683, &(0x7f0000001dc0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "ff85f4", 0x64d, 0x3a, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x8, 0x6, 0x1, 0x8, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x87, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0xfc, 0x60b1, [0x9, 0x400, 0x1, 0xbee4, 0x6]}}, @ra={0x5, 0x2, 0x8}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x5, 0x28, 0x1a, [@mcast1, @local, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x3a, 0x8, 0x1, 0x3, 0x0, [@empty, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00']}, @hopopts={0x2b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x0, [0x1, 0x8, 0x1b8, 0x5, 0x5, 0xed6]}}]}, @hopopts={0x2b, 0x1b, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0xce4, [0x1000, 0xffff, 0x1]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x435d, [0x5, 0x80000001, 0x1, 0x9]}}, @generic={0x9, 0x8d, "dd61ee3e2dccae47b3ef951d67bc39b7db59ff3d23c3ab2eb144041b41a9f8732bbde1ed3ea03750bd113c8e9190d1889d197d2aa0df142eabeddf0f0068debb68524825fcc363c2792c63fb62616e59fcd5e1c4ad00e1e60542b80f9214cf77ddd5f29c2c234a71115bff2045c0ca93072f53dec39b2e6108896f6d17470de0b500e4588d0f5bfea402577566"}]}, @dstopts={0x0, 0x5, '\x00', [@pad1, @ra={0x5, 0x2, 0xc}, @jumbo={0xc2, 0x4, 0x540}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1d, 0x3, [0x1, 0xa9, 0x80000001]}}]}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @local, [{0x19, 0xd, "4c51a7f14bb7fe83b88a2e884e67de6ae3ca26de4c68ed2c762a5f7c4d10239cae723dc3b3722c5f9af554e2a2800a0974441fd46a18825899797bd125829fbb51d69e81c0ae254115e45d095d387c05588787cdd4b5d5ea0e627204746513736f8dc29774947b71e6310151"}, {0x2, 0x18, "307f7a25903e781cfd77f3fa1bb128004c26e8dccf6b2f05858b71fb3820e9d730cc16e36d7364d853ba8cd57555f27edd04d8cee2013bc108d550fdd4d1e6e7ef5c52738e13ee53bfc3f099852a4bd04b013a090ac63ea9e7a808af36cdb286177ea72fc233d30ffd94a974444667592f74fca9ddd9db74bbf401f3041ea6f3cdfb4870f0de73bdbfa8fb29cd5747dafbed9c9154b98aa4409a6a6e3be494db2b073dcb9a2c915950cef7ff75482129e63e399cf09ed69ef737628649c417"}, {0x3, 0xc, "1b13abb7f2bcedbad2a9633ff76b9dea8431160315bea319aacbc95651d5c0b5036052507ea19ae0e8cdf20fa5921a2ebf49b108e78bfc876063a057cde19b350c980d63be269cb4f6b196b243034dcb8b7406fa5e653127e8606fb43cbc05438ca5e6e0"}, {0xe, 0x19, "178975d03124176cd704119b7a13168d433bef40666073d3c35f22527b9eb4e51592dc3c6273f6f2aabc120c1596498d0e497765366c6c3497a6bd89cc5c37ae988c5937b7c2d7034aedd28645a16791d86a8a741dee9da36e7cea47dfb69f4d07fb566ab58837eb5472bf8c54b6dcb3457efe4512f847426cfe4133aa78d7193356b14bf220984748f1814b60357a3615ff3b1ebf120ad79a3cebb33af15da60550b10fb626041e18007c8bd90efe65e054c5508f504dd2d098365d2d0f66fc72baa109d4436e8d8edb9ee5"}, {0x4, 0x1a, "5b0d8047a4e9a82e55f8ae9835d2a0630b400dfbcf02ecf0063e30a5293ad06b1d5c86a66505efd720e105ec79befff175ebe247597003f03e1807b4778354e45e2aa51b3279dedc7876aeed83a34fdab084bcd846a5d415a5ec3a129c7316950d02cda1ec13ef21af0c27c6be49da35315334a29c72ba2218b9c2ed450fdf64a23da42b27af56057aa7fc9b93e66fdd4259561f2a5eac43cce81cb19d863c644ecaf9c9778bab176358127e02acfe47b90850d836f0291506f06a782a5d31b2fde10e25f3a845dc9af68fa69cd36689"}, {0x19, 0x10, "938e3ddeb758975173009922009499c1ddc0fca5583056d960cdf157a548daf1136b02a59912a441277af86da300d5c7de5dd39e5bc926ed99320af7fe1f1d43e1e090dc4273b05ea1c6cf5da4280e7ab9dfacf3f9034e8c79c7d7ba460ad87b080596c3fab0b8421450c735a1e5a7abc08192d9f8f0826992f977795964"}]}}}}}}, &(0x7f0000002480)={0x1, 0x4, [0xa57, 0x33a, 0x7d9, 0x76d]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000025c0)={r0, &(0x7f00000024c0)='syz2\x00', 0x40200, &(0x7f0000002500)={@align=0x4, {0x1, 0xbba3, 0x101, 0xffffffff}}, 0x101, &(0x7f0000002540)={@_ha_fsid}, &(0x7f0000002580)=0x6}) close_range(r6, r17, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f0000002680)={'wg0\x00', 0x0}) recvfrom(r0, &(0x7f0000002600)=""/77, 0x4d, 0x0, &(0x7f00000026c0)=@ll={0x11, 0x15, r18, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x80) close(r11) (async) close(r11) sendmsg$TIPC_NL_KEY_FLUSH(r17, &(0x7f0000002a80)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a40)={&(0x7f00000027c0)={0x250, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00'}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb46c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x964}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x250}}, 0x4) 2m35.380373795s ago: executing program 33 (id=639): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0xb5, 0x6}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x450) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_io_uring_setup(0x2e66, &(0x7f00000001c0)={0x0, 0xbf98, 0x40, 0x2, 0x38e}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x793c, &(0x7f0000000300)={0x0, 0x185e, 0x200, 0x3, 0x1cd}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_io_uring_setup(0x793c, &(0x7f0000000300)={0x0, 0x185e, 0x200, 0x3, 0x1cd}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x4edc, 0x1, 0x2, 0x115}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3407, 0x400, 0x0, 0x2a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3adb, 0x100, 0x1, 0x3a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa828, 0x2, 0x3, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a9c, 0x10480, 0x0, 0x1ff}}], 0x4, &(0x7f0000001740)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x934, 0x0, &(0x7f0000000740)=@buf_1k="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"}}, &(0x7f00000017c0)) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x4edc, 0x1, 0x2, 0x115}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3407, 0x400, 0x0, 0x2a6}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3adb, 0x100, 0x1, 0x3a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa828, 0x2, 0x3, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a9c, 0x10480, 0x0, 0x1ff}, 0xffffffffffffffff}], 0x4, &(0x7f0000001740)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x934, 0x0, &(0x7f0000000740)=@buf_1k="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"}}, &(0x7f00000017c0)) syz_io_uring_setup(0xbce, &(0x7f0000001800)={0x0, 0x48b8, 0x8, 0x3, 0xe0}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)) (async) syz_io_uring_setup(0xbce, &(0x7f0000001800)={0x0, 0x48b8, 0x8, 0x3, 0xe0}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001940)=0x0) syz_ublk_add_dev(r3, r4, r5, r8, &(0x7f00000019c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xc811, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001980)=@any_dev={0x1, 0x6f0, 0x0, 0x0, 0x1000, 0x9a74, r10}}}, &(0x7f0000001a40)) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x20200, 0x0) ioctl$CDROMPLAYTRKIND(r12, 0x5304, &(0x7f0000001ac0)={0xc, 0x9, 0x1e, 0x4}) (async) ioctl$CDROMPLAYTRKIND(r12, 0x5304, &(0x7f0000001ac0)={0xc, 0x9, 0x1e, 0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001b00)={0x0, 0x0, 0x10}, &(0x7f0000001b40)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b80)={r13, 0x10}, &(0x7f0000001bc0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001b80)={r13, 0x10}, &(0x7f0000001bc0)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000001c00), 0x6) (async) bind$bt_hci(r14, &(0x7f0000001c00), 0x6) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r16, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x464, 0x2, 0x70bd2b, 0x25dfdbfd, "7ac312e724289e614b89407842994440b228da20d70d9aa1c95cf6f40a180f9c57cd", ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40844}, 0x4) (async) sendmsg$AUDIT_USER_TTY(r16, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x464, 0x2, 0x70bd2b, 0x25dfdbfd, "7ac312e724289e614b89407842994440b228da20d70d9aa1c95cf6f40a180f9c57cd", ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40844}, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x4240, 0x105, 0x9}, 0x18) syz_emit_ethernet(0x683, &(0x7f0000001dc0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "ff85f4", 0x64d, 0x3a, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x8, 0x6, 0x1, 0x8, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x87, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0xfc, 0x60b1, [0x9, 0x400, 0x1, 0xbee4, 0x6]}}, @ra={0x5, 0x2, 0x8}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x5, 0x28, 0x1a, [@mcast1, @local, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x3a, 0x8, 0x1, 0x3, 0x0, [@empty, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00']}, @hopopts={0x2b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x0, [0x1, 0x8, 0x1b8, 0x5, 0x5, 0xed6]}}]}, @hopopts={0x2b, 0x1b, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0xce4, [0x1000, 0xffff, 0x1]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x435d, [0x5, 0x80000001, 0x1, 0x9]}}, @generic={0x9, 0x8d, "dd61ee3e2dccae47b3ef951d67bc39b7db59ff3d23c3ab2eb144041b41a9f8732bbde1ed3ea03750bd113c8e9190d1889d197d2aa0df142eabeddf0f0068debb68524825fcc363c2792c63fb62616e59fcd5e1c4ad00e1e60542b80f9214cf77ddd5f29c2c234a71115bff2045c0ca93072f53dec39b2e6108896f6d17470de0b500e4588d0f5bfea402577566"}]}, @dstopts={0x0, 0x5, '\x00', [@pad1, @ra={0x5, 0x2, 0xc}, @jumbo={0xc2, 0x4, 0x540}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1d, 0x3, [0x1, 0xa9, 0x80000001]}}]}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @local, [{0x19, 0xd, "4c51a7f14bb7fe83b88a2e884e67de6ae3ca26de4c68ed2c762a5f7c4d10239cae723dc3b3722c5f9af554e2a2800a0974441fd46a18825899797bd125829fbb51d69e81c0ae254115e45d095d387c05588787cdd4b5d5ea0e627204746513736f8dc29774947b71e6310151"}, {0x2, 0x18, "307f7a25903e781cfd77f3fa1bb128004c26e8dccf6b2f05858b71fb3820e9d730cc16e36d7364d853ba8cd57555f27edd04d8cee2013bc108d550fdd4d1e6e7ef5c52738e13ee53bfc3f099852a4bd04b013a090ac63ea9e7a808af36cdb286177ea72fc233d30ffd94a974444667592f74fca9ddd9db74bbf401f3041ea6f3cdfb4870f0de73bdbfa8fb29cd5747dafbed9c9154b98aa4409a6a6e3be494db2b073dcb9a2c915950cef7ff75482129e63e399cf09ed69ef737628649c417"}, {0x3, 0xc, "1b13abb7f2bcedbad2a9633ff76b9dea8431160315bea319aacbc95651d5c0b5036052507ea19ae0e8cdf20fa5921a2ebf49b108e78bfc876063a057cde19b350c980d63be269cb4f6b196b243034dcb8b7406fa5e653127e8606fb43cbc05438ca5e6e0"}, {0xe, 0x19, "178975d03124176cd704119b7a13168d433bef40666073d3c35f22527b9eb4e51592dc3c6273f6f2aabc120c1596498d0e497765366c6c3497a6bd89cc5c37ae988c5937b7c2d7034aedd28645a16791d86a8a741dee9da36e7cea47dfb69f4d07fb566ab58837eb5472bf8c54b6dcb3457efe4512f847426cfe4133aa78d7193356b14bf220984748f1814b60357a3615ff3b1ebf120ad79a3cebb33af15da60550b10fb626041e18007c8bd90efe65e054c5508f504dd2d098365d2d0f66fc72baa109d4436e8d8edb9ee5"}, {0x4, 0x1a, "5b0d8047a4e9a82e55f8ae9835d2a0630b400dfbcf02ecf0063e30a5293ad06b1d5c86a66505efd720e105ec79befff175ebe247597003f03e1807b4778354e45e2aa51b3279dedc7876aeed83a34fdab084bcd846a5d415a5ec3a129c7316950d02cda1ec13ef21af0c27c6be49da35315334a29c72ba2218b9c2ed450fdf64a23da42b27af56057aa7fc9b93e66fdd4259561f2a5eac43cce81cb19d863c644ecaf9c9778bab176358127e02acfe47b90850d836f0291506f06a782a5d31b2fde10e25f3a845dc9af68fa69cd36689"}, {0x19, 0x10, "938e3ddeb758975173009922009499c1ddc0fca5583056d960cdf157a548daf1136b02a59912a441277af86da300d5c7de5dd39e5bc926ed99320af7fe1f1d43e1e090dc4273b05ea1c6cf5da4280e7ab9dfacf3f9034e8c79c7d7ba460ad87b080596c3fab0b8421450c735a1e5a7abc08192d9f8f0826992f977795964"}]}}}}}}, &(0x7f0000002480)={0x1, 0x4, [0xa57, 0x33a, 0x7d9, 0x76d]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000025c0)={r0, &(0x7f00000024c0)='syz2\x00', 0x40200, &(0x7f0000002500)={@align=0x4, {0x1, 0xbba3, 0x101, 0xffffffff}}, 0x101, &(0x7f0000002540)={@_ha_fsid}, &(0x7f0000002580)=0x6}) close_range(r6, r17, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f0000002680)={'wg0\x00', 0x0}) recvfrom(r0, &(0x7f0000002600)=""/77, 0x4d, 0x0, &(0x7f00000026c0)=@ll={0x11, 0x15, r18, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x80) close(r11) (async) close(r11) sendmsg$TIPC_NL_KEY_FLUSH(r17, &(0x7f0000002a80)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a40)={&(0x7f00000027c0)={0x250, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00'}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb46c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x964}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x250}}, 0x4) 57.847926402s ago: executing program 4 (id=1377): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x50800001, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) (async) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@tcp=r1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'xfrm0\x00', {}, 0xad}) r5 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0xffff, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c}, {0x6}]}) 57.748141565s ago: executing program 4 (id=1378): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 57.528519665s ago: executing program 4 (id=1379): pipe(&(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf24aec99a7765794, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000002000/0x1000)=nil) 57.528394135s ago: executing program 4 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000018880)={'bond0\x00', @ifru_names='xfrm0\x00'}) 57.443614021s ago: executing program 4 (id=1381): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000001e40)=""/161) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) 57.168218624s ago: executing program 4 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000073, 0x0, 0x84}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000d00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x154, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1093}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcc1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff3c3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x8, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r8, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x800) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='syscall\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r13, &(0x7f00000014c0)="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", 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x2d, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r11}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0x6, 0x3, 0x4, 0x18}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x4, 0x9, 0xc, 0x7, 0x9}]}, &(0x7f0000000780)='GPL\x00', 0x5ca, 0xf3, &(0x7f00000007c0)=""/243, 0x40f00, 0x24, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x2, 0x0, 0x3ff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0x1}, {0x3, 0x1, 0x8, 0x3}], 0x10, 0x9102}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r10, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r13, 0x5646, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000400000008000000010000007e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r14, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 57.095754641s ago: executing program 34 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000073, 0x0, 0x84}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000d00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x154, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1093}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcc1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff3c3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x8, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r8, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x800) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='syscall\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r13, &(0x7f00000014c0)="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", 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x2d, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r11}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0x6, 0x3, 0x4, 0x18}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x4, 0x9, 0xc, 0x7, 0x9}]}, &(0x7f0000000780)='GPL\x00', 0x5ca, 0xf3, &(0x7f00000007c0)=""/243, 0x40f00, 0x24, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x2, 0x0, 0x3ff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0x1}, {0x3, 0x1, 0x8, 0x3}], 0x10, 0x9102}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r10, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r13, 0x5646, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000400000008000000010000007e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r14, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 51.144683312s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 50.687366768s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 50.133685308s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 49.516689009s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 42.838253729s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 41.819013278s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) close(0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r8) (async) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 1.544339644s ago: executing program 5 (id=1848): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0xfffffe29) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bde000/0x13000)=nil, &(0x7f0000be2000/0x3000)=nil, 0x13000, 0x2}) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) 784.859243ms ago: executing program 3 (id=1852): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000bd2000/0x13000)=nil, 0x13000, 0x3000000, 0x1723eb291fd3f50, 0xffffffffffffffff, 0x8000000) (async) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 782.982144ms ago: executing program 3 (id=1854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x28}}, 0x4000040) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x400c100) (async, rerun: 64) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (rerun: 64) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r1, &(0x7f00000005c0)="cfc850defd31f31e2d20223673feacf3b5421387e6f382405e8782", 0x1b, 0x3b00, 0x0, 0x0) 640.203441ms ago: executing program 1 (id=1855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) close(r3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x1, 0x5, 0x81, 0xc, 0x1, 0x0, 0x5}}, {0x0, 0x2, [0x913a, 0x2, 0x6, 0x5, 0xa, 0x70, 0x9]}}, {{0x0, 0x1, {0x2, 0xff, 0xb5a, 0x5, 0x0, 0xfffffff9, 0x63}}, {0x0, 0x2, [0x9, 0x8001]}}, {{0x0, 0x1, {0x7, 0x81, 0x1, 0x5, 0x2, 0x8, 0x9}}, {0x0, 0x2, [0x140, 0x6, 0x10]}}, {{0x0, 0x1, {0x3e, 0x7, 0xf9c, 0x3, 0x0, 0x9, 0x5}}, {0x0, 0x2, [0x0, 0x6, 0x6, 0x39b, 0xf7]}}, {{0x0, 0x1, {0x8, 0x0, 0x0, 0x101, 0x2, 0x9, 0x7e3}}, {0x0, 0x2, [0x8, 0x5, 0x6, 0x5, 0x0, 0x1, 0x8]}}]}]}, 0xfffffffffffffdb9}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x120, r1, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x20044801}, 0x20000005) 639.456235ms ago: executing program 5 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) (async) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = openat2(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', &(0x7f0000002180)={0x200401, 0x40, 0x8}, 0x18) r3 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe13a, 0x1800, 0x1200011, 0xffffffff, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) (async, rerun: 64) io_uring_enter(r3, 0x35b3, 0x22c8, 0x46, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r3, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) (async) io_uring_enter(r3, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x229) (async, rerun: 64) r7 = dup(r1) (rerun: 64) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000004e7b3e00cd000000c9030000000000004000a95958000000000000ea020000000000ea010001f872bde0"], 0x178) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 638.97186ms ago: executing program 3 (id=1857): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x6, 0x400501) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x274) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89100) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000000c0)={0x2, 0xffffffff, 0x2}) ioctl$FE_DISEQC_SEND_BURST(r0, 0x6f41, &(0x7f0000000100)) read$FUSE(r2, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004480)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000004580)=0xe8) r5 = getgid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000004640)=0x0) r7 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000047c0)={0x0, 0x0, 0x0}, &(0x7f0000004800)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000004840)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) fstat(r2, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000004900)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000004940)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fstat(r0, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fstat(r2, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() read$FUSE(r2, &(0x7f0000004fc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000007000)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_fuse_handle_req(r2, &(0x7f0000000140)="74c6212cac284bbd6c1726fca334a0beeae9f06a923610b798649d734cea02cf9d6ea9fb73802085fbf63f1d77fac54e0385c5d9cd3d50e8fdf5d5c19d787de11859c9fc2d4ed8fb5c7f6a313c5f0c19fc1f0bf72aaf32c76c5e2444ad12a11e53ae637bbf40744e05ea335d6f45892cbb9c612354c34e1b7ca0c9f26a00433079c9fe37f49519339527c9740bf74c1fb88da3e95ad8693b2cf631f1cb5ebfbef2e7e4c34297a5cfe974b4e0c19b4572dd5580dde76b652102a53c41cc92978f85a11d04208f1b6b4c530c026fc416384c0b662ff948446649bbc34fc45f0fbe29dfc85136e4f1d4721ba7d0c0a747104292e792d03f3645b3517e0d0af20ed5269d659af1a2ddd6925c6b953af8a334164c0ca30cfeb67028361ca83ecd6c336c1fae326e050f717ebdcbccd0802d04ee5e398d66d50f3f70231bff7398a0dc1af715fc924247c5fdb57a5b2437e1773e966371dc87d6b1a7b0fcf7b1b52e90da6857fac1fc3c7ff26958da196cfecc7081566176fc5758395c7e5f1ff2df99d9b1fbbd5a6cdc59fccbfe20583ddfd2e27e1d21a50abee358b9349d1ba060383e90fbc476b31827143abafb3f92d38fbb6f1717579336638f2f34b419673886987f25c731d93872b345015498664787af60476aba2b57cb9bd56d04f6db0b70e933342060cd92382ba14d9152445ea49eeb2e6ea89f46583b79803cd478cf26c188970145a3f343647bd1a6bb39985afdde7b59591027622dc69041fc1d5d0ef0df116c93d7ca0da9183696d3dd49073e1a392da70242a871be43688e3e4c3178800f30707865a43c8873f2908bd79a39982195163859315d22226c2200e4563d60c20f9a274443c8ceada02b5173197acad3e930d1b4d4e48fdca4c51b3b9b3b197cc9e19781524e797af65ae441e31f9f8ac9faab54da4fd18c9c98d51ef72bab7a4a6f7e051b62c2eb71fd27b95d5749882573a97a8585397f670de1b1273e1eebd757cbe13c4ec28da4f9a294f422faa3798b80f5b5137c376b55dc96c050ae983b00d35fedf2654978fb42fbc4fd8d1d8ef8c908bf2e5c9318f01202518b82ae71064d6f2fccef5a42d71aeaac7c42657e6caac4f5e9a0bd9e3953c91dfb1ae29ce8757b74b639c800051355a919560e0bb5d83e14c96d67faf6e29c72e7066b701199d7b4c4198e030fd64e8ec35f13e070a7bd18f5bb957de59f61fe379f331338f30eec8dc8b75d64c634faa24a03cf0e50986c7ae576eb6e9885e03828fc42ef3f433392b05cac25f3202afa74a7e39ff0d7f2766a78ee8ffac15bdb349c1c0c4270528fc92db0d37a4d5d8e8f1c56d2462fadcb5fb99c262cb893c6af444922b0286deedd1498d40bad22a8948061d3af241b98cd22ac96d93c6da51eb7fee668d9f180119c90a934ae783f6ed03d46beb7b7a7270264185c7a3955f851934111f01dfae857d3aac3a1bec0a39906043db1fe5f00a373a910a0832ca1099658a51d773beaf5550480da787e43859cc740401749233ebfdc10833fdd4e776ed8481069b616ffba3e54873a5d1575140f58f1122e4555637bdefd10165b60588364ea2294c76151b67df95edcb2f88c245f563cb21e0ab47ac2d425dab4b797a6d95d4184b07c4ac9b7a0c3fb7255a44532e8b4f1d518ebeb712498aa09a5175b0495147be95c09796695faf4fdc9b2546673ce74b23550b0b7d18bbd509fb67e168af87b79ffe5ed9a45325e9a99741bd6850dfcca82d9b40fa7e83b255e61f95502739412c37c91d8bd5b0d2fe7b2a93a4229c30dad3565c82cda24bab940bc4cd919799298008cd2bad283de1ec53cbc977656794f65b45ceadfddab7bf1d1e679ffc1eda49d163e04c37ed01b95174d5a30f373564b329b412b27167f8570262d327c939b3a02d7d581cdfadd6f38e1073ec5492eefcc40a513bd0c867c627e88bd0289882d7d668a79527cdacd024759d3c251669aa47f9bf479bf4ee101a0d40c767b1e0fc7d06cee7be8c06c6fe4ed26afecab722d652987ca67e2673d1ce7adce80d927c13a00e8f8bdea16be191d8acf106742a8db65cc99271001a5635201972b109a16e5b273d5c11fad07168304def2646d7d737b7e5b5bdc89b45e0918bd5877a7cdd539a15de308fd51d14878dd0d01527752349890a94cf4f51a8dd2f3f0bd81b0b225ba6940118b86ebf9a578322ebe2c44668082c7284076652985546a112370627e93745d0d4ea0f50112cce4993b7752acaae135ce01fdf03edb429003ff7fe014809af754c54327ddd55a7ff7b4967d112a7a1e8e1f8129fe01261d1cd9b26efe66b756128bb9147de7bea5fc313d1eeab71b5c13327320bf94beb8a76a1a7ff81a38fe5c162141b71d30b43bfb204b104a3cf25799b47f4ea33daea6e9c7b49f879d3f7bf2bf2e2f15f223e35406be4a164359156d7aa93bb15230621ec0a13a427f92b33461fb9f051fa1df8a5cea0b8c288c58c686655808b55a3c2d241d3676f0b1ff22bb9c13fbedd5436219f26de4aa03fb6401e7e5c3623a177ab90c4d28955a5ba15a69e8028529406e39813ee30b08f78fa210e4741e78181c597277c41a1c3b4417fc73264fd744c633184bbab8d2be07a4a268962590602a1434aeb9dac9e8783c401a01e8f0c668c7abbb383a533710121d415667f27f83875050940898e4cbdb189f557a7682d0359d4edb123248e47133143fd56343127042e1688736f12a7fcd51b3071403d9065bab2031b784cc3c4f7434b0ccee3ed3f5cddd4419628f7abcbe14ec6b9e73296cc85d9424bbde7047ec319f7a5061bb91389d931d2618b5d37cfe03b9cb069e5b96b301ce73b4d4360815803eb0a75bc9d88675e8f9c8aa738c08f460cd6a934ea500ddd3183c3fa249e27bc6fd059c19da66a19419b97d1e71b4d4c97cc0561fd9e64fa65c0104ac6a802d95c35654ecf513a52ab5fea62515c26782e5958fd4f0d320f7a5efa22114307ec77f119b6db9a89dc1cf10d8ec1b46a426e3d77d48cd3e6226bddd93c9120df2a672771bed6624784bdfbefc0bc2ba8996b1acc8edd1d25b30d85b31059ef4c08c9af332b430c2382081e9da7345e1236e9eba651cedc39e5638ef1bbea994440a1483ba1adc4517857dc8f41a25ceb4a88085bbe42047fbd338e4b979bde531084451e128d37fb4a7af75f2ee2faad79bac8e80a54853f9a650993974683bb6ab23e5869675cfb25de495f68c5338cabb39d1f36b131479cd82ae48f917c9b69a49941f32d6424059c5d76b6eb83c055f1b04c4e6301dbfb7029363b8d0c4e536e73c629061587903dbbefca3b18a210d2020405f791da0fef13c64ff2dca1da4b00ab3c64be1841f1a618cb61c0206c2299804095163ab9825d1f7beb07d80bca19de4ca716398bdc817477ccb98363215abf85ad0712d70db81cfe080e032a2b30a1e40b2ecef9674ef57a42beecb0552ce0b7d6ee994f727258b420a6b718499b3ef13d5c78c86ce742f35c092840a73dc2e765216994f968fe536708dc0332c08d60c7829dfe09e14fd58cf385cb4d97aee2f04e5b2fc8b21a8062d040d1aae1cd1610ecf8aebd1d0678a287050b9852a4132b6a786362a20e56bc10404b9f90cc7c048582edc5cfc6a060d0334540e7300e78f6a67fc38361f57a057b755c0d695fc83c33be6d0b767e0b7d47db03d8598f9446227ecb7aff405b932c8d2b57be919e6ee0699c69cb0f007222aea0e435959c629b59c5c5904d69897c804c8c5b2de6ff3f8c452a3ef69728447fc7cf7bcbdb1c009f5beccc4b1fcf92dfa886a97ed6d769ce36f81a6e4a3e862183743df0f13d2e4948617106cd4aab54b17ed3bc4260cab64070012a788ae91555b17fbbc5137ee4964623e4143b239f6818fc9959acb62780d929ba7f0fa2371e0f4f5a7dfd359b83ccf199b4d8fc5f6a80c2e1ff23c0533e56595eee75173acd41338be24ac26c2daed8e111e6c7b643c3f441d78ce2c04fe1f3a0a3975ad853eb5f1e707442b67c1157628ec3f0c79a5ef9cd367431117712a244e0277f364e3407cdd507d6a8b80092ccf1b6d7fa195c31c0ec8f6c00b82ae3c483d83ee02a3a8e6fd2d60bb88470e95c7b9bdbd747e2e762f9b06827b74c7c8bc139ef7e4088cace2fc2fabfb58b55cc02e57ba2e39de881e162bc3e4b3bb70753b1d074d1bc9c9100b0e748d1fd380d4afc08c1323eb092af097f2fef612ce2d6edb6ddee41bf68d28d2a4d035ffbec224096a32f240e26c20eaf4b661abde0ada7ae54ea27ae99a06c83b3dfadc731c87239cd77cff35a894ce6acea79474458a199417c5b4899c0886332d5871a89f5959d50c5fc3260e85b133f43709234fa3a377ee416bb59634111dc394e356ab97faa9d98e14c16910e724ca7bbf6e456148f3e5f4941fa0b919409d381a3152531092a281b4a28aadda683c5be793543f6b2704ccd7f6d3b54f2dea2c6719fd4c423ce80f6a692e555c3d1885b115a2cbee12cbe77e16069a0303bbb1931f6814caf3b7bb9d892fa637157bb2bf961394ac07f7b4d1d7cc813e187b94a7c029a804f0bcc905e2b0ff12a73a29cfc387f6d9ab9a577c44d053a5334e58fae967c536e035a496f966812197f773256831466b05e72aaffe942d29dfb382255ddb0307746eb93a685710a3ababbea0c11704ea3cd41a5b0e487b7863f1e6b80048f03f64ab050079b0a9b3ea3b2e6b18314eeaae31245b80784574fb9757754b6602dc9af97e0b005061968a2b562f8b46a6bb6c89ce83bca03d6a9f619a955bbcd5263e9cf222b312dcbe4c2503ce0819a3c6bd67b5ba72c736d39d4329eaf9b2c1bad0634410f56ea1e1532b0a67725372f9c87b9d0052717281c3fe2efcda01e1d768b8bb83527d4aac1a74e5d6e222e0082fd7f8377bdaad11c39684df8eb180144d9dbbd1dfa0c241499a2ad1effead96069365af021010bb9bef49bf977d45b44e29c9ceace0d6d620a81520b7fc05bc1be8c25079f5952c1cefadd0e59689019a3fc5b2ce14bff10e936ef39b99f80b559037824b73658530ca7e3f7570d890fe5fc02385ffdf6d775904b5e56e245d1d48c6fc8ea2824d84203aed2e3d3ab91da17106c8a0633a2a5c43357f25e0e72b3d7368a607189dd48407c94c126a4392e888032c506fa73947f50edbe5d56a3e04507cbfbc9910eca597ab6e617378d31d2adcc8f8786ac8d44c4c3a9c5638a912cffaa72a80bfa4e70f60130a4d1cd356905f696358974b3fbd9d423b49d5bd5c4cdb230b978b49538e1728353272aab08b9ac129b5154e1f7e1834ce1da7181974b1a494efef2c760243ce3c40e97e15fecedd576c4dd321a15e61626c587f35a8dfd546e4d991d23b3588cbc6f973d6864c7f202daba7cfae43e37a4290f84f109d7e4f52d76da33a2f1c439de8c71f951a334a860dbf5a9a42c76c4a832b55dc04f3d8a413bccf53ed1daba50493c1dfc0620fc31944f845a21e75a940a147516f9af5ca42edad82a010832d5556e477dbbfb7aac4499225c9e151fca617ac44974ba8c8d2981ffff557cb2439164304c92c6870844c1b11b0dcbd4c21a9f778ab540d6d7301204998b33c79f131281dd04b09c10aeafb179ba7bac5b9a5a1da4c00a6cdf7f8e6d4185917618871af7f00ed00cae3b04c219731cbfcf0d95f6afe62f8fd5258770977cbf589ee0b5d2a6a204676421b37de7596413609641c15503f50d8304c021d7b60433ad4113ab9fa5c1ff3fe4e77a81d5768d4f5d06c0d02262d31f1412bae3df5638f902eb420ef3d40919c7197742a2dc9d9a37c2cce982a430621fc081931c00c2098acf42389e5caaec5bbd2ef0ae92267c0ed561259b6f83be009f2c82a39a776437f66fa1f8459e7d9d65ca11d39098e83e68d67c34f253cdb8ec7d29a3ab9e2fa06d7d0c9962b153f2b9dd5e5647c284282dc3f926bafb6f5a486083fed17766ac31bfe414cb74797d04455c9bd9424a52ea590c3d763a6958ef2c463ad11fd58a22ea4079d6f4e073feef5affd2e829f8cc12b3fbd8611b78948f890f8a443cf0d043c32f7da62c626a5c44314222d3200da57d194a0061b292b97f17fe45d0960f57b7eb498e7246f0a9f60b6a918f7315d15dd06f3aa3c52dd8ed0528adb7ea65c07cf2bdb428010bf44e30c120ba7aaa266c5832c30be1374db43666eb357b97bfbacef9791d9429d677b942c659fce54d3f9cfc9a43f98f70777d6b01cdb9673a29279e4a3e2afb835aba57c386f939004786fd731547c108cbd61d6f256a27ba79a0ed532fb35290a9906853c0d50e2dcc4a23b3ed20e7e8af2900980bc04629da1a22fc8fbede92927b4965717b1148a983716fa354552e5664debea7a8aa6804f7a8227ef28b3bca6b5aab81505e6c6efaf6541e7273ee44c7a226898e3918b58a82d0a5dd29af8d44d45c6edc786af9040644e64e6703d77808e135f5a1daaa2da55aaf01641c63fab459e03aa3a417b258190e00b4322f87818328aa7b15e02ded1d75b897474c09c4e7ab4de105a69c8282d9bf71a370fd895001605d40d860cfa6f4bf5f1e971859d781874cecc3bfcc8c7dedb6019c7bece0176da884f3018c3c8f3b740145fe0aaa6ec47a475c8bfabd5e50e5ef52a0f340c6623b37f42b90074a3ecf13bb9873a7a6f837113d2de14f72e044f5bcba6261ee802746bc28f5101faa4fe887315f7c96e1216bb5399dd0fd2edb61462cf2adad77eac340ff21eefd091e6701e70db6fd008f269d075b75db6b7fa4ef65f97a5beedd5b05c1ac5a56c84fc2448c9a364eb752224f6075e22aee3dbd9e5ecc4af8908c5c7fc4887fc1ea93b3afb0ba5344204ebe1820681ea39e3dba57450a99d40324e41deea7388cfcf00f32026fab8bf4bd3f11b89ef8861a481046c64e01e88b81a4351442bee5441bc5e4b3206c800f15ca6a126121599778de36956e3a6d80def4d80d3e4ed36e87ac1cf71d6c533d4ef665524c3ff1ad0451167e9bb294c484e73a1a4022be6a55341023c1adcb7098979036feabe8717c734a2283b9233ea7e1d036970ee3acc6bcaeff80bc6ed3dd66d3b8b339199f2ab755e2431d260e1b4a834383dc0bf8a2361b9df089a6d678325a3e723736be11da4d1f56332124cb08d77a6a7b293e0c293557c9ba4f6a1c99953985997b4eb0eeeb5514a60694d12c4c625d05a10980d038e7c43dc619e935eff1243bc41718ea287e7f620bee8853a5c042e7112ed9f815a1e09bea227f83ef1442c5aaf0eb34d6e438e929b50d72b9949934c5bfb9c5651b12acde50f68ab83b6928fd4c57f34dfd94565231e9bfe81f6d1022bda3dcc8faef4e650134f6b720264c5f87a0b7339e8a4616ce532f24427fc1f898e4405adb66470075da3b83bcad19d2300dc631a983d31e18c160f85fdde36b4790139ba3fa0530602b6ba1acc314eca9be53388bdfa81a0758c0686fe542648da060b5609ca1e1a04577d67e00d22ce1e804d71eeec6fbd21e7c5dfa45bc7605c1dd72c0c70d2b58360836b8c9dd6b7e23b8d397c9a84a76a0d8c28a499543bb2738203ad1bb8727f09665ea335a248c6ac70d3b8561b5b0dd3a3501d01144e28e2ad136356c629b05255af1362e5280d3b96e0f1c4c8ab78d75559b6ea98deac33fb1612a77907be75ce32f86c423037d582421560b4d6abd764f40bb2b13910007a40840d876a0eff1d0402e10be5067fb11d384b34199f542d55e68b3494f86e2c9934a063ac3fd64e7b33af5dc30a92b16a8ed5ed2922a1f5fc67b826dfdf5e289520603e223e32b836971277ad415c6a8f9de57961f64f368effba6837455cb5a55f822d5690dce22b4afe6ef68eec6ef4113216676877f821690bf3c8225f828a8ccba378479aea35c963e3de2791bf00679fa3bd34a164ecdc7ad8a223ac2a86454288c17dd848185c353346e728d2a6357f7b9a27283d9e9c63f42c6b28664fdb52c482de32768a74916df66ccdb4a376956812d93dcafc57c6f5c5eba090127c96ba6975112aeeb34e9e83ed9ae84d607210c71a833bf402527cda3d3a63fe86f2c1536909d67737c8f423c8b3876136a5cc70ef495b223373f4f88587dad026f6ee5c12de467281403a424745dd6f28c63bb4846b6f970f7f0b596061e463945bbbfc91ce24ab8ef78dec5e133d02da86845cbe3cb3ae089a3e51eb0deb188384368cb061c238f2c4b2e342b8969d49c0ef1288822009276a87fc3b949a2559823a740a20b3c2f3072ef4a4857a1ac8bdad2f8f571fe81300175ce0614bffa0bba6a674eebb301e2a4473875635e780c7e3fe4e845f476c837e0e4df27edc70539a80f1a48f1eacbf3212acb99a543b4a10e56aa4121ae53bf1ca1344f9c114494aeb725ca956992d7dd70079da0cad003d2576013acf87078951f76f9e956918e590d080e1df29a59b4386ad0e1c55a14dcf260c5af3794c171d0576c7eab8fcce7dc345f96f84189c01341b68cb94eea166336737fc5c1a1fe775435cef17a1cefa29529d680351b0422ee2a3fac4493166d3f6c2305d40309eecd854c20f62f1925cdc41b690138044d19d2b2364b89dd6e1deb7a9c32658ab516e51ca3dac6d2fe9d7fe53b9842e928eecfe28fa46ab5c15001d1a7b1ae60e53cd1a9b7b06e0eb62478db7fb8aad59b94bf1e8e41a1c9cf6ab7cbaea866289cf3dfc956aae1d73da31afa945da790cfabce7900e87ba03f8eac6f929a08755722f442620dfc3578055d9db7dc91a195cd3446160b8077f8dd64985d071d0a0842aff1f4f35c2bafdbf199705bb4e717aca15d415e5b30db80e1f7e431ed1066cecfdea6f19242b029c96cf85e64283eaba1a3d80200fa8bb8d41503579dd88a1c42de4614f5816785e55ea4afb9e0c825d91bc622869e87d6446a0ba802cee7d92e12aec869c9b70a96efaf85263f852743a8a68dcd3e0dbb7fe7529840b05ccab6e51195314afb4275039eafe69a0f02fdd79907961f19b586e0dd3c4dd8ef3724f9384b6433d2a3aabab110906452291cff521ff629e2816f6965139dc9967a463746c1ba6ccfeb9e46f7f9d6aa44166da45555ac1a6f6fa3bd613cdd7b5a195e1401248fbc524abadb90157942cdaec490ce4cd0e52ae9f3deddb9525fb7aa8d2e51c075e7b6d490768b014e557f7b9127fe63233103e5c06861a83ca9b64f8a68527af65a4b2482ccb3d75307ebf0641393580ff8ed014b77c0b76b155c8e47b2e87cb0c810565e3db7db251dd017bd1dae49f74cf17b22eddf1d44c967b20f3fbd548b839695f446f4656c4b39b8caf36cc3955c2a8cb9de746106f696f195ff38636599626d426838dc6853f2034770340bbb94817eb24ac5309e6dfe34d1ef51b5f738a4438c0725f83070c71976c13dcb51c1633ed6a09ec42a8f31e7653df581292be7b6acc86a9d27eae3692c8c82d0af287aab562a796d748bb13933018f2c389aa7df44ef55a426065a19fbddc87bea510c541c629d4e866e7f9f587c512c4b8719a3c56397889eede466b90b7ff38a45426ea04f2ee139eb595f34f7c2e03a60e42ed064c609490c5574b89b50ce2b25d8f7842566bc5cba3ad032d6118f8d77fe3aaef3545268f0e290c45dbe68f4a9a584febb34d4d53d508009a2110a65a718e314a33994046c66091f408e08855714888dd878d185c319f99761f50f065575f3f9a22ce88945a238957df1496df152368255bfc6a4e27044e18d95298d131a76dd56fa7f216683d750a811d8447f1ef8ad97bf38b71849f52c1599979518dc0a2e7635b4f3bfb675900bbbb2cf36d7679dff60ab5d74a5aa4e3e21b41baa6affbee4ca6007839ebf10dc19253b52403ec0221ba38d054d8f1334192cafbcf4a70edd833da2d8878c9eba9c47563e18790d2a87255225583aae0fdd3a505a20d0a5a838f58b7e01b6f39a4d6efaa9c087ec4191a3749315a398c9cfe08a7d6093d3244ad00f1a590f710112f264b861f2197cbca6b210ab6fbf162e3440ab8e35fb79cc832a54b8f1a80815444b798ce95b764b763dbaabf07161cb8462d07b975531bfdbe961c37e1d2ab9f4f7f366b16bba6997fde5c3e9eb7dfaa2117e57a0644a30e4e484fa2d629fc79c667e9e4d54bc743f48891883070dfc9d5beb05033fa20d1b73e0d114f888d92ef3bf9595d892d73cbb9aa14c64c87f215c21a429dfd6cbc90f5f87ed2a7249dd589d192d3a742558cdf5c8609e6282005def95dc35e61a5c14542eb450510f7afe12fbdb57ad91bdbce4cfecca844bc5633de4b54167c7af10359e74c730d08c52db0586fb2f15bd714ca734b872c686099279156731f5c7b9dead11815145aa3186c18d066062d14e7eb9b17bc22d6e798e6c3765a0f55b94a677646b2f19b879831a3e751a6af67e83a3fde97af85fa52fa86d4e218f8482833f649bd23fe6aa4bd80fccbbfe0c86144206443eaa476cf63e05b4c01cc298e0768847a9d6ef5bb6f3465ba92f0612451503df839a3d338f61b2e08e40889bbe9227d3951681e4607382eba87382ee8dea7876ed87ef8469b38f38057b60725dc336ba5601dd22be68267f9fad70bb7f94696abfabd6f06303e68434f356cf51cd1908b03ad68f7ce84373f51ed1746e594ac9f9f89483da1d1a418d62856d635a5fe886470afc4aa582a4a2131523b5efecb2e8e4fc26cddab46bc59f1d310ffbc800d19801e859c1393782d572dcf76dc045aa8de557363dd05a99ae15a9c60b486c1819739c91f76951ecd64780ecd1257448596a029a63cfe6ae0ff664703aa78836e9e2f975b784beefd504179826d82e5bb2ba541aefab24079bfd26df13c30757211f0fdee857727166ced3444035ae65de179ad9ecfec0183c596acb36cd1bf4c7e5b6c078cd293c048e4347bf13999f1989626007c8c49b746cf4a20c079330d28fe2eb2b2f49a1ad79564637bea4a508135b7a5ecc70a07481f5b5ad0709324c12459eb068a308644befe7d4d427054d96b1847027e5711092c2557341c3a318ec54296fe5ad28ba1e200ebfbf1867b7932c90747559707b1264aba30a6efcc64d993feb1538912e6d02f9709a2a92d1f5e17e36072f41eee9d6fbabce1145157bf84301857dec476afa79a2d5cca7dd8cb1814738d1299be68d1f61985654c4bc4518116efefc5b81431bb4f32a4eccf385728b2eb6a4a78ee2c4b9b8397405e4412597f61b96d8da7bd0909f8524c5aa9d6c065df877ccfb655aa8bb54b81e47aab50852192b0eaadd1ec9203804447d155f2db6eeb8b0870172ac4ae5d985c3d54a6fc474b2980a7136b840364d784f7610e0dfef56643659ccce8f587b9453ca5ec0ba759fb696c70ac98c8aa37f8fa1b741a0f6f3810ffa720fb8694d9731f735176bd06903ff20bccdea2f5b82ad5607a8a7fb28893c6be3457a151a34ea4184c6f414f6e1269209151dca0ac3b6a0ad267f4a3bf7edbed012895a55695172d9b1ba0c4e235358203675b819e9a946056d4302d071a4de54c99b5c03a2c9d76713fbeaf43ebfac6cfc14813b40eb7a2fdc8d248e199c914ed", 0x2000, &(0x7f0000007180)={&(0x7f0000002140)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x98, 0x200080, 0x3, 0x4, 0x2, 0xff, 0x0, 0x0, 0x80, 0x10}}, &(0x7f00000021c0)={0x18, 0x0, 0xc, {0x7de91da5}}, &(0x7f0000002200)={0x18, 0x0, 0xa, {0x4}}, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, 0x7, {0x3}}, &(0x7f0000002280)={0x18, 0xfffffffffffffff5, 0x3, {0x5}}, &(0x7f0000004300)={0x28, 0xfffffffffffffff5, 0x0, {{0x5, 0x5, 0x2, r3}}}, &(0x7f0000004340)={0x60, 0x0, 0xc544, {{0x5, 0x5, 0x6, 0xc, 0x4, 0x9, 0xc, 0x9}}}, &(0x7f00000043c0)={0x18, 0x0, 0x7f, {0x8}}, &(0x7f0000004400)={0x2c, 0x0, 0x10000, {'/dev/dvb/adapter#/frontend#\x00'}}, &(0x7f0000004440)={0x20, 0x0, 0x4, {0x0, 0x9}}, &(0x7f00000045c0)={0x78, 0x0, 0x401, {0x5, 0x2, 0x0, {0x6, 0x4, 0xd05d, 0x30000000000, 0xfffffffffffffffb, 0x9, 0x3, 0xb94d, 0x8, 0x4000, 0x9, r4, r5, 0x4, 0xe17}}}, &(0x7f0000004680)={0x90, 0x0, 0x2, {0x4, 0x3, 0x29, 0x4, 0x5b2, 0xfff, {0x6, 0x200, 0xb99, 0x8, 0x0, 0xffffffff, 0x5, 0x7, 0x8000, 0x2000, 0x100000, r6, r7, 0x8, 0x1}}}, &(0x7f0000004740)={0x80, 0x0, 0x4, [{0x0, 0x8, 0x1c, 0x2, '/dev/dvb/adapter#/frontend#\x00'}, {0x4, 0x0, 0x1c, 0x4, '/dev/dvb/adapter#/frontend#\x00'}]}, &(0x7f0000004ac0)={0x370, 0x0, 0x3, [{{0x1, 0x2, 0x3, 0xe, 0xfffffffd, 0x5, {0x1, 0x77d4, 0x3, 0xdf0, 0xffff, 0x5, 0x5, 0x8, 0x1, 0x2000, 0xa05, 0xee01, r8, 0x6260, 0x8}}, {0x1, 0x5c57, 0x0, 0x9}}, {{0x2, 0x2, 0x8, 0xf, 0x9ed, 0x4ca3, {0x5, 0x6b7, 0x2, 0x2a0c2e, 0x1, 0x0, 0x0, 0x878486b7, 0x5, 0x8000, 0x401, r10, 0xffffffffffffffff, 0x8, 0x3ff}}, {0x4, 0x4, 0x2, 0x0, '-{'}}, {{0x1, 0x3, 0x7fffffff, 0xe7, 0xed36, 0xffff0aa1, {0x5, 0x1, 0x8, 0x9, 0x9, 0x7fffffffffffffff, 0xfff, 0x8, 0x401, 0xa000, 0xeb2, r11, r13, 0x0, 0x81}}, {0x5, 0x80000000, 0x1c, 0x9e5, '/dev/dvb/adapter#/frontend#\x00'}}, {{0x5, 0x1, 0x8, 0x5, 0x8, 0x9, {0x1, 0x3, 0xa, 0x80000000, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x1000, 0x1, r15, 0x0, 0x2, 0x1}}, {0x0, 0x7, 0x1c, 0x7, '/dev/dvb/adapter#/frontend#\x00'}}, {{0x5, 0x2, 0x5, 0x4, 0x9, 0xa58, {0x4, 0xf3f, 0x3, 0x101, 0xb, 0x6, 0x0, 0x0, 0x3284, 0x2000, 0x7ff, r16, r17, 0x6, 0x30000}}, {0x6, 0x12a5, 0x1c, 0x80000001, '/dev/dvb/adapter#/frontend#\x00'}}]}, &(0x7f0000004ec0)={0xa0, 0xffffffffffffffda, 0x2, {{0x4, 0x3, 0x8, 0x10, 0x5, 0xbbd, {0x4, 0x800, 0x671ede28, 0x0, 0x1d5, 0x3, 0x8, 0x1, 0x8, 0xa000, 0x38, r18, r19, 0x7, 0x6}}, {0x0, 0x12}}}, &(0x7f0000004f80)={0x20, 0x0, 0xb1, {0x26, 0x4, 0xfff, 0x65}}, &(0x7f0000007040)={0x130, 0x0, 0xc0f, {0x1, 0x800, 0x0, '\x00', {0x0, 0x23, 0x2, 0x94a, r21, r22, 0x6000, '\x00', 0x5, 0x6, 0x5eb9, 0x0, {0xdb, 0x5}, {0x4, 0xa}, {0x1000, 0x5d9}, {0x1, 0x1ff}, 0x3, 0x10000, 0xfffffbf9, 0x3}}}}) r23 = openat2$dir(0xffffffffffffff9c, &(0x7f00000072c0)='./file0\x00', &(0x7f0000007300)={0x0, 0x1}, 0x18) fsconfig$FSCONFIG_SET_PATH(r14, 0x3, &(0x7f0000007240)='-{', &(0x7f0000007280)='./file0\x00', r23) openat$cgroup_freezer_state(r9, &(0x7f0000007340), 0x2, 0x0) write$FUSE_INIT(r12, &(0x7f0000007380)={0x50, 0xffffffffffffffda, r20, {0x7, 0x2d, 0x9, 0x400, 0x400, 0x9, 0x6, 0x9, 0x0, 0x0, 0x11, 0x3}}, 0x50) mount(&(0x7f0000007400)=@sg0, &(0x7f0000007440)='./file0\x00', &(0x7f0000007480)='hfs\x00', 0x8c4000, &(0x7f00000074c0)='freezer.state\x00') r24 = syz_clone3(&(0x7f0000007700)={0x800000, &(0x7f0000007500), &(0x7f0000007540), &(0x7f0000007580), {0x6}, &(0x7f00000075c0)=""/153, 0x99, &(0x7f0000007680)=""/21, &(0x7f00000076c0)=[r3], 0x1, {r9}}, 0x58) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007780)={r24, r11, r7}, 0xc) 524.51101ms ago: executing program 3 (id=1858): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x2, 0x3}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x228c42, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x4) (async) r4 = accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x180800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x2, 'tunl0\x00', {0x5}, 0x2}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) 463.944323ms ago: executing program 3 (id=1859): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x26, 0x0, 0x4, 0xfbc}, 0x28) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r3, 0x4) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0049364, &(0x7f0000000180)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x582c, 0xfffffc01, 0x8, 0x400, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xa, 0xb, 0x7, 0xffffffffffffffe0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}], &(0x7f0000000080)='syzkaller\x00', 0xdfb, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0x9, 0x2, 0x6}, 0x10, r3, 0x0, 0x5, &(0x7f0000000240)=[0x1, r5, 0x1, 0xffffffffffffffff, r6], &(0x7f0000000300)=[{0x4, 0x1, 0x1, 0xa}, {0x1, 0x2, 0x0, 0xb}, {0x0, 0x3, 0x5, 0x2}, {0x4, 0x4, 0x0, 0x6}, {0x2, 0x2, 0x1, 0xc}], 0x10, 0xf7}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) 462.124878ms ago: executing program 3 (id=1860): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xd) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x8, 0x4, 0x4, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c200000097000000000f0800450000140000000000019078ac1e0001c71414aa030490781200183f25000000006800000001000dac1414bb7f000001891f2dac1e0001e0000002ac1414bbffffffffe0000001ac1e0101ac1e0001440daa510000000000000008441435517f00000100000000641101000000002a00"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) fsopen(0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240088d0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000000080)={0x0, 0x6c69, 0x1, 0x8, 0x367}, &(0x7f0000010080), &(0x7f00000002c0), 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x40047452, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000040)={0x0, "4370ac445caa8cfa2856b755ed11d819b507a13c2734f674020ee4ae12e7fe00", 0x3}) 254.249821ms ago: executing program 5 (id=1861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000380)={0x14}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) 237.867674ms ago: executing program 1 (id=1862): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x9, 0x5, 0x1}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/209) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f00000001c0)=[@out_dx={0x6a, 0x28, {0x6c3a, 0x6, 0x8}}, @cpuid={0x64, 0x18, {0x5, 0x5}}, @uexit={0x0, 0x18, 0x7ff}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4ed, 0xf, 0x4, 0x1ff}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x4717}}, @wr_drn={0x68, 0x20, {0x0, 0x9}}, @nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xeb5a, 0x2, 0xffffffff}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18}], 0x140}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x490500, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x6141, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000003c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x3, r7, 0x0, 0x4, 0xf6, &(0x7f0000000480)="d548de6cd91804828f9d93708fb7fbce43da68bbcc30c220e1dab2f3906f391b3ff650cd23aa831ceb7d6d3fbc4c894f7d2e1c996705cc50bc3d39ba559d74087fdbaa63269919cfbb271224228cd0e4c03587c26ba953ab88adc164daf8b773a650dcd6b47a00eebd1bd80e021fdedcc328a47f67135c5dca2154981de2fe7991a1f85d338fa1a7baa17336a06a2adfc1abb68404f3f21e71dc53faa02493261ae144afaea686b119d2342f6991bc63a66d073ba0fc8ed7e2758b0f6ecaf030d2c11d30bcc425b1cc169b3f02159108a7e6f1a5fe06919b00d368ed2ff07e2544a81fc8af30691031f32d8d82d4c79a69fd7a60b252"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg1\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x20, 0x7, 0x1, 0x0, "240a07ac2257850abb5955a560dd409d7689ada9cff95e71072a6af4"}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}]}, @NFT_MSG_DELOBJ={0x164, 0x14, 0xa, 0x0, 0x0, 0x0, {0xdf9831e40eb9cf12, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xb5, 0x8, "8af67cac98b6f16d3bd8d18eeeb5c6ba941fbc7da2f4ef1f0969c3ad487223e3353e74e00c6ee7c0cd42bbe67b67c0363e9a7dfe93e1d45629b07e929fb09e83d9fb669a75b73beb1094fbbbc8cf310b23ae954d86c0e62be886d44b1579f474959cb1ab6347f9a698273d381abd9179e822e826f0025c10addbe3a7a4871378f8c64d8de56a372f23e1d6383c8def47016aa28e807debe984011d9a1d58020941daec6ca22c1d7f135de9977e0f0c175f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "3923b5750212849a0c9253073c2c34751bb005eef969e53c0bf0f9e83ec9a33394d6bbadcb6ea90d4572f1a53d7c83bb9cf8ff99a62270edc392a3e39a002192c7468cdb3f406921bc70e822aa9e478d6d0f41bfbdde33"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x4084) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000980)={0x0, 0x8, 0xfffffffffffffff1}) r8 = eventfd2(0x1, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f0000001140)={{'\x00', 0x3}, {0x6}, 0x14, 0x0, 0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)="89e22cd9c74f0dbb5a9fa87900e3ec138b1c353852560be6f7c27ebe7e82579fef4b746c61ce4d3db6956552b9b5d7a7279e7a2988d151f3653990056f4ca1ddab05cf1fe4441d52acda070a0af7528025fd8cd1f97427e9622e0dbeae1294", 0x5f, 0x0, &(0x7f0000000e80)={0x2, 0x18d, {0x1, 0xc, 0xd4, "07a83435fa8a50bd3fa9216301481b3f61688611d3cf42a037cd61a1af4c6187ce60743ed9bc3ea8b6cf3aca771872eb044955eb01364388c6d802f65c2ae561057d60d2aebca1bd896fd01d432f4f39d31b7c9ad0ad20b923198edb2c3f0faa981ddfad422c63dcd2cf482a46d68c3fcc92b4fdfaa957162dbc04a694d3a94c090b1ac2dfb464c268c0d8a4fe3afcc39129e2be9f85917109e1abf398b66e1ee0279ca24aec44441ccb7ed1dbd272ef8c45d61730226223cc13038e7846e52d3ab28a7ed5f7b744cfe5845a83a39042a4857a43", 0xac, "5323586528a58963ae8aefeb11bd3c994749380d7fd7234e32422db4d0bce61e699485def56cb138ef90824bf8a7c2ecec8d30c2891e8f0ab9c88a7caa46ba9596e31146e54e987664cc454f62eff70fda3299200b2b44e2e037437b2be3e7e701b1995c0cb64d33b56bea9ef0775beefad62baa730318eef12ceee0bda03ccf7812a5ab1a6f64d09c5e7a93d85bcebcab5df8a84661382c900d42e94dfce7017a9696a763a619bc509d3d38"}, 0xfa, "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"}, 0x293}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) r9 = signalfd(r0, &(0x7f0000001200)={[0x8]}, 0x8) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000001280)=@attr_other={0x0, 0x0, 0x2, &(0x7f0000001240)=0x401}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000012c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000001380)={&(0x7f0000001300)=[0x0, r10, 0x0], &(0x7f0000001340)=[0x3, 0x100000001, 0x5, 0x774, 0x1], 0x3}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000013c0)={0xe9, 0x7, 0x3}) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xadd, 0x5, 0x4, 0x2]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001500)={'bond_slave_0\x00', 0x200}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r11, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40040880) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000001680)={0x8, 0x6}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000016c0)={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0x1, "d71de6021680533c2910cfb7ff8b5ae730cc8801ed0d0a02e60a0f07b5514ddf", 0x9b, 0x8, 0x41bf, 0x3}, 0x3c) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x40) 143.603158ms ago: executing program 1 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffd, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x201, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000004000000000000000002000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r6}, 0x94) (async) r8 = socket$inet(0x2, 0x1, 0x2) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, r6, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) (async, rerun: 64) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 143.20296ms ago: executing program 5 (id=1864): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='veth1_virt_wifi\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r2, 0x4b34, 0x3bf) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20040040}}], 0x1, 0x4040) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) 142.895295ms ago: executing program 1 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000c80)="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", 0xc73}], 0x1}}], 0x1, 0x20088040) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4018000}, 0x8010) 63.805465ms ago: executing program 1 (id=1866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0xf87, &(0x7f0000002140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2580a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0x9, @win={{0x8, 0x7, 0x1, 0xe2}, 0x2, 0x7, 0x0, 0x6, 0x0, 0x6}}) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) 59.411322ms ago: executing program 5 (id=1867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) timer_create(0x3, &(0x7f0000000080)={0x0, 0x17, 0x1, @tid=r2}, &(0x7f00000000c0)) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) finit_module(r1, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 758.374µs ago: executing program 1 (id=1868): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) setreuid(0x0, 0xee00) r4 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 0s ago: executing program 5 (id=1869): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000001500)) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000180)=0x0) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x2000005, 0x50}, &(0x7f0000000100), &(0x7f0000000080)=0x0, &(0x7f0000000940)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES64=r9], 0x30}}, 0x4044040) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r7, @ANYRES16], 0x4c}, 0x1, 0x0, 0x0, 0x40c4804}, 0x4040060) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13c16}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff8}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x44) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x2004, @fd=r8, 0x56c, 0x0, 0x0, 0x2, 0x1, {0x1, r15}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1, {0x0, r15}}) io_uring_enter(r4, 0x39d7, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000101000d92586365286b46f00000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000400b2000000"], 0x48}}, 0x40800) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000900)) ptrace(0x4207, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x44, 0x1, 0x1}, &(0x7f0000001340)=[{}]) syz_ublk_add_dev(r8, r5, r9, r7, &(0x7f00000005c0)={0x2e, 0x4, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0x4ac, 0x0, 0x0, 0x1000, 0xf3, 0x0, 0x0, 0x100}}}, &(0x7f0000000640)) kernel console output (not intermixed with test programs): ng to 7 [ 186.013497][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.016206][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.018961][ T6003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.022219][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.024950][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.027719][ T6003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.030985][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.033795][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.036522][ T6003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.039695][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.042417][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.045328][ T6003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.048538][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.051259][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.054048][ T6003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.057206][ T6003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.060624][ T6003] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 186.063354][ T6003] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 186.065812][ T6003] usb 6-1: Product: syz [ 186.067054][ T6003] usb 6-1: Manufacturer: syz [ 186.068413][ T6003] usb 6-1: SerialNumber: syz [ 186.071286][ T6003] usb 6-1: config 0 descriptor?? [ 186.077276][ T6003] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 186.093379][ T6003] usb 9-1: USB disconnect, device number 19 [ 186.093437][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 186.101077][ T6003] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 186.250156][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 186.250167][ T40] audit: type=1400 audit(1780211953.551:28699): avc: denied { write } for pid=12156 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.416470][ T6003] usb 6-1: USB disconnect, device number 23 [ 186.425652][ T6003] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 186.644978][ T40] audit: type=1400 audit(1780211953.951:28700): avc: denied { write } for pid=12170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.701407][ T40] audit: type=1400 audit(1780211954.001:28701): avc: denied { write } for pid=12173 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.788179][ T40] audit: type=1400 audit(1780211954.091:28702): avc: denied { write } for pid=12175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.829136][ T40] audit: type=1400 audit(1780211954.131:28703): avc: denied { write } for pid=12178 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.929410][ T40] audit: type=1400 audit(1780211954.231:28704): avc: denied { write } for pid=12180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.989654][ T40] audit: type=1400 audit(1780211954.291:28705): avc: denied { write } for pid=12185 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.024328][ T40] audit: type=1400 audit(1780211954.331:28706): avc: denied { accept } for pid=12183 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.033691][ T40] audit: type=1400 audit(1780211954.341:28707): avc: denied { create } for pid=12183 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.035575][T12184] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 187.075310][ T40] audit: type=1400 audit(1780211954.381:28708): avc: denied { write } for pid=12188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.120427][T12195] __nla_validate_parse: 2 callbacks suppressed [ 187.120443][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1246'. [ 189.219595][T12269] sz1: rxe_newlink: already configured on lo [ 189.224234][T12269] lo: left promiscuous mode [ 189.226289][T12269] lo: entered allmulticast mode [ 189.230531][T12269] tunl0: entered allmulticast mode [ 189.233428][T12269] gre0: entered allmulticast mode [ 189.236399][T12269] gretap0: entered allmulticast mode [ 189.239072][T12269] erspan0: entered allmulticast mode [ 189.241662][T12269] ip_vti0: entered allmulticast mode [ 189.244616][T12269] ip6_vti0: entered allmulticast mode [ 189.247235][T12269] sit0: entered allmulticast mode [ 189.249810][T12269] ip6tnl0: entered allmulticast mode [ 189.252394][T12269] ip6gre0: entered allmulticast mode [ 189.255399][T12269] syz_tun: entered allmulticast mode [ 189.258051][T12269] ip6gretap0: entered allmulticast mode [ 189.271911][T12269] bridge0: entered allmulticast mode [ 189.275912][T12269] bond0: entered allmulticast mode [ 189.280728][T12269] dummy0: entered allmulticast mode [ 189.281863][T12272] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 189.289264][T12269] nlmon0: entered allmulticast mode [ 189.289696][T12269] batadv0: entered allmulticast mode [ 189.294299][T12272] qnx6: wrong signature (magic) in superblock #1. [ 189.294310][T12272] qnx6: unable to read the first superblock [ 189.300335][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.300827][T12269] vxcan0: entered allmulticast mode [ 189.305869][T12269] vxcan1: entered allmulticast mode [ 189.307708][T12269] veth0: entered allmulticast mode [ 189.309175][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.309569][T12269] veth1: entered allmulticast mode [ 189.313966][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.320206][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.324419][T12269] wg0: entered allmulticast mode [ 189.326180][T12269] wg1: entered allmulticast mode [ 189.327961][T12269] wg2: entered allmulticast mode [ 189.328207][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.329804][T12269] veth0_to_bridge: entered allmulticast mode [ 189.335196][T12269] bridge_slave_0: entered allmulticast mode [ 189.338053][T12269] veth1_to_bridge: entered allmulticast mode [ 189.340510][T12269] veth0_to_bond: entered allmulticast mode [ 189.343156][T12269] veth1_to_bond: entered allmulticast mode [ 189.346844][T12269] bond_slave_1: entered allmulticast mode [ 189.349820][T12269] veth1_to_team: entered allmulticast mode [ 189.353770][T12269] team_slave_1: entered allmulticast mode [ 189.356777][T12269] veth0_to_batadv: entered allmulticast mode [ 189.359641][T12269] batadv_slave_0: entered allmulticast mode [ 189.362326][T12269] veth1_to_batadv: entered allmulticast mode [ 189.365701][T12269] batadv_slave_1: entered allmulticast mode [ 189.368515][T12269] xfrm0: entered allmulticast mode [ 189.371075][T12269] veth0_to_hsr: entered allmulticast mode [ 189.374177][T12269] hsr_slave_0: entered allmulticast mode [ 189.376257][T12269] veth1_to_hsr: entered allmulticast mode [ 189.378390][T12269] hsr_slave_1: entered allmulticast mode [ 189.380408][T12269] hsr0: entered allmulticast mode [ 189.384397][T12269] veth1_virt_wifi: entered allmulticast mode [ 189.386815][T12269] veth0_virt_wifi: entered allmulticast mode [ 189.389630][T12269] virt_wifi0: entered allmulticast mode [ 189.392217][T12269] veth1_vlan: entered allmulticast mode [ 189.395327][T12269] veth0_vlan: entered allmulticast mode [ 189.397513][T12269] vlan0: entered allmulticast mode [ 189.400004][T12269] vlan1: entered allmulticast mode [ 189.401813][T12269] macvlan0: entered allmulticast mode [ 189.406353][T12269] macvlan1: entered allmulticast mode [ 189.408204][T12269] ipvlan0: entered allmulticast mode [ 189.410113][T12269] ipvlan1: entered allmulticast mode [ 189.411935][T12269] veth1_macvtap: entered allmulticast mode [ 189.414019][T12269] veth0_macvtap: entered allmulticast mode [ 189.416017][T12269] macvtap0: entered allmulticast mode [ 189.417848][T12269] geneve0: entered allmulticast mode [ 189.419682][T12269] geneve1: entered allmulticast mode [ 189.421569][T12269] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 189.425873][T12269] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 189.428444][T12269] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 189.431097][T12269] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 189.434555][T12269] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 189.437036][T12269] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 189.439513][T12269] : entered allmulticast mode [ 189.441776][T12269] syztnl1: entered allmulticast mode [ 189.445503][T12269] bridge1: entered allmulticast mode [ 189.449046][T12269] bridge2: entered allmulticast mode [ 189.451862][T12269] bond1: entered allmulticast mode [ 189.455143][T12269] geneve2: entered allmulticast mode [ 189.459686][T12269] !: entered allmulticast mode [ 189.463643][T12269] bond2: left promiscuous mode [ 189.465590][T12269] bond2: entered allmulticast mode [ 189.467949][T12269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.471444][T12269] ip6gretap1: entered allmulticast mode [ 189.476917][T12269] ip6tnl1: entered allmulticast mode [ 189.477784][T12291] netlink: 'syz.4.1252': attribute type 4 has an invalid length. [ 189.479547][T12269] bond3: entered allmulticast mode [ 189.483070][T12291] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1252'. [ 189.486931][T12292] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1252'. [ 189.487908][ T9] lo speed is unknown, defaulting to 1000 [ 189.492335][ T9] sz1: Port: 1 Link ACTIVE [ 189.505078][ T9] lo speed is unknown, defaulting to 1000 [ 189.595571][T12307] netlink: 'syz.1.1253': attribute type 11 has an invalid length. [ 189.599294][T12307] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1253'. [ 189.616103][T12302] sd 0:0:0:0: PR command failed: 1026 [ 189.618137][T12302] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 189.625438][T12302] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 189.688599][T12316] syzkaller0: entered promiscuous mode [ 189.689320][T12275] Failed to initialize the IGMP autojoin socket (err -2) [ 189.690940][T12316] syzkaller0: entered allmulticast mode [ 189.993459][T12337] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1261'. [ 190.040212][T12339] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 190.088808][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 190.092436][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 190.270274][T12354] syzkaller0: entered promiscuous mode [ 190.272735][T12354] syzkaller0: entered allmulticast mode [ 190.292841][T12354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1267'. [ 190.450507][T12275] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 190.455440][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.459342][T12275] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 190.465743][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.468754][T12275] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 190.476887][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.481248][T12275] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 190.494512][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.668569][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 190.671328][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 190.676135][T12367] netlink: 'syz.4.1272': attribute type 15 has an invalid length. [ 190.679387][T12367] netlink: 'syz.4.1272': attribute type 18 has an invalid length. [ 190.754018][T12380] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.795068][T12384] trusted_key: syz.1.1275 sent an empty control message without MSG_MORE. [ 191.123137][T12275] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.129349][T12275] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 191.137652][T12275] wireguard: wg0: Could not create IPv4 socket [ 191.140906][T12275] wireguard: wg1: Could not create IPv4 socket [ 191.144995][T12275] wireguard: wg2: Could not create IPv4 socket [ 191.253613][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 191.253635][ T40] audit: type=1400 audit(1780211958.562:28750): avc: denied { write } for pid=12417 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.376081][ T40] audit: type=1400 audit(1780211958.672:28751): avc: denied { write } for pid=12420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.387682][T12423] bridge_slave_0: left allmulticast mode [ 191.390295][T12423] bridge_slave_0: left promiscuous mode [ 191.397746][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.403137][T12423] bridge_slave_1: left allmulticast mode [ 191.405132][T12423] bridge_slave_1: left promiscuous mode [ 191.407543][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.417019][T12423] team0: Port device team_slave_0 removed [ 191.421246][T12423] team0: Port device team_slave_1 removed [ 191.426676][T12423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.430283][T12423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.431755][ T40] audit: type=1400 audit(1780211958.732:28752): avc: denied { write } for pid=12425 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.442851][T12423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.554284][ T40] audit: type=1400 audit(1780211958.862:28753): avc: denied { write } for pid=12429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.615183][ T40] audit: type=1400 audit(1780211958.922:28754): avc: denied { write } for pid=12432 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.766801][ T40] audit: type=1400 audit(1780211959.072:28755): avc: denied { map } for pid=12441 comm="syz.1.1279" path="pipe:[42665]" dev="pipefs" ino=42665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 191.813414][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 192.263752][ T40] audit: type=1400 audit(1780211959.572:28756): avc: denied { write } for pid=12455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.332305][ T40] audit: type=1400 audit(1780211959.632:28757): avc: denied { write } for pid=12461 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.573388][ T40] audit: type=1400 audit(1780211959.882:28758): avc: denied { write } for pid=12467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.624489][ T40] audit: type=1400 audit(1780211959.932:28759): avc: denied { write } for pid=12470 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.714500][T12475] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 192.842915][T12505] __nla_validate_parse: 4 callbacks suppressed [ 192.842927][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 192.887844][T12517] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 192.913687][T12517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.948706][T12517] veth3: entered promiscuous mode [ 192.954357][T12517] bond4: (slave veth3): Enslaving as an active interface with a down link [ 192.975608][T12517] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 193.141414][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 193.287164][T12546] hfs: can't find a HFS filesystem on dev sr0 [ 193.295521][T12548] hfs: can't find a HFS filesystem on dev sr0 [ 193.501660][T12564] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1300'. [ 193.510257][T12564] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1300'. [ 193.516254][T12564] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1300'. [ 193.523421][T12565] tmpfs: Cannot disable swap on remount [ 193.776697][T12579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.983863][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 194.380114][T12605] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 195.298837][T12620] syz.3.1310 (12620): drop_caches: 1 [ 195.525977][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 195.529272][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 195.673455][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1313'. [ 195.973880][ T34] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 196.124410][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 196.129122][ T34] usb 8-1: config 2 has an invalid interface number: 176 but max is 1 [ 196.133229][ T34] usb 8-1: config 2 has an invalid interface number: 102 but max is 1 [ 196.139593][ T34] usb 8-1: config 2 has no interface number 0 [ 196.143291][ T34] usb 8-1: config 2 has no interface number 1 [ 196.145902][ T34] usb 8-1: config 2 interface 176 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 196.150380][ T34] usb 8-1: config 2 interface 176 altsetting 5 endpoint 0x9 has an invalid bInterval 31, changing to 7 [ 196.155295][ T34] usb 8-1: config 2 interface 176 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 196.166879][ T34] usb 8-1: config 2 interface 176 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 196.172131][ T34] usb 8-1: config 2 interface 176 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 196.176606][ T34] usb 8-1: config 2 interface 176 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 196.182684][ T34] usb 8-1: config 2 interface 176 has no altsetting 0 [ 196.185560][ T34] usb 8-1: config 2 interface 102 has no altsetting 0 [ 196.190210][ T34] usb 8-1: New USB device found, idVendor=054c, idProduct=00e9, bcdDevice=bd.81 [ 196.194527][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.197853][ T34] usb 8-1: Product: ꧁㌗招ј䨒䫗售饨琞煡묅틪㶉彜㒊ἂ螛꾇簙혓첮娎嶛눠઩콞ﷂ⦬귇႘אָ沄錢␌⟊鿲윫皷틄㙵륨㯗퉷દ⨽ហ慌㡔悘䳵돉뛧浌쿙褝쮑䙭Ꝉ⏤権ਂ略ᜰ弄䏺﷙㴐䩍ኒഔ㏭떒 [ 196.208011][ T34] usb 8-1: Manufacturer: Р [ 196.209969][ T34] usb 8-1: SerialNumber: syz [ 196.288498][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 196.288516][ T40] audit: type=1400 audit(1780211963.593:28790): avc: denied { write } for pid=12677 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.412096][ T1347] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 196.425404][ T34] usb 8-1: active config #2 != 1 ?? [ 196.432163][ T34] usb 8-1: active config #2 != 1 ?? [ 196.437252][ T34] usb 8-1: USB disconnect, device number 24 [ 196.461926][ T5816] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 196.541900][ T1347] usb 6-1: device descriptor read/64, error -71 [ 196.642133][ T5816] usb 9-1: Using ep0 maxpacket: 8 [ 196.645411][ T5816] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 196.648000][ T5816] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 196.651345][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.654773][ T5816] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 196.658237][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 196.661534][ T5816] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.667493][ T5816] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.671315][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.731752][ T40] audit: type=1400 audit(1780211964.033:28791): avc: denied { write } for pid=12687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.775986][ T40] audit: type=1400 audit(1780211964.083:28792): avc: denied { write } for pid=12690 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.791904][ T1347] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 196.878893][ T5816] usb 9-1: usb_control_msg returned -32 [ 196.881291][ T5816] usbtmc 9-1:16.0: can't read capabilities [ 196.891745][ T40] audit: type=1400 audit(1780211964.193:28793): avc: denied { write } for pid=12692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.932193][ T1347] usb 6-1: device descriptor read/64, error -71 [ 196.948560][ T40] audit: type=1400 audit(1780211964.253:28794): avc: denied { write } for pid=12695 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.043514][ T40] audit: type=1400 audit(1780211964.353:28795): avc: denied { write } for pid=12697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.052126][ T1347] usb usb6-port1: attempt power cycle [ 197.101909][ T40] audit: type=1400 audit(1780211964.403:28796): avc: denied { write } for pid=12700 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.210622][ T40] audit: type=1400 audit(1780211964.513:28797): avc: denied { write } for pid=12702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.267365][ T40] audit: type=1400 audit(1780211964.573:28798): avc: denied { write } for pid=12705 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.402032][ T1347] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 197.432881][ T1347] usb 6-1: device descriptor read/8, error -71 [ 197.592684][ T29] usb 9-1: USB disconnect, device number 20 [ 197.624081][T12721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1323'. [ 197.627967][T12721] netlink: 'syz.4.1323': attribute type 3 has an invalid length. [ 197.657299][T12722] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.669976][T12722] 9p: Bad value for 'version' [ 197.679405][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.681770][ T1347] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 197.686511][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.689977][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.698854][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.703093][ T1347] usb 6-1: device descriptor read/8, error -71 [ 197.704849][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.813342][ T1347] usb usb6-port1: unable to enumerate USB device [ 197.824712][ T40] audit: type=1400 audit(1780211965.133:28799): avc: denied { write } for pid=12731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.959319][T12725] Failed to initialize the IGMP autojoin socket (err -2) [ 198.131119][T12760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 198.133446][T12760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.137190][T12760] vhci_hcd vhci_hcd.0: Device attached [ 198.401898][ T29] usb 46-1: SetAddress Request (2) to port 0 [ 198.409140][ T29] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 198.635648][T12725] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 198.644083][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.647889][T12725] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 198.655728][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.659422][T12725] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 198.668514][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.672774][T12725] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 198.683731][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.843357][T12764] vhci_hcd: connection reset by peer [ 198.852358][T11422] vhci_hcd vhci_hcd.4: stop threads [ 198.854582][T11422] vhci_hcd vhci_hcd.4: release socket [ 198.856920][T11422] vhci_hcd vhci_hcd.4: disconnect device [ 198.989160][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.992399][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.299335][T12725] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.325765][T12725] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 199.338042][T12725] wireguard: wg0: Could not create IPv4 socket [ 199.343646][T12725] wireguard: wg1: Could not create IPv4 socket [ 199.357426][T12725] wireguard: wg2: Could not create IPv4 socket [ 199.711158][T12837] input: syz0 as /devices/virtual/input/input16 [ 199.825443][T12849] __nla_validate_parse: 2 callbacks suppressed [ 199.825454][T12849] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1342'. [ 199.906237][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 199.930840][T12863] Invalid source name [ 199.933423][T12863] UBIFS error (pid: 12863): cannot open "/dev/sr0", error -22 [ 199.981683][T12874] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1348'. [ 199.989393][T12874] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1348'. [ 200.034397][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 200.037225][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 200.333814][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 200.359222][T12911] could not allocate digest TFM handle nhpoly1305-sse2 [ 200.517446][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 200.527255][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 200.742551][T12939] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1361'. [ 200.924685][T12961] zonefs (loop1) ERROR: Not a zoned block device [ 201.043530][T12969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.087419][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 201.158601][T12969] ceph: No mds server is up or the cluster is laggy [ 201.196988][T10377] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 201.361243][T10377] usb 9-1: Using ep0 maxpacket: 32 [ 201.374716][T10377] usb 9-1: unable to get BOS descriptor or descriptor too short [ 201.379027][T10377] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 201.384749][T10377] usb 9-1: config 8 has no interface number 0 [ 201.389323][T10377] usb 9-1: config 8 interface 188 has no altsetting 0 [ 201.399817][T10377] usb 9-1: string descriptor 0 read error: -22 [ 201.402859][T10377] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 201.406357][T10377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.415233][T10377] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 201.418378][T10377] dw2102: su3000_power_ctrl: 1, initialized 0 [ 201.420808][T10377] dvb-usb: bulk message failed: -22 (2/0) [ 201.428090][T10377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.432516][T13007] syzkaller0: entered promiscuous mode [ 201.433768][T10377] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 201.434821][T13007] syzkaller0: entered allmulticast mode [ 201.438104][T10377] usb 9-1: media controller created [ 201.442778][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.445049][T10377] dw2102: i2c transfer failed. [ 201.454123][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.456548][T10377] dw2102: i2c transfer failed. [ 201.458517][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.460885][T10377] dw2102: i2c transfer failed. [ 201.463571][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.465838][T10377] dw2102: i2c transfer failed. [ 201.467653][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.470280][T10377] dw2102: i2c transfer failed. [ 201.472481][T10377] dvb-usb: bulk message failed: -22 (6/0) [ 201.474561][T10377] dw2102: i2c transfer failed. [ 201.476400][T10377] dvb-usb: MAC address: 02:02:02:02:02:02 [ 201.485847][T10377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.497713][T10377] dvb-usb: bulk message failed: -22 (3/0) [ 201.500573][T10377] dw2102: command 0x0e transfer failed. [ 201.502700][T10377] dvb-usb: bulk message failed: -22 (3/0) [ 201.504447][T10377] dw2102: command 0x0e transfer failed. [ 201.824916][T10377] dvb-usb: bulk message failed: -22 (3/0) [ 201.826754][T10377] dw2102: command 0x0e transfer failed. [ 201.833054][T10377] dvb-usb: bulk message failed: -22 (3/0) [ 201.841732][T10377] dw2102: command 0x0e transfer failed. [ 201.844192][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 201.846488][T10377] dw2102: command 0x51 transfer failed. [ 201.867336][T10377] DVB: Unable to find symbol ds3000_attach() [ 201.869695][T10377] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 201.931273][T10377] rc_core: IR keymap rc-su3000 not found [ 201.933809][T10377] Registered IR keymap rc-empty [ 201.943133][T10377] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 201.951354][T10377] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input17 [ 201.965794][T10377] dvb-usb: schedule remote query interval to 150 msecs. [ 201.968142][T10377] dw2102: su3000_power_ctrl: 0, initialized 1 [ 201.969987][T10377] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 202.125057][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 202.133072][T10377] dw2102: i2c transfer failed. [ 202.312118][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 202.315558][T10377] dw2102: i2c transfer failed. [ 202.475786][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 202.478916][T10377] dw2102: i2c transfer failed. [ 202.631451][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 202.633894][T10377] dw2102: i2c transfer failed. [ 202.811350][T10377] dvb-usb: bulk message failed: -22 (1/0) [ 202.813209][T10377] dw2102: i2c transfer failed. [ 202.954942][T10377] usb 9-1: USB disconnect, device number 21 [ 203.000146][T10377] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 203.112710][T13028] fuse: Unknown parameter 'rootmo000000100000' [ 203.213734][T13033] cgroup: none used incorrectly [ 203.215392][T13034] cgroup: none used incorrectly [ 203.220282][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 203.220292][ T40] audit: type=1400 audit(1780211970.523:28826): avc: denied { write } for pid=13029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.230520][ T40] audit: type=1400 audit(1780211970.533:28827): avc: denied { ioctl } for pid=13032 comm="syz.4.1377" path="socket:[47544]" dev="sockfs" ino=47544 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 203.238187][ T40] audit: type=1326 audit(1780211970.543:28828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13032 comm="syz.4.1377" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c979ce59 code=0x0 [ 203.245534][ T40] audit: type=1326 audit(1780211970.543:28829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13032 comm="syz.4.1377" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c979ce59 code=0x0 [ 203.268320][ T40] audit: type=1400 audit(1780211970.573:28830): avc: denied { write } for pid=13038 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.366565][ T40] audit: type=1400 audit(1780211970.673:28831): avc: denied { write } for pid=13042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.415864][ T40] audit: type=1400 audit(1780211970.723:28832): avc: denied { write } for pid=13045 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.461374][ T29] usb 46-1: device descriptor read/8, error -110 [ 203.539508][ T40] audit: type=1400 audit(1780211970.843:28833): avc: denied { write } for pid=13047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.594307][ T40] audit: type=1400 audit(1780211970.903:28834): avc: denied { write } for pid=13054 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.707075][ T40] audit: type=1400 audit(1780211971.013:28835): avc: denied { write } for pid=13056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.865530][ T29] usb usb46-port1: attempt power cycle [ 204.078048][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.090485][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.093608][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.106518][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.111380][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.377104][ T6000] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 204.419581][T11422] bond3 (unregistering): (slave vti0): Releasing backup interface [ 204.422949][T11422] vti0 (unregistering): left promiscuous mode [ 204.440448][ T29] usb usb46-port1: unable to enumerate USB device [ 204.482166][T11422] bond0 (unregistering): (slave gretap1): Releasing active interface [ 204.865881][T11422] bond1 (unregistering): Released all slaves [ 204.879573][T11422] bond2 (unregistering): Released all slaves [ 204.892183][T11422] bond3 (unregistering): Released all slaves [ 204.903628][T11422] bond0 (unregistering): Released all slaves [ 204.911333][T11422] bond4 (unregistering): (slave veth3): Releasing active interface [ 204.914711][T11422] bond4 (unregistering): Released all slaves [ 204.933589][T13073] Failed to initialize the IGMP autojoin socket (err -2) [ 205.017067][T11422] tipc: Left network mode [ 205.577819][T11422] hsr_slave_0: left promiscuous mode [ 205.580342][T11422] hsr_slave_1: left promiscuous mode [ 205.637768][T13113] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 205.719785][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.726089][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.729557][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.733076][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.736826][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.969660][T13116] Failed to initialize the IGMP autojoin socket (err -2) [ 206.084078][T13073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.099672][T13073] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 206.108557][T13073] wireguard: wg0: Could not create IPv4 socket [ 206.121902][T13073] wireguard: wg1: Could not create IPv4 socket [ 206.126733][T13073] wireguard: wg2: Could not create IPv4 socket [ 206.170791][ T5741] Bluetooth: hci0: command tx timeout [ 207.718960][T13190] __nla_validate_parse: 3 callbacks suppressed [ 207.718973][T13190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1389'. [ 207.737350][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.747812][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.753928][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.758679][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.765775][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.858835][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 207.862411][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 207.942829][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 207.946575][T13222] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 207.959344][T13222] bond4: entered promiscuous mode [ 207.961641][T13222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.965880][T13193] Failed to initialize the IGMP autojoin socket (err -2) [ 207.973955][T13222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 207.985824][T13222] bond4: (slave bridge3): making interface the new active one [ 207.988198][T13222] bridge3: entered promiscuous mode [ 207.991050][T13222] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 208.043868][T13228] input: syz0 as /devices/virtual/input/input18 [ 208.807826][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 208.807844][ T40] audit: type=1400 audit(1780211976.114:28863): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.868850][ T40] audit: type=1400 audit(1780211976.174:28864): avc: denied { write } for pid=13244 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.992264][ T40] audit: type=1400 audit(1780211976.304:28865): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.036147][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1397'. [ 209.042525][ T40] audit: type=1400 audit(1780211976.354:28866): avc: denied { write } for pid=13251 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.263379][ T40] audit: type=1400 audit(1780211976.574:28867): avc: denied { write } for pid=13261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.310806][ T40] audit: type=1400 audit(1780211976.624:28868): avc: denied { write } for pid=13268 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.334279][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 209.336401][T13272] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.447406][ T40] audit: type=1400 audit(1780211976.754:28869): avc: denied { write } for pid=13281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.493769][ T40] audit: type=1400 audit(1780211976.804:28870): avc: denied { write } for pid=13284 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.618022][ T40] audit: type=1400 audit(1780211976.924:28871): avc: denied { write } for pid=13289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.663599][ T40] audit: type=1400 audit(1780211976.974:28872): avc: denied { write } for pid=13292 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.850407][ T5741] Bluetooth: hci0: command tx timeout [ 210.101888][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.115744][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.122495][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.125587][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.128458][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.247375][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 210.251646][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 210.282135][T13310] Failed to initialize the IGMP autojoin socket (err -2) [ 210.344305][T13333] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 210.346762][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1405'. [ 210.579749][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.590831][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.594567][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.597516][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.600125][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.744160][T13372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 210.755167][T13372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 210.758837][T13193] netdevsim netdevsim5 netdevsim0: renamed from eth18 [ 210.763287][T13372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 210.765733][T13372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 210.772313][T13193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.775549][T13193] netdevsim netdevsim5 netdevsim1: renamed from eth19 [ 210.795816][T13193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.798916][T13193] netdevsim netdevsim5 netdevsim2: renamed from eth20 [ 210.812013][T13193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.817649][T13193] netdevsim netdevsim5 netdevsim3: renamed from eth21 [ 210.822578][T13193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.828697][T13347] Failed to initialize the IGMP autojoin socket (err -2) [ 211.137542][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.147555][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.156568][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.163283][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.166163][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.453549][T13410] Failed to initialize the IGMP autojoin socket (err -2) [ 211.534479][T13193] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.550427][T13193] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 211.562183][T13193] wireguard: wg0: Could not create IPv4 socket [ 211.566611][T13193] wireguard: wg1: Could not create IPv4 socket [ 211.572285][T13193] wireguard: wg2: Could not create IPv4 socket [ 212.177970][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.190171][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.197328][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.203506][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.206554][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.259629][T13445] Failed to initialize the IGMP autojoin socket (err -2) [ 212.489062][T13448] Failed to initialize the IGMP autojoin socket (err -2) [ 212.513128][T13445] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 213.075911][T13509] __nla_validate_parse: 2 callbacks suppressed [ 213.075922][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 213.077342][T13510] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 213.082114][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 213.116410][T13509] geneve3: entered promiscuous mode [ 213.118709][T13509] geneve3: entered allmulticast mode [ 213.408513][T13534] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 213.418025][T13534] binder: 13533:13534 ioctl 4018620d 200000000040 returned -1 [ 213.456244][T13541] overlayfs: maximum fs stacking depth exceeded [ 213.511074][ T5816] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 213.673184][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 213.676123][ T5816] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 213.681875][ T5816] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 213.688785][ T5816] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 213.692384][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.695536][ T5816] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.698579][ T5816] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.704772][ T5816] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 213.707525][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.715132][ T5816] usb 6-1: config 0 descriptor?? [ 213.778933][T13563] input: syz1 as /devices/virtual/input/input19 [ 213.897303][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 213.897313][ T40] audit: type=1400 audit(1780211981.205:28903): avc: denied { listen } for pid=13567 comm="syz.3.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.024374][T13574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.036182][T13448] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 214.048537][T13448] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 214.055072][T13448] wireguard: wg0: Could not create IPv4 socket [ 214.058131][T13448] wireguard: wg1: Could not create IPv4 socket [ 214.061919][T13448] wireguard: wg2: Could not create IPv4 socket [ 214.087672][ T5816] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 214.226007][T13576] syz.3.1433 (13576): drop_caches: 2 [ 214.258085][T13581] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 214.285822][T13585] libceph: resolve '0' (ret=-3): failed [ 214.338894][ C3] usblp0: nonzero read bulk status received: -71 [ 214.339341][ T7057] usb 6-1: USB disconnect, device number 28 [ 214.343238][T13527] usblp0: error -71 reading from printer [ 214.352486][ T7057] usblp0: removed [ 214.541583][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 214.545188][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 214.548760][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 214.563079][ T40] audit: type=1400 audit(1780211981.875:28904): avc: denied { write } for pid=13608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.626429][ T40] audit: type=1400 audit(1780211981.935:28905): avc: denied { write } for pid=13617 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.765331][ T40] audit: type=1400 audit(1780211982.075:28906): avc: denied { write } for pid=13625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.818828][ T40] audit: type=1400 audit(1780211982.125:28907): avc: denied { write } for pid=13632 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.835876][T13635] 9pnet_virtio: no channels available for device mountinfo [ 214.843291][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 214.927386][T13646] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 214.946675][ T40] audit: type=1400 audit(1780211982.255:28908): avc: denied { write } for pid=13641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.998983][ T40] audit: type=1400 audit(1780211982.305:28909): avc: denied { write } for pid=13650 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.132796][ T40] audit: type=1400 audit(1780211982.445:28910): avc: denied { mount } for pid=13661 comm="syz.1.1452" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.143125][ T40] audit: type=1400 audit(1780211982.455:28911): avc: denied { write } for pid=13659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.207917][ T40] audit: type=1400 audit(1780211982.515:28912): avc: denied { write } for pid=13667 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.568052][T13672] infiniband syz1: set down [ 215.569704][T13672] infiniband syz1: added bond0 [ 215.572106][T13672] syz1: rxe_create_qp: returned err = -2 [ 215.573853][T13672] infiniband syz1: Couldn't create ib_mad QP1 [ 215.576051][T13672] infiniband syz1: Couldn't open port 1 [ 215.578075][T13672] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 215.582873][T13672] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 215.590983][T13672] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 215.615655][T13672] RDS/IB: syz1: added [ 215.617002][T13672] smc: adding ib device syz1 with port count 1 [ 215.619237][T13672] smc: ib device syz1 port 1 has no pnetid [ 215.895273][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 215.903860][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1457'. [ 215.927992][T13691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13691 comm=syz.1.1456 [ 215.933549][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 215.935291][T13694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13694 comm=syz.3.1457 [ 215.936254][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 215.958216][T13691] veth5: entered allmulticast mode [ 215.961847][T13694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 215.964664][T13691] bond5: (slave veth5): Enslaving as an active interface with an up link [ 216.432162][ T6000] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 216.569418][ T6000] usb 8-1: device descriptor read/64, error -71 [ 216.819785][ T6000] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 216.959481][ T6000] usb 8-1: device descriptor read/64, error -71 [ 217.069743][ T6000] usb usb8-port1: attempt power cycle [ 217.409384][ T6000] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 217.430231][ T6000] usb 8-1: device descriptor read/8, error -71 [ 217.669426][ T6000] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 217.689705][ T6000] usb 8-1: device descriptor read/8, error -71 [ 217.799979][ T6000] usb usb8-port1: unable to enumerate USB device [ 217.962711][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.971842][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.976927][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.983659][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.986778][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.149380][T13754] Failed to initialize the IGMP autojoin socket (err -2) [ 218.154996][T13780] Bluetooth: MGMT ver 1.23 [ 218.900295][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 218.900311][ T40] audit: type=1400 audit(1780211986.195:28940): avc: denied { write } for pid=13807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.914866][T13754] netdevsim netdevsim5 netdevsim0: renamed from eth18 [ 218.920890][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.923731][T13754] netdevsim netdevsim5 netdevsim1: renamed from eth19 [ 218.931205][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.939567][T13754] netdevsim netdevsim5 netdevsim2: renamed from eth20 [ 218.940949][T13815] __nla_validate_parse: 2 callbacks suppressed [ 218.940959][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 218.946466][T13815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 218.952642][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.956659][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.957213][T13754] netdevsim netdevsim5 netdevsim3: renamed from eth21 [ 218.962911][ T40] audit: type=1400 audit(1780211986.275:28941): avc: denied { write } for pid=13813 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.973685][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.977336][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.980738][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.985430][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.988616][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.004405][ T40] audit: type=1400 audit(1780211986.315:28942): avc: denied { mount } for pid=13820 comm="syz.1.1469" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 219.068281][ T40] audit: type=1400 audit(1780211986.365:28943): avc: denied { write } for pid=13822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.111241][ T40] audit: type=1400 audit(1780211986.415:28944): avc: denied { write } for pid=13832 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.186300][T13817] Failed to initialize the IGMP autojoin socket (err -2) [ 219.222854][ T40] audit: type=1400 audit(1780211986.525:28945): avc: denied { write } for pid=13841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.259324][ T7057] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 219.276653][ T40] audit: type=1400 audit(1780211986.575:28946): avc: denied { write } for pid=13852 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.398695][ T40] audit: type=1400 audit(1780211986.695:28947): avc: denied { write } for pid=13857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.409333][ T7057] usb 6-1: Using ep0 maxpacket: 8 [ 219.412934][ T7057] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.416392][ T7057] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.419645][ T7057] usb 6-1: config 1 has no interface number 0 [ 219.422068][ T7057] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 219.427064][ T7057] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 219.430076][ T7057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.432911][ T7057] usb 6-1: Product: syz [ 219.434580][ T7057] usb 6-1: Manufacturer: syz [ 219.436255][ T7057] usb 6-1: SerialNumber: syz [ 219.452626][ T40] audit: type=1400 audit(1780211986.755:28948): avc: denied { write } for pid=13864 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.549103][ T5527] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 219.618078][T13754] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 219.629836][T13754] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 219.635718][T13754] wireguard: wg0: Could not create IPv4 socket [ 219.638886][T13754] wireguard: wg1: Could not create IPv4 socket [ 219.642058][T13754] wireguard: wg2: Could not create IPv4 socket [ 219.719040][ T5527] usb 8-1: Using ep0 maxpacket: 8 [ 219.722907][ T5527] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 219.725682][ T5527] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.730000][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.733896][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.738451][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.742068][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.745539][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.750175][ T5527] usb 8-1: config 168 interface 0 has no altsetting 0 [ 219.753001][ T5527] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 219.755347][ T5527] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.758843][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.762384][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.765917][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.769445][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.772964][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.776892][ T5527] usb 8-1: config 168 interface 0 has no altsetting 0 [ 219.779804][ T5527] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 219.782195][ T5527] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.785471][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.788978][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.792587][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.795840][ T5527] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.799887][ T5527] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.804965][ T5527] usb 8-1: config 168 interface 0 has no altsetting 0 [ 219.810096][ T5527] usb 8-1: string descriptor 0 read error: -22 [ 219.812500][ T5527] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 219.815262][ T5527] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.823011][ T5527] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 220.025738][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1472'. [ 220.061733][ T5527] usb 6-1: USB disconnect, device number 29 [ 220.140826][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.145551][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.152203][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.158732][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.163294][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.355207][ T40] audit: type=1400 audit(1780211987.655:28949): avc: denied { write } for pid=13884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.378580][T13875] Failed to initialize the IGMP autojoin socket (err -2) [ 220.648986][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'. [ 220.652482][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'. [ 221.461842][T13875] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 221.471424][T13875] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 221.480856][T13875] wireguard: wg0: Could not create IPv4 socket [ 221.484167][T13875] wireguard: wg1: Could not create IPv4 socket [ 221.487140][T13875] wireguard: wg2: Could not create IPv4 socket [ 221.904716][T13967] lo speed is unknown, defaulting to 1000 [ 221.906678][T13967] lo speed is unknown, defaulting to 1000 [ 221.910110][T13967] lo speed is unknown, defaulting to 1000 [ 221.912484][T13967] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 221.917078][T13967] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 221.923129][T13967] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 221.927678][T13967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 221.932949][T13967] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 221.944099][T13967] lo speed is unknown, defaulting to 1000 [ 221.950861][T13967] lo speed is unknown, defaulting to 1000 [ 222.002714][T13973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=13973 comm=syz.1.1482 [ 222.074842][ T29] lo speed is unknown, defaulting to 1000 [ 222.079178][ T7057] lo speed is unknown, defaulting to 1000 [ 222.185859][T13989] openvswitch: netlink: VLAN attribute unexpected. [ 222.249293][ T5744] Bluetooth: hci0: command tx timeout [ 222.253032][T13998] random: crng reseeded on system resumption [ 222.259650][T13998] Restarting kernel threads ... [ 222.263458][T13998] Done restarting kernel threads. [ 222.271449][ T7057] usb 8-1: USB disconnect, device number 29 [ 222.484555][T14022] loop6: detected capacity change from 0 to 8 [ 222.535664][ T2130] blk_print_req_error: 11 callbacks suppressed [ 222.535680][ T2130] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.543479][ T2130] buffer_io_error: 10 callbacks suppressed [ 222.543493][ T2130] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.551319][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.556171][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.560140][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.563033][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.566066][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.569801][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.573191][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.576621][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.579795][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.583628][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.586633][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.589946][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.593298][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.597032][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.600193][T14022] ldm_validate_partition_table(): Disk read failed. [ 222.602609][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.605803][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.609079][T14022] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.612278][T14022] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.615328][T14022] Dev loop6: unable to read RDB block 0 [ 222.617790][T14022] loop6: unable to read partition table [ 222.620254][T14022] loop6: partition table beyond EOD, truncated [ 222.622770][T14022] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 222.685258][T14029] Process accounting resumed [ 222.716626][T14034] misc userio: No port type given on /dev/userio [ 222.797148][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1496'. [ 223.916335][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 223.916350][ T40] audit: type=1400 audit(1780211991.216:28985): avc: denied { write } for pid=14104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.975322][ T40] audit: type=1400 audit(1780211991.276:28986): avc: denied { write } for pid=14108 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.028122][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14 [ 224.059024][T14117] Failed to get privilege flags for destination (handle=0x2:0x5) [ 224.152165][ T40] audit: type=1400 audit(1780211991.456:28987): avc: denied { write } for pid=14124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.218067][ T40] audit: type=1400 audit(1780211991.516:28988): avc: denied { write } for pid=14134 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.253866][ T5450] 8021q: adding VLAN 0 to HW filter on device eth15 [ 224.351448][ T40] audit: type=1400 audit(1780211991.656:28989): avc: denied { name_bind } for pid=14143 comm="syz.3.1513" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 224.428539][ T40] audit: type=1400 audit(1780211991.726:28990): avc: denied { write } for pid=14147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.554153][ T40] audit: type=1400 audit(1780211991.856:28991): avc: denied { write } for pid=14152 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.588058][ T5450] 8021q: adding VLAN 0 to HW filter on device eth16 [ 224.720385][ T40] audit: type=1400 audit(1780211992.026:28992): avc: denied { write } for pid=14155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.794753][ T40] audit: type=1400 audit(1780211992.096:28993): avc: denied { write } for pid=14158 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.840999][ T5450] 8021q: adding VLAN 0 to HW filter on device eth17 [ 224.986157][ T40] audit: type=1400 audit(1780211992.286:28994): avc: denied { write } for pid=14161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.173303][T14203] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 226.184996][T14203] team0: Cannot enslave team device to itself [ 226.235616][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.244071][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.251582][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.262305][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.271904][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.361443][T14228] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1519'. [ 226.364475][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 226.484455][T14241] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.1520'. [ 226.516597][T14211] lo speed is unknown, defaulting to 1000 [ 226.763911][T14211] lo speed is unknown, defaulting to 1000 [ 226.929297][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.931597][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.933899][T14211] bridge_slave_0: entered allmulticast mode [ 226.936434][T14211] bridge_slave_0: entered promiscuous mode [ 226.942518][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.944792][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.947014][T14211] bridge_slave_1: entered allmulticast mode [ 226.949983][T14211] bridge_slave_1: entered promiscuous mode [ 226.963695][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.967786][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.982214][T14211] team0: Port device team_slave_0 added [ 226.985544][T14211] team0: Port device team_slave_1 added [ 226.998212][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.000381][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.007969][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.012113][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.014209][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.022008][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.043521][T14211] hsr_slave_0: entered promiscuous mode [ 227.045651][T14211] hsr_slave_1: entered promiscuous mode [ 227.047647][T14211] debugfs: 'hsr0' already exists in 'hsr' [ 227.049510][T14211] Cannot create hsr debugfs directory [ 227.383412][T14279] ip6gretap0: left allmulticast mode [ 227.637119][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 227.643426][T14320] program syz.3.1533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.706061][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 227.747096][T14327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.808928][T14211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.814130][T14211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.817315][T14211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.829187][T14211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.832750][T14211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.840499][T14211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.843796][T14211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.848964][T14211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.920406][T14211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.935008][T14211] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.945394][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.948404][T11422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.960472][T11421] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.963265][T11421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.997764][T14353] random: crng reseeded on system resumption [ 228.011260][T14211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.132957][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.284083][T14388] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1542'. [ 228.328128][ T5744] Bluetooth: hci2: command tx timeout [ 228.340085][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.492241][T14410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 228.497382][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 228.530003][T14211] veth0_vlan: entered promiscuous mode [ 228.541432][T14211] veth1_vlan: entered promiscuous mode [ 228.574080][T14211] veth0_macvtap: entered promiscuous mode [ 228.585369][T14211] veth1_macvtap: entered promiscuous mode [ 228.598770][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.631767][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.644053][T11422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.649303][T11422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.653701][T11422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.657148][T11422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.746445][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.754255][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.774388][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.777767][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.889290][T14437] lo speed is unknown, defaulting to 1000 [ 228.914339][T14440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14440 comm=syz.5.647 [ 228.933709][ T5744] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 229.178078][T14437] lo speed is unknown, defaulting to 1000 [ 229.211502][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 229.215220][T14447] netlink: 'syz.3.1550': attribute type 11 has an invalid length. [ 229.233270][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 229.237029][T14447] netlink: 'syz.3.1550': attribute type 11 has an invalid length. [ 229.244455][T12485] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.250679][T12485] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.259659][T12485] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.332744][T12485] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.750623][T14466] ./file0: Can't lookup blockdev [ 229.774995][T14468] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 229.863712][T14476] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 229.892450][T14480] sctp: [Deprecated]: syz.3.1562 (pid 14480) Use of int in maxseg socket option. [ 229.892450][T14480] Use struct sctp_assoc_value instead [ 229.957599][T14482] pimreg3: entered allmulticast mode [ 230.091593][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 230.091609][ T40] audit: type=1400 audit(1780211997.397:29043): avc: denied { accept } for pid=14483 comm="syz.5.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.092878][T14484] xt_socket: unknown flags 0x48 [ 230.410083][ T5744] Bluetooth: hci2: command tx timeout [ 230.482680][T14502] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 230.490719][T14502] Cannot find del_set index 2 as target [ 230.493655][T14502] Cannot find del_set index 2 as target [ 230.496470][T14502] Cannot find del_set index 2 as target [ 230.500304][T14502] Cannot find del_set index 2 as target [ 230.503226][T14502] Cannot find del_set index 2 as target [ 230.506068][T14502] Cannot find del_set index 2 as target [ 230.509714][T14502] Cannot find del_set index 2 as target [ 230.512469][T14502] Cannot find del_set index 2 as target [ 230.515065][T14502] Cannot find del_set index 2 as target [ 230.519153][T14502] Cannot find del_set index 2 as target [ 230.572715][ T40] audit: type=1400 audit(1780211997.877:29044): avc: denied { getopt } for pid=14505 comm="syz.1.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.727806][T14515] binder: 14514:14515 ioctl 4018620d 0 returned -22 [ 230.785279][ T40] audit: type=1400 audit(1780211998.087:29045): avc: denied { create } for pid=14514 comm="syz.1.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 230.942941][T14532] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 230.954018][T14532] romfs: unable to set blocksize [ 230.954018][T14532] [ 230.966940][T14531] qnx4: no qnx4 filesystem (no root dir). [ 231.015777][ T40] audit: type=1400 audit(1780211998.317:29046): avc: denied { ioctl } for pid=14536 comm="syz.3.1580" path="socket:[54920]" dev="sockfs" ino=54920 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.026654][ T40] audit: type=1400 audit(1780211998.327:29047): avc: denied { listen } for pid=14536 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.294991][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.298479][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.301585][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.305169][T14556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.309295][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.311547][T14556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.528532][ T7057] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 231.677784][ T7057] usb 8-1: Using ep0 maxpacket: 8 [ 231.683162][ T7057] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 231.687071][ T7057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.690846][ T7057] usb 8-1: Product: syz [ 231.692669][ T7057] usb 8-1: Manufacturer: syz [ 231.694657][ T7057] usb 8-1: SerialNumber: syz [ 231.704579][ T7057] usb 8-1: config 0 descriptor?? [ 231.710854][ T7057] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 231.714542][ T7057] dvb-usb: bulk message failed: -22 (2/0) [ 231.725411][ T7057] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.732131][ T7057] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 231.734887][ T7057] usb 8-1: media controller created [ 231.745588][ T7057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.752933][T14566] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.925198][ T7057] cxusb: set interface failed [ 231.929762][ T7057] dvb-usb: bulk message failed: -22 (1/0) [ 231.955680][ T7057] DVB: Unable to find symbol mt352_attach() [ 231.957799][ T7057] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 232.007549][ T7057] rc_core: IR keymap rc-dvico-portable not found [ 232.013686][ T7057] Registered IR keymap rc-empty [ 232.016141][ T7057] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 232.020517][ T7057] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input22 [ 232.025965][ T7057] dvb-usb: schedule remote query interval to 100 msecs. [ 232.034582][ T7057] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 232.038796][ T7057] usb 8-1: USB disconnect, device number 30 [ 232.079926][T14593] cgroup: Name too long [ 232.100783][ T7057] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 232.119869][ T40] audit: type=1400 audit(1780211999.427:29048): avc: denied { setopt } for pid=14595 comm="syz.1.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.164320][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 232.185395][T14602] __nla_validate_parse: 3 callbacks suppressed [ 232.185405][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1597'. [ 232.194414][T14602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14602 comm=syz.5.1597 [ 232.380441][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 232.415205][T14620] hpfs: hpfs_map_sector(): read error [ 232.424352][T14621] hpfs: hpfs_map_sector(): read error [ 232.497616][ T5744] Bluetooth: hci2: command tx timeout [ 232.598804][ T40] audit: type=1400 audit(1780211999.907:29049): avc: denied { getopt } for pid=14631 comm="syz.3.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.599744][T14632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14632 comm=syz.3.1606 [ 232.632739][T14630] batman_adv: batadv0: Adding interface: gretap1 [ 232.635147][T14630] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.644626][T14630] batman_adv: batadv0: Interface activated: gretap1 [ 232.650596][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 232.657075][T14630] bridge1: entered promiscuous mode [ 232.659708][T14630] bridge1: entered allmulticast mode [ 232.740124][T14643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1609'. [ 232.770991][T14641] hub 2-0:1.0: USB hub found [ 232.772826][T14641] hub 2-0:1.0: 2 ports detected [ 232.822121][T14653] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1612'. [ 232.832320][T14653] syzkaller1: entered promiscuous mode [ 232.833841][T14653] syzkaller1: entered allmulticast mode [ 232.836640][T14653] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1612'. [ 232.872438][T14655] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 232.876810][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 232.934524][T14659] hpfs: Bad magic ... probably not HPFS [ 232.999195][ T40] audit: type=1400 audit(1780212000.307:29050): avc: denied { execute } for pid=14662 comm="syz.3.1616" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.011630][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 233.021038][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 233.024904][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 233.030182][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 233.549895][ T40] audit: type=1400 audit(1780212000.857:29051): avc: denied { mounton } for pid=14681 comm="syz.1.1620" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 233.554433][T14683] tmpfs: Unknown parameter 'ma6pol' [ 233.720456][T14688] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 233.723188][T14688] bond0: left allmulticast mode [ 233.728954][T14688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.732261][T14688] bond0: entered allmulticast mode [ 233.737746][T14688] team0: Port device bond0 added [ 233.856204][T14695] [U] [ 233.857498][T14695] [U] [ 233.858632][T14695] [U] [ 233.859859][T14695] [U] [ 233.865594][T14695] [U] [ 233.866828][T14695] [U] [ 233.868024][T14695] [U] [ 233.869227][T14695] [U] [ 233.871694][T14695] [U] [ 233.872928][T14695] [U] [ 233.874022][T14695] [U] [ 233.875259][T14695] [U] [ 233.876660][T14695] [U] [ 233.877890][T14695] [U] [ 233.879125][T14695] [U] [ 233.880341][T14695] [U] [ 234.033699][T14708] netlink: 'syz.1.1627': attribute type 5 has an invalid length. [ 234.086612][ T40] audit: type=1400 audit(1780212001.387:29052): avc: denied { create } for pid=14707 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.317271][ T7057] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 234.467288][ T7057] usb 8-1: Using ep0 maxpacket: 8 [ 234.471531][ T7057] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 234.475270][ T7057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.484389][ T7057] pvrusb2: Hardware description: Terratec Grabster AV400 [ 234.487842][ T7057] pvrusb2: ********** [ 234.489519][ T7057] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 234.493607][ T7057] pvrusb2: Important functionality might not be entirely working. [ 234.496800][ T7057] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 234.501428][ T7057] pvrusb2: ********** [ 234.567309][ T5744] Bluetooth: hci2: command tx timeout [ 234.684355][T14710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.691914][T14694] [U] [ 234.693653][T14710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.808131][ T2513] pvrusb2: Invalid write control endpoint [ 234.878092][T14732] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 234.897498][ T2513] pvrusb2: Invalid write control endpoint [ 234.900256][ T2513] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 234.904333][ T2513] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 234.908345][ T2513] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 234.912427][ T2513] pvrusb2: Device being rendered inoperable [ 234.927396][ T2513] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 234.930739][ T2513] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 234.950407][ T2513] pvrusb2: Attached sub-driver cx25840 [ 234.953885][ T2513] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 234.958288][ T2513] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.010936][T14727] pvrusb2: Attempted to execute control transfer when device not ok [ 235.763371][T14739] sctp: [Deprecated]: syz.1.1635 (pid 14739) Use of int in maxseg socket option. [ 235.763371][T14739] Use struct sctp_assoc_value instead [ 235.974175][T14746] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 235.976657][T14746] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 236.187827][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 236.187845][ T40] audit: type=1400 audit(1780212003.497:29057): avc: denied { write } for pid=14756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.237080][ T40] audit: type=1400 audit(1780212003.537:29058): avc: denied { write } for pid=14760 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.852006][T14768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.856116][T14771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.856392][T14769] fuse: Unknown parameter 'bd.A^zBa0x0000000000000004' [ 236.885090][T14773] overlayfs: failed to resolve 'euid=00000000000000000000': -2 [ 236.932664][T14776] program syz.1.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.106083][ T1047] usb 8-1: USB disconnect, device number 31 [ 237.136110][ T40] audit: type=1400 audit(1780212004.437:29059): avc: denied { write } for pid=14780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.185059][ T40] audit: type=1400 audit(1780212004.487:29060): avc: denied { write } for pid=14783 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.298185][ T40] audit: type=1400 audit(1780212004.597:29061): avc: denied { write } for pid=14786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.356731][ T40] audit: type=1400 audit(1780212004.657:29062): avc: denied { write } for pid=14789 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.450322][T14796] __nla_validate_parse: 36 callbacks suppressed [ 237.450336][T14796] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1646'. [ 237.479502][ T40] audit: type=1400 audit(1780212004.787:29063): avc: denied { write } for pid=14792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.522516][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 237.524106][ T40] audit: type=1400 audit(1780212004.827:29064): avc: denied { write } for pid=14804 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.644117][T14796] bond1: Removing last ns target with arp_interval on [ 237.662355][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 237.665761][T14812] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 237.727575][ T40] audit: type=1400 audit(1780212005.038:29065): avc: denied { write } for pid=14818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.781611][ T40] audit: type=1400 audit(1780212005.088:29066): avc: denied { write } for pid=14826 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.794980][T14828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'. [ 237.851532][T14834] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 237.855041][T14834] veth0: left allmulticast mode [ 237.866267][T14834] veth0: entered allmulticast mode [ 237.872159][T14834] team0: Port device veth0 added [ 237.969958][T14842] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 237.972710][T14849] overlay: Bad value for 'workdir' [ 238.214060][T14873] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 238.296375][T14885] SELinux: ebitmap: high bit 1536 is not equal to the expected value 768 [ 238.304247][T14885] SELinux: failed to load policy [ 238.377201][T14891] kAFS: unparsable volume name [ 238.463512][T14896] tmpfs: Unknown parameter 'inode3Jkl' [ 238.702740][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 239.300643][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 239.313905][T14937] veth0_macvtap: left promiscuous mode [ 239.408792][T14938] loop9: detected capacity change from 0 to 524287871 [ 239.411767][ T6000] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 239.570104][ T6000] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.573617][ T6000] usb 6-1: config 0 has no interface number 0 [ 239.576165][ T6000] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.582736][ T6000] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 239.587166][ T6000] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 239.591955][ T6000] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 239.600642][ T6000] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.606883][ T6000] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.612310][ T6000] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.615985][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.624495][ T6000] usb 6-1: config 0 descriptor?? [ 239.627504][T14929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.636061][ T6000] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 239.836493][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.840617][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.843533][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.846272][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.852910][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.855775][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.859211][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.861956][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.865038][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.873193][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.883096][T14929] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 239.890580][T14929] Cannot find del_set index 1 as target [ 239.903966][T14968] input: syz0 as /devices/virtual/input/input24 [ 239.910009][T10377] usb 6-1: USB disconnect, device number 30 [ 239.937149][T10377] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 239.984513][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 240.736567][ T6000] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 240.888480][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.892638][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.896517][ T6000] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.901455][ T6000] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.904257][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.908992][ T6000] usb 6-1: config 0 descriptor?? [ 241.061354][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1693'. [ 241.324047][ T6000] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 241.631646][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.635225][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.164136][T14984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.422200][ T1047] usb 6-1: USB disconnect, device number 31 [ 243.446397][T10377] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 243.465157][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 243.465167][ T40] audit: type=1326 audit(1780212010.768:29090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.1700" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cc999ce59 code=0x0 [ 243.609115][T10377] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 243.613126][T10377] usb 10-1: config 1 has no interface number 0 [ 243.615637][T10377] usb 10-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.621151][T10377] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.631053][T10377] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 243.639461][T10377] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.646692][T10377] usb 10-1: Product: syz [ 243.648547][T10377] usb 10-1: Manufacturer: syz [ 243.650596][T10377] usb 10-1: SerialNumber: syz [ 243.660983][T15003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.674966][T10377] usb 10-1: Expected 3 endpoints, found: 2 [ 243.804739][ T40] audit: type=1400 audit(1780212011.108:29091): avc: denied { setopt } for pid=15036 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.818145][ T40] audit: type=1400 audit(1780212011.118:29092): avc: denied { getopt } for pid=15036 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.914693][T15044] loop3: detected capacity change from 0 to 14 [ 243.922300][T15044] Dev loop3: unable to read RDB block 14 [ 243.924654][T15044] loop3: unable to read partition table [ 243.927145][T15044] loop3: partition table beyond EOD, truncated [ 243.929672][T15044] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 243.968302][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 243.971132][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 243.973760][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 244.017998][ T40] audit: type=1400 audit(1780212011.318:29093): avc: denied { unlink } for pid=15036 comm="syz.3.1704" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 244.211932][T15003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1287969433 (82430043712 ns) > initial count (70297590272 ns). Using initial count to start timer. [ 244.229450][T15061] CIFS mount error: No usable UNC path provided in device string! [ 244.229450][T15061] [ 244.236552][T15061] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.288250][ T1047] usb 10-1: USB disconnect, device number 2 [ 244.364003][T15068] 9p: Could not find request transport: virpio [ 244.546088][ T6000] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 244.696186][ T6000] usb 8-1: Using ep0 maxpacket: 16 [ 244.699087][ T6000] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 244.702184][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.705322][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.708196][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 244.711904][ T6000] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 244.714801][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.718528][ T6000] usb 8-1: config 0 descriptor?? [ 244.834170][T15071] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1716'. [ 244.908839][T15076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1718'. [ 244.964073][T15077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1718'. [ 244.969528][ T40] audit: type=1400 audit(1780212012.278:29094): avc: denied { create } for pid=15075 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 244.980213][ T40] audit: type=1400 audit(1780212012.288:29095): avc: denied { bind } for pid=15075 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 244.988333][ T40] audit: type=1400 audit(1780212012.298:29096): avc: denied { getopt } for pid=15075 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 245.140812][ T6000] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0009/input/input25 [ 245.219973][ T6000] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0009/input/input26 [ 245.320490][ T6000] kye 0003:0458:5013.0009: input,hiddev0,hidraw2: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 245.346315][ T1047] usb 8-1: USB disconnect, device number 32 [ 245.369773][T15084] fido_id[15084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 245.505125][ T40] audit: type=1400 audit(1780212012.808:29097): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 245.788638][T15092] SELinux: unknown common [ 245.790050][T15092] SELinux: failed to load policy [ 245.875933][ T6000] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 246.025958][ T6000] usb 10-1: Using ep0 maxpacket: 32 [ 246.028160][ T6388] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 246.033950][ T6000] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.042259][ T6000] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.046061][ T6000] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.049058][ T6000] usb 10-1: Product: syz [ 246.050616][ T6000] usb 10-1: Manufacturer: syz [ 246.052310][ T6000] usb 10-1: SerialNumber: syz [ 246.056718][ T6000] usb 10-1: config 0 descriptor?? [ 246.058759][T15094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.061948][ T6000] hub 10-1:0.0: bad descriptor, ignoring hub [ 246.063789][ T6000] hub 10-1:0.0: probe with driver hub failed with error -5 [ 246.135900][T10377] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 246.177910][ T6388] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 246.180367][ T6388] usb 6-1: config 0 has no interface number 0 [ 246.182224][ T6388] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.188176][ T6388] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 246.190885][ T6388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.193234][ T6388] usb 6-1: Product: syz [ 246.194475][ T6388] usb 6-1: Manufacturer: syz [ 246.196003][ T6388] usb 6-1: SerialNumber: syz [ 246.199049][ T6388] usb 6-1: config 0 descriptor?? [ 246.205072][ T6388] yurex 6-1:0.50: USB YUREX device now attached to Yurex #1 [ 246.299602][T10377] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 246.302156][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 246.303565][T10377] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 246.309925][T10377] usb 8-1: Product: syz [ 246.311727][T10377] usb 8-1: Manufacturer: syz [ 246.313714][T10377] usb 8-1: SerialNumber: syz [ 246.316972][T10377] usb 8-1: config 0 descriptor?? [ 246.452189][ T1047] usb 6-1: USB disconnect, device number 32 [ 246.525986][ T9] usb 8-1: USB disconnect, device number 33 [ 247.365084][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 247.845764][T10377] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 247.995672][T10377] usb 8-1: Using ep0 maxpacket: 8 [ 247.999290][T10377] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.002784][T10377] usb 8-1: config 0 has no interface number 0 [ 248.005371][T10377] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.009814][T10377] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.013350][T10377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.022843][T10377] usb 8-1: config 0 descriptor?? [ 248.297529][T15113] syzkaller0: entered promiscuous mode [ 248.299842][T15113] syzkaller0: entered allmulticast mode [ 249.547391][ T6388] usb 10-1: USB disconnect, device number 3 [ 249.555535][ T1047] yurex 6-1:0.50: USB YUREX #1 now disconnected [ 249.557939][T10377] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 249.568175][ T9] usb 8-1: USB disconnect, device number 34 [ 250.092344][T15123] binder_alloc: 15122: pid 15122 spamming oneway? 1 buffers allocated for a total size of 4096 [ 250.105531][T15123] binder_alloc: 15122: pid 15122 spamming oneway? 2 buffers allocated for a total size of 5120 [ 250.250166][T15125] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 250.360192][T15137] kAFS: unable to lookup cell 'syz0' [ 250.410102][ T40] audit: type=1400 audit(1780212017.719:29098): avc: denied { mount } for pid=15138 comm="syz.5.1740" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 250.486801][ T40] audit: type=1400 audit(1780212017.799:29099): avc: denied { mounton } for pid=15147 comm="syz.5.1741" path="/" dev="autofs" ino=58131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 250.487655][T15148] hpfs: Bad magic ... probably not HPFS [ 250.515586][T15148] hpfs: Bad magic ... probably not HPFS [ 250.546767][T15154] futex_wake_op: syz.1.1743 tries to shift op by -1; fix this program [ 250.902618][T15167] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 250.954323][T15170] dvmrp0: entered allmulticast mode [ 250.958396][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 251.016114][T15173] syzkaller1: entered promiscuous mode [ 251.017964][T15173] syzkaller1: entered allmulticast mode [ 251.032935][T15173] 9p: Bad value for 'rfdno' [ 251.325789][T15181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1750'. [ 251.379539][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1750'. [ 251.416703][T15186] bond2: Unable to set down delay as MII monitoring is disabled [ 251.420877][T15186] bond2 (unregistering): Released all slaves [ 251.520843][ T40] audit: type=1400 audit(1780212018.829:29100): avc: denied { lock } for pid=15192 comm="syz.3.1754" path="socket:[58888]" dev="sockfs" ino=58888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.672083][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 251.687844][T15218] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.694819][T15218] macvlan2: entered promiscuous mode [ 251.697239][T15218] macvlan2: entered allmulticast mode [ 251.700039][T15218] bond6: entered promiscuous mode [ 251.704340][T15218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 251.717145][T15218] bond6: left promiscuous mode [ 251.742196][T15205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.895392][ T3264] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 252.045180][ T3264] usb 8-1: Using ep0 maxpacket: 8 [ 252.049512][ T3264] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.053794][ T3264] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.058649][ T3264] usb 8-1: config 1 has no interface number 0 [ 252.061483][ T3264] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 252.068013][ T3264] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 252.073004][ T3264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.078455][ T3264] usb 8-1: Product: syz [ 252.080771][ T3264] usb 8-1: Manufacturer: syz [ 252.082699][ T3264] usb 8-1: SerialNumber: syz [ 252.092307][T15244] gfs2: error -5 reading superblock [ 252.179737][T15250] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 252.260475][T15255] program syz.5.1771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.319341][ T40] audit: type=1400 audit(1780212019.629:29101): avc: denied { getopt } for pid=15261 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.334666][ T40] audit: type=1400 audit(1780212019.639:29102): avc: denied { ioctl } for pid=15261 comm="syz.5.1773" path="socket:[59075]" dev="sockfs" ino=59075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.334980][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'. [ 252.353917][T15262] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1773'. [ 252.362378][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1772'. [ 252.368578][ T3264] usb 8-1: USB disconnect, device number 35 [ 252.449073][ T8191] udevd[8191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.528373][ T40] audit: type=1400 audit(1780212019.839:29103): avc: denied { open } for pid=15270 comm="syz.1.1776" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.606066][ T40] audit: type=1400 audit(1780212019.919:29104): avc: denied { ioctl } for pid=15270 comm="syz.1.1776" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.724615][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1777'. [ 252.740443][T15275] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 252.751087][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1777'. [ 252.865128][ T3264] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 253.016666][ T3264] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.020747][ T3264] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.026087][ T3264] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.029777][ T3264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.276552][ T3264] usb 8-1: usb_control_msg returned -32 [ 253.279015][ T3264] usbtmc 8-1:16.0: can't read capabilities [ 253.522462][ T40] audit: type=1400 audit(1780212020.829:29105): avc: denied { write } for pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.584016][ T40] audit: type=1400 audit(1780212020.889:29106): avc: denied { write } for pid=15292 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.797202][ T40] audit: type=1400 audit(1780212021.109:29107): avc: denied { write } for pid=15299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.296920][T15322] binder: 15321:15322 ioctl 5416 200000000000 returned -22 [ 254.395026][T15335] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 254.594890][ T3264] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 254.680015][T15351] overlayfs: missing 'lowerdir' [ 254.682188][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 254.689553][T15351] xfrm1: entered promiscuous mode [ 254.691267][T15351] xfrm1: entered allmulticast mode [ 254.744946][ T3264] usb 10-1: Using ep0 maxpacket: 32 [ 254.753390][ T3264] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.761756][ T3264] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.765969][ T3264] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.769269][ T3264] usb 10-1: Product: syz [ 254.770931][ T3264] usb 10-1: Manufacturer: syz [ 254.772897][ T3264] usb 10-1: SerialNumber: syz [ 254.777186][ T3264] usb 10-1: config 0 descriptor?? [ 254.784428][T15333] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.789253][ T3264] hub 10-1:0.0: bad descriptor, ignoring hub [ 254.791826][ T3264] hub 10-1:0.0: probe with driver hub failed with error -5 [ 255.094994][ T3264] usb 10-1: USB disconnect, device number 4 [ 255.372964][ T9] usb 8-1: USB disconnect, device number 36 [ 255.434759][ T3264] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 255.584738][ T3264] usb 10-1: Using ep0 maxpacket: 16 [ 255.593391][ T3264] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 255.599595][ T3264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.602144][ T3264] usb 10-1: Product: п [ 255.603541][ T3264] usb 10-1: Manufacturer: ꀎꊧ顣ൖ쇐鼋胈㜗흶⣌鏴ȥ☕ [ 255.606077][ T3264] usb 10-1: SerialNumber: 槭﮻ⱴ츪㍇돝ᢕ䳍⻷隮뽚临閚ရ겆蓬䄷᭵ି性儻딮탰້錉笡翧ʧ䬽ᡆ⟬향袕⢘䮚泧䣄垬ꐡ悜ֳ颰晼⎅壸♘퍯臗忺핷뚎꧄룲튁奋㽿摨甼锛帄龆㾨ᨦ脨淂戮〉᧙鷀劗蒈峝駖≢槈튚巴 [ 255.853464][ T3264] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.856678][ T3264] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 255.863263][ T3264] usb 10-1: USB disconnect, device number 5 [ 256.665025][T15404] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 256.723973][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 256.764224][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 256.765915][T15410] QAT: Device 128 not found [ 256.825932][T15414] tmpfs: Bad value for 'mpol' [ 256.839094][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 256.839109][ T40] audit: type=1400 audit(1780212024.150:29117): avc: denied { map } for pid=15411 comm="syz.3.1811" path="socket:[59232]" dev="sockfs" ino=59232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.906362][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1814'. [ 257.646837][ T40] audit: type=1400 audit(1780212024.960:29118): avc: denied { write } for pid=15432 comm="syz.3.1818" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 257.669586][T15414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.672327][T15414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.675159][T15414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.678782][ T40] audit: type=1400 audit(1780212024.960:29119): avc: denied { open } for pid=15432 comm="syz.3.1818" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 257.707368][T15414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.709730][ T40] audit: type=1326 audit(1780212025.010:29120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 257.720010][ T40] audit: type=1326 audit(1780212025.010:29121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 257.728883][ T40] audit: type=1326 audit(1780212025.010:29122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 257.737498][ T40] audit: type=1326 audit(1780212025.040:29123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 257.757759][ T40] audit: type=1326 audit(1780212025.040:29124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ca15d68e code=0x7ffc0000 [ 257.799987][ T40] audit: type=1326 audit(1780212025.050:29125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 257.864837][ T40] audit: type=1326 audit(1780212025.050:29126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ca19ce59 code=0x7ffc0000 [ 258.079959][T15461] syzkaller0: entered promiscuous mode [ 258.081667][T15461] syzkaller0: entered allmulticast mode [ 258.254047][T15474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.256973][T15474] block device autoloading is deprecated and will be removed. [ 258.296736][T15476] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1831'. [ 258.337986][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 258.345826][T15478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1832'. [ 258.410102][T15480] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1833'. [ 258.598994][T15494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15494 comm=syz.5.1835 [ 258.963574][T15506] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 258.974398][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 259.017691][T15509] netlink: 'syz.5.1840': attribute type 1 has an invalid length. [ 259.073309][T15513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1840'. [ 259.110283][T15517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1843'. [ 259.123947][T15518] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1840'. [ 259.127317][T15515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.227681][T15523] ceph: Path missing in source [ 259.464314][ T1047] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 259.614312][ T1047] usb 8-1: Using ep0 maxpacket: 8 [ 259.618758][ T1047] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 259.622142][ T1047] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.625941][ T1047] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.629041][ T1047] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.631970][ T1047] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.636103][ T1047] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.639843][ T1047] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.684392][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.850763][ T1047] usb 8-1: usb_control_msg returned -32 [ 259.852527][ T1047] usbtmc 8-1:16.0: can't read capabilities [ 260.093640][T15543] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 260.096776][T15543] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1849'. [ 260.248728][ T1047] usb 8-1: USB disconnect, device number 37 [ 260.347193][T15568] xt_l2tp: invalid flags combination: 8 [ 260.430009][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.437351][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.928387][T15615] netem: change failed [ 261.030902][T15625] 9pnet_virtio: no channels available for device 127.0.0.1 [ 261.085996][T10377] ------------[ cut here ]------------ [ 261.088265][T10377] workqueue: cannot queue hci_conn_timeout on wq hci0 [ 261.090503][T10377] WARNING: kernel/workqueue.c:2297 at __queue_work+0xcee/0x1270, CPU#1: kworker/1:5/10377 [ 261.093491][T10377] Modules linked in: [ 261.094994][T10377] CPU: 1 UID: 0 PID: 10377 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.098502][T10377] Tainted: [L]=SOFTLOCKUP [ 261.099864][T10377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.102923][T10377] Workqueue: events l2cap_chan_timeout [ 261.104588][T10377] RIP: 0010:__queue_work+0xcf2/0x1270 [ 261.106248][T10377] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 21 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 261.112074][T10377] RSP: 0018:ffffc9000347fa28 EFLAGS: 00010046 [ 261.113944][T10377] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11004a5294b [ 261.116357][T10377] RDX: ffff888057416170 RSI: ffffffff8a8242e0 RDI: ffffffff90da1b80 [ 261.119035][T10377] RBP: ffff888025294a40 R08: 0000000000000005 R09: 0000000000000000 [ 261.121528][T10377] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888057416000 [ 261.123984][T10377] R13: ffff88802c168000 R14: ffff888025294a88 R15: ffff888025294a48 [ 261.126430][T10377] FS: 0000000000000000(0000) GS:ffff8880d6483000(0000) knlGS:0000000000000000 [ 261.129227][T10377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.131394][T10377] CR2: 00007f0cc9bea2f8 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 261.134219][T10377] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 261.136971][T10377] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 261.139871][T10377] Call Trace: [ 261.140987][T10377] [ 261.141884][T10377] ? __cancel_work+0x2b5/0x340 [ 261.143353][T10377] ? lockdep_hardirqs_on+0x78/0x100 [ 261.144949][T10377] ? __cancel_work+0x245/0x340 [ 261.146383][T10377] __queue_delayed_work+0x357/0x450 [ 261.148060][T10377] queue_delayed_work_on+0x180/0x1e0 [ 261.149596][T10377] l2cap_chan_del+0x649/0x930 [ 261.151087][T10377] l2cap_chan_close+0x3b0/0xa70 [ 261.152592][T10377] ? __pfx_l2cap_chan_close+0x10/0x10 [ 261.154284][T10377] ? lock_acquire+0x5e/0x370 [ 261.155740][T10377] l2cap_chan_timeout+0x196/0x360 [ 261.157334][T10377] process_one_work+0xa0e/0x1980 [ 261.158914][T10377] ? __pfx_process_one_work+0x10/0x10 [ 261.160752][T10377] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 261.162481][T10377] worker_thread+0x5ef/0xe50 [ 261.164011][T10377] ? __pfx_worker_thread+0x10/0x10 [ 261.165677][T10377] ? kthread+0x13a/0x450 [ 261.167078][T10377] ? __pfx_worker_thread+0x10/0x10 [ 261.168823][T10377] kthread+0x370/0x450 [ 261.170147][T10377] ? __pfx_kthread+0x10/0x10 [ 261.171615][T10377] ret_from_fork+0x72b/0xd50 [ 261.173065][T10377] ? __pfx_ret_from_fork+0x10/0x10 [ 261.174710][T10377] ? __switch_to+0x800/0x1100 [ 261.176199][T10377] ? __pfx_kthread+0x10/0x10 [ 261.177786][T10377] ret_from_fork_asm+0x1a/0x30 [ 261.179560][T10377] [ 261.180873][T10377] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.183726][T10377] CPU: 1 UID: 0 PID: 10377 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.187106][T10377] Tainted: [L]=SOFTLOCKUP [ 261.188498][T10377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.191731][T10377] Workqueue: events l2cap_chan_timeout [ 261.193482][T10377] Call Trace: [ 261.194572][T10377] [ 261.195559][T10377] dump_stack_lvl+0x100/0x190 [ 261.197092][T10377] vpanic+0x552/0x970 [ 261.198452][T10377] ? __pfx_vpanic+0x10/0x10 [ 261.199997][T10377] panic+0xd1/0xe0 [ 261.201227][T10377] ? __pfx_panic+0x10/0x10 [ 261.202669][T10377] ? check_panic_on_warn+0x1f/0x90 [ 261.204310][T10377] check_panic_on_warn.cold+0x19/0x34 [ 261.206025][T10377] ? __queue_work+0xcee/0x1270 [ 261.207561][T10377] __warn.cold+0x191/0x328 [ 261.208955][T10377] __report_bug+0x296/0x3d0 [ 261.210346][T10377] ? __queue_work+0xcee/0x1270 [ 261.211796][T10377] ? __pfx___report_bug+0x10/0x10 [ 261.213325][T10377] ? __pfx_hci_conn_timeout+0x10/0x10 [ 261.214946][T10377] ? rcu_is_watching+0x12/0xc0 [ 261.216393][T10377] ? __pfx_debug_object_assert_init+0x10/0x10 [ 261.218300][T10377] report_bug_entry+0xe1/0x290 [ 261.219770][T10377] ? __queue_work+0xcf2/0x1270 [ 261.221241][T10377] handle_bug+0x1cd/0x2a0 [ 261.222561][T10377] exc_invalid_op+0x17/0x50 [ 261.223972][T10377] asm_exc_invalid_op+0x1a/0x20 [ 261.225467][T10377] RIP: 0010:__queue_work+0xcf2/0x1270 [ 261.227177][T10377] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 21 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 261.234517][T10377] RSP: 0018:ffffc9000347fa28 EFLAGS: 00010046 [ 261.236977][T10377] RAX: dffffc0000000000 RBX: ffff88801b8f1000 RCX: 1ffff11004a5294b [ 261.240216][T10377] RDX: ffff888057416170 RSI: ffffffff8a8242e0 RDI: ffffffff90da1b80 [ 261.243393][T10377] RBP: ffff888025294a40 R08: 0000000000000005 R09: 0000000000000000 [ 261.246737][T10377] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888057416000 [ 261.249911][T10377] R13: ffff88802c168000 R14: ffff888025294a88 R15: ffff888025294a48 [ 261.253143][T10377] ? __pfx_hci_conn_timeout+0x10/0x10 [ 261.255411][T10377] ? __queue_work+0xcc0/0x1270 [ 261.257441][T10377] ? __cancel_work+0x2b5/0x340 [ 261.259267][T10377] ? lockdep_hardirqs_on+0x78/0x100 [ 261.261322][T10377] ? __cancel_work+0x245/0x340 [ 261.263366][T10377] __queue_delayed_work+0x357/0x450 [ 261.265395][T10377] queue_delayed_work_on+0x180/0x1e0 [ 261.267406][T10377] l2cap_chan_del+0x649/0x930 [ 261.269243][T10377] l2cap_chan_close+0x3b0/0xa70 [ 261.271088][T10377] ? __pfx_l2cap_chan_close+0x10/0x10 [ 261.273038][T10377] ? lock_acquire+0x5e/0x370 [ 261.274955][T10377] l2cap_chan_timeout+0x196/0x360 [ 261.276763][T10377] process_one_work+0xa0e/0x1980 [ 261.278823][T10377] ? __pfx_process_one_work+0x10/0x10 [ 261.281108][T10377] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 261.283330][T10377] worker_thread+0x5ef/0xe50 [ 261.285213][T10377] ? __pfx_worker_thread+0x10/0x10 [ 261.287167][T10377] ? kthread+0x13a/0x450 [ 261.288846][T10377] ? __pfx_worker_thread+0x10/0x10 [ 261.290921][T10377] kthread+0x370/0x450 [ 261.292595][T10377] ? __pfx_kthread+0x10/0x10 [ 261.294386][T10377] ret_from_fork+0x72b/0xd50 [ 261.296200][T10377] ? __pfx_ret_from_fork+0x10/0x10 [ 261.298308][T10377] ? __switch_to+0x800/0x1100 [ 261.300316][T10377] ? __pfx_kthread+0x10/0x10 [ 261.302197][T10377] ret_from_fork_asm+0x1a/0x30 [ 261.304122][T10377] [ 261.306125][T10377] Kernel Offset: disabled [ 261.307926][T10377] Rebooting in 86400 seconds..