last executing test programs: 4m19.781815238s ago: executing program 2 (id=1031): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="0bd00e363d7c61a3e4e65500158a996f0e2c586fe51182401a54a5443c0dcbe7"}) (async) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="bc3009bb66682c9d4033b0cc644f5ff8e5b9d17f7ada03bc77aea073022c18232e1fb162caf50d", 0x62, 0xfffffffffffffffe) (async, rerun: 32) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (rerun: 32) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000880)={0x20, r6, 0x23, 0x0, 0x0}) (async, rerun: 32) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) (rerun: 32) 4m19.71177145s ago: executing program 2 (id=1033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x400000000000005, 0x200000000000000, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 4m19.711549061s ago: executing program 2 (id=1034): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="150004"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 4m19.571369653s ago: executing program 2 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mknodat$null(r1, &(0x7f00000001c0)='./file0\x00', 0x400, 0x103) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m19.511419134s ago: executing program 2 (id=1038): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02000000286b2c0000000000fbdbdf250a0000001800ca8014fb010080000480a0c5021f3bb002a563619ef26ae849f8749e276b3c26564debc067f1edff6409037be3aa2f943e9757527c56"], 0x2c}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xf, 0xc9, 0x5, 0x10001, 0x7, "30851da98902a27ddc054c69c8c3730e8dbece"}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x55) bind$alg(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0xc88c5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m19.258380225s ago: executing program 2 (id=1041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000f40)) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480)) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) 4m19.185074436s ago: executing program 32 (id=1041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000f40)) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480)) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) 3m25.061226749s ago: executing program 3 (id=1969): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x4b, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) 3m25.000491748s ago: executing program 3 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @bcast, @bpq0, 0x7, 'syz0\x00', @null, 0x3, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 3m24.951447565s ago: executing program 3 (id=1974): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m24.771477922s ago: executing program 3 (id=1976): syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) fcntl$setlease(r0, 0x400, 0x2) 3m21.631551568s ago: executing program 3 (id=2015): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f00000000c0)='./file0\x00') ftruncate(0xffffffffffffffff, 0x8008976) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r5}, './file0\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000140)={0x1, 0x0, [{0x39e, 0x0, 0x3}]}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x14, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0xb0}}]}, 0x48}}, 0x0) 3m21.480899908s ago: executing program 3 (id=2021): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000003c0)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xf}]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) socket(0x1, 0x80000, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) (async) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000003c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xf}]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) socket(0x1, 0x80000, 0x6) (async) 3m6.408096347s ago: executing program 33 (id=2021): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000003c0)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xf}]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) socket(0x1, 0x80000, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) (async) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000003c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xf}]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) socket(0x1, 0x80000, 0x6) (async) 2m5.027727819s ago: executing program 5 (id=3015): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffef2, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4040400}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) utime(0x0, &(0x7f0000000540)={0x4, 0x3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001efe3135e72f286fb47d72cbc0e9ba789e321af1960f5316a8a355e7509987d8dd0eb77d859c2fd120eb06bfc2d8cd9b15527990338bc7646797e96f64f0d06f87e2325a3e8019c19d7a3662e24b56d11d4c3a8939b72415980000000000000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="710507"], 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x40002, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000000700)=""/143, 0x8f}], 0x1, &(0x7f0000001d80), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x400, 0x40, &(0x7f0000000500)) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000000)=""/233) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000600)) 2m3.720822327s ago: executing program 5 (id=3020): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0xea3b}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xea1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x40}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4002}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc00650f33f0100a660f3a0cb9000000752066b9800000c00f3a3216c632c6004000a5d8d30f09eaa800f500", 0x31}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc00650f33f0100a660f3a0cb9000000752066b9800000c00f3a3216c632c6004000a5d8d30f09eaa800f500", 0x31}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r9, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x5, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x7, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0x800000, 0xfffffffc, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x3fffc, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) 2m2.690739315s ago: executing program 5 (id=3038): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x81) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x12, r4, 0x8000000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m2.451261671s ago: executing program 5 (id=3048): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x1000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000340)='./file7/file0\x00', r1, r2, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) rename(&(0x7f0000000100)='./file7\x00', &(0x7f0000000180)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x389f42, 0x10) close(r4) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0) r7 = syz_pidfd_open(r5, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x4, 0x8, 0x6b, 0x1}, {0x3, 0x57, 0x6, 0xe9b}]}, 0x10) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000200)={0x5a702, 0x1c, 0x21}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x1, @desc2}) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) 2m2.38990387s ago: executing program 5 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x5d, 0xc, "236713c3869ff220bcf93bc2b5b1f9677ca89c2a0eeaa5cbe1359227b52960f87ba82117bac13fd2a97627a5a107058ed0444af8b6ad492f5aa21d644bc1f31de1fe473b489806763cb8e10ff9076da7bbc98528b05a836c38"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37c8155f}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x5d, 0xc, "236713c3869ff220bcf93bc2b5b1f9677ca89c2a0eeaa5cbe1359227b52960f87ba82117bac13fd2a97627a5a107058ed0444af8b6ad492f5aa21d644bc1f31de1fe473b489806763cb8e10ff9076da7bbc98528b05a836c38"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37c8155f}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (async) 2m1.860834081s ago: executing program 5 (id=3055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@setneightbl={0x14, 0x43, 0x4, 0x70bd25, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[@window={0x3, 0x3, 0x4}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000780)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x60, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x73}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc080) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x422100, 0x24) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@migrate={0x58, 0x21, 0x100, 0x70bd29, 0x25dfdbfe, {{@in6=@private1, @in=@multicast1, 0x4e20, 0x6, 0x4e23, 0xd, 0xa, 0x20, 0xa0, 0x3a, r7, r8}, 0x6e6bbc, 0x2}, [@extra_flags={0x8, 0x18, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) 2m1.773990172s ago: executing program 34 (id=3055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@setneightbl={0x14, 0x43, 0x4, 0x70bd25, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[@window={0x3, 0x3, 0x4}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000780)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x60, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x73}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc080) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x422100, 0x24) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@migrate={0x58, 0x21, 0x100, 0x70bd29, 0x25dfdbfe, {{@in6=@private1, @in=@multicast1, 0x4e20, 0x6, 0x4e23, 0xd, 0xa, 0x20, 0xa0, 0x3a, r7, r8}, 0x6e6bbc, 0x2}, [@extra_flags={0x8, 0x18, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) 1m14.552248626s ago: executing program 1 (id=3759): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000019c0)={0x3, 0x3, 0x6, 0x3bb, 0x9, 0xea, 0xfffffffffffffff7, 0x5}, 0x0, &(0x7f0000001a40)={0x8, 0x8, 0xffffffffffffffff, 0x7, 0xee, 0x3ff, 0x2, 0x5}, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xa, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @jmp={0x5, 0x0, 0x4, 0x6, 0x2, 0x40, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x48}, 0x94) 1m13.666292077s ago: executing program 1 (id=3771): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1m13.665496861s ago: executing program 1 (id=3772): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfe6a, 0x1, {0xffffffffffffffff}, {0xee01}, 0x8000000000000000, 0x10}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x80000000, 0x10000, {r1}, {r3}, 0x1, 0xf626}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) close_range(r5, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x5}}, {@stats}]}) 1m13.570459303s ago: executing program 1 (id=3773): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x7b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974d", 0x21}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x64020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) clock_gettime(0x0, &(0x7f0000006540)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000006300)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1, &(0x7f0000000880)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/158, 0x9e}], 0x3, &(0x7f00000006c0)=""/244, 0xf4}, 0x88}, {{&(0x7f0000002880)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)=""/140, 0x8c}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f00000029c0)=""/34, 0x22}, {&(0x7f0000002a00)=""/116, 0x74}, {&(0x7f0000002a80)=""/84, 0x54}, {&(0x7f0000002b00)=""/198, 0xc6}], 0x6, &(0x7f0000002c80)=""/190, 0xbe}, 0x81}, {{&(0x7f0000002d40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/138, 0x8a}, 0x7}, {{&(0x7f0000002ec0)=@isdn, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f40)=""/254, 0xfe}, {&(0x7f0000003040)=""/201, 0xc9}, {&(0x7f0000003140)=""/185, 0xb9}], 0x3}, 0x2}, {{&(0x7f0000003240)=@caif=@rfm, 0x80, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/165, 0xa5}], 0x1, &(0x7f00000033c0)=""/128, 0x80}, 0x38}, {{&(0x7f0000003440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000034c0)=""/35, 0x23}, {&(0x7f0000003500)=""/157, 0x9d}, {&(0x7f00000035c0)=""/91, 0x5b}, {&(0x7f0000003640)=""/37, 0x25}, {&(0x7f0000003680)=""/88, 0x58}, {&(0x7f0000003700)=""/183, 0xb7}], 0x6}, 0x100}, {{&(0x7f0000003840)=@tipc=@id, 0x80, &(0x7f0000003e80)=[{&(0x7f00000038c0)=""/182, 0xb6}, {&(0x7f0000003980)=""/241, 0xf1}, {&(0x7f0000003a80)=""/118, 0x76}, {&(0x7f0000003b00)=""/203, 0xcb}, {&(0x7f0000003c00)=""/92, 0x5c}, {&(0x7f0000003c80)=""/232, 0xe8}, {&(0x7f0000003d80)=""/205, 0xcd}], 0x7, &(0x7f0000003f00)=""/20, 0x14}, 0x6}, {{&(0x7f0000003f40)=@qipcrtr, 0x80, &(0x7f0000006240)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/78, 0x4e}, {&(0x7f0000005040)=""/232, 0xe8}, {&(0x7f0000005140)=""/73, 0x49}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/75, 0x4b}], 0x6, &(0x7f00000062c0)=""/17, 0x11}, 0x1}], 0x9, 0x40000042, &(0x7f0000006580)={r7, r8+60000000}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r5, 0x533, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m13.380904022s ago: executing program 1 (id=3776): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '3', ':', 'a', ':', 'a', '.', '5'}}, 0x13) write$vga_arbiter(r0, &(0x7f0000000480)=@other={'unlock', ' ', 'none'}, 0xc) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x9, &(0x7f0000000f40)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) io_cancel(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) 1m13.060356348s ago: executing program 1 (id=3783): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(r1) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x36c, 0x1b, 0x21, 0x70bd2b, 0x0, {0x16}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @nested={0xfffffffffffffe07, 0xd5, 0x0, 0x1, [@generic="a2a65e781d14f922ffca9aa76b6e3405d031d3f925115f400e220b4d5bdfc6701b11142c95a3a4ddb545a0837bde642dfa7f57077e0b83bba119208c5292a4919ac7f5e05711ecb1bb5afd0d6e", @nested={0x2f0, 0x123, 0x0, 0x1, [@nested={0x2eb, 0x10d, 0x0, 0x1, [@typed={0x14, 0x97, 0x0, 0x0, @ipv6=@empty}, @generic="4a172c058fabb891edef63593062b60750e7b16c88bca635a3aa3aed7a82d7200dfb1bcad7d4166f361a182e1a08c254032909748a01c1aeed30971a0157a8671b692d7a80fcf418b7b4a19b0703e0ee8b867f50bc0e482d06a7e1d21c789554e6ee31bc33c56b2fbc1fcec18e3c2c174446ade0aa495fdc0b98bb2db12293ff0c0a31a634a58eac1598d880babe28129ceab0b4a05f3094c10bf8a174f6cbb1187d373d45a6af1fb32ee599abeffff901eca82c4a2d54257cae9f4f179be0eee8ce3fd973ee456be7a66a835f0c53514f66365cc5a7b4fae7fe4aa415227acbdb740d0de8", @typed={0x8, 0xd5, 0x0, 0x0, @pid=r2}, @generic="f80d36648fdbea4845f452097ce13b2d9552f14d80942df9f2514071e0667bf6be5c69561d702d58a65cdcc92280e1132f5cf148a0b1fa261815233519f17b8c0f5f9098ae0db8646ad6d76613b01e919545199cf3fe52694d4d74537f0f7d30f7a178770313be55330596b156ee7664da02327ff24310a37244b8aaae8ac0d68301564e6d40992c1e568930c26c7ca4031bed2d50c6db1ab0652a083f4bdcec22255ae83a3328266c4d0266f8c5bbd6628128cab8b258c56a9b14cd21491149c534d2114173640b1615ae31b3f29d19719577dc4dd335b84e70034fd5db", @generic="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", @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x4, 0x66}]}]}, @typed={0x8, 0x38, 0x0, 0x0, @pid=r1}]}]}, 0x36c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x40, 0x4) 1m13.058491968s ago: executing program 35 (id=3783): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(r1) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x36c, 0x1b, 0x21, 0x70bd2b, 0x0, {0x16}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @nested={0xfffffffffffffe07, 0xd5, 0x0, 0x1, [@generic="a2a65e781d14f922ffca9aa76b6e3405d031d3f925115f400e220b4d5bdfc6701b11142c95a3a4ddb545a0837bde642dfa7f57077e0b83bba119208c5292a4919ac7f5e05711ecb1bb5afd0d6e", @nested={0x2f0, 0x123, 0x0, 0x1, [@nested={0x2eb, 0x10d, 0x0, 0x1, [@typed={0x14, 0x97, 0x0, 0x0, @ipv6=@empty}, @generic="4a172c058fabb891edef63593062b60750e7b16c88bca635a3aa3aed7a82d7200dfb1bcad7d4166f361a182e1a08c254032909748a01c1aeed30971a0157a8671b692d7a80fcf418b7b4a19b0703e0ee8b867f50bc0e482d06a7e1d21c789554e6ee31bc33c56b2fbc1fcec18e3c2c174446ade0aa495fdc0b98bb2db12293ff0c0a31a634a58eac1598d880babe28129ceab0b4a05f3094c10bf8a174f6cbb1187d373d45a6af1fb32ee599abeffff901eca82c4a2d54257cae9f4f179be0eee8ce3fd973ee456be7a66a835f0c53514f66365cc5a7b4fae7fe4aa415227acbdb740d0de8", @typed={0x8, 0xd5, 0x0, 0x0, @pid=r2}, @generic="f80d36648fdbea4845f452097ce13b2d9552f14d80942df9f2514071e0667bf6be5c69561d702d58a65cdcc92280e1132f5cf148a0b1fa261815233519f17b8c0f5f9098ae0db8646ad6d76613b01e919545199cf3fe52694d4d74537f0f7d30f7a178770313be55330596b156ee7664da02327ff24310a37244b8aaae8ac0d68301564e6d40992c1e568930c26c7ca4031bed2d50c6db1ab0652a083f4bdcec22255ae83a3328266c4d0266f8c5bbd6628128cab8b258c56a9b14cd21491149c534d2114173640b1615ae31b3f29d19719577dc4dd335b84e70034fd5db", @generic="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", @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x4, 0x66}]}]}, @typed={0x8, 0x38, 0x0, 0x0, @pid=r1}]}]}, 0x36c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x40, 0x4) 1m9.989923533s ago: executing program 6 (id=3850): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'veth0_to_batadv\x00', {0x1}, 0x9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109}) 1m9.934460256s ago: executing program 6 (id=3852): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000003980)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback, 0xfb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="54abbbf221cb24fb2b892a6a99", 0xd}, {&(0x7f00000001c0)="0bf1ca3a", 0x4}], 0x2}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x8, @local, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x20000040) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1m9.933662364s ago: executing program 6 (id=3853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) (async) 1m9.870359648s ago: executing program 6 (id=3854): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) (async) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') 1m9.810871782s ago: executing program 6 (id=3855): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000002000)=""/4096) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffefffdc, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000011c0)=0x14) socket(0x2a, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="147000fddbdf0b04307900"/20], 0x14}, 0x1, 0xf00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, 0x0, 0x0, 0x800c0, &(0x7f00000010c0)=ANY=[]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x2c) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000340)=ANY=[], 0x28) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc840) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001440)=ANY=[@ANYBLOB="34ded288861d4672dc063fc907000000", @ANYRES16, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)=ANY=[@ANYBLOB="4c0300002e00010025bd70000000000004001980380311803403cf"], 0x34c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r10, &(0x7f0000001240)=[{&(0x7f0000003000)=""/4096, 0x1000}], 0x1, 0x10003, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, r9, 0x0, 0x0, 0x0, 0x800}) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000001c0)='/:\\\xa6\x0e\xce\x00', 0x0, r9) 1m9.529807423s ago: executing program 6 (id=3859): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x5, 0x3, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0xbb, &(0x7f0000000580)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) 1m9.503432968s ago: executing program 36 (id=3859): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x5, 0x3, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0xbb, &(0x7f0000000580)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) 4.919670416s ago: executing program 8 (id=4690): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) 4.020862592s ago: executing program 8 (id=4728): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000240)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/10}, 0x20) sendto$inet6(r0, &(0x7f0000000440)="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", 0x1000, 0x4040, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') 3.130426354s ago: executing program 8 (id=4737): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT], 0x50) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80, 0x0, 0x0, 0x400, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x3b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x14}}, 0x20008000) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) setresgid(0x0, 0xffffffffffffffff, 0xee00) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.128939524s ago: executing program 8 (id=4738): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xfffc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xdc}]}}]}, 0x3c}}, 0x4000010) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) (async) syz_usb_connect(0x5, 0xb2a, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xbd, 0x9c, 0xca, 0xff, 0x4cb, 0x117, 0x42b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb18, 0x4, 0x1, 0x9, 0x10, 0x4, "", [{{0x9, 0x4, 0xdc, 0x7f, 0x2, 0xa4, 0xe6, 0x0, 0x8, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x3, 0xcc}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x81, 0x0, 0x1}}]}}, {{0x9, 0x4, 0xbd, 0x4, 0x9, 0x62, 0x33, 0xa5, 0x87, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x7, 0x7, 0x2, [@generic={0x25, 0xd, "1a3ed33f101531e1775d3d7f1b20c40cf143e91cecacd1075640ae47e36b15d1ddf097"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x7, 0x1b, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xd, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x600, 0xb, 0x4, 0x9}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x7, 0xb, 0x3, [@generic={0x39, 0xb, "03151c837fa51f3d686b8b11f84104ec6638e9efe92541a85471cacbcf3e2833af14d6d65b13fcf399d0233068639911a334ff58469e8a"}, @generic={0xc8, 0x3, "5a6d633b68bb3c17923a166d45cc1813506478d7429a4761d8da4b31540763ec65cae82d0c353f2b4bad6e60687a2db7988fc215a49af0e12c2a9b85e8909e121e1b15f3780b35cb5e311638ac3df64b85c6b0954211a207d4b852ec07e8c2ef8347afec44df6789860a65904c359c68c649ad911c2d3df9740e70b11a8cd57937c30d8774df5f8b7917d21865c3186a60a6551b9294d11fc9e8133ab51cce7996c990813e4880f96e462327df04547b1c989db3cadeec9cd8ba7f6c3f2f18b783f27113ef5a"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x40, 0xc0, 0xb}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x22, 0xf, 0x4, [@generic={0xd8, 0x4, "ee3fa2e88bdde1c900a177d682628f1252045b7a0e6f7e59aaaa273af2668fe32892b00ea2edc1ff28150de9d1048e3f3c8c4bf1c3d5d72c45593cbfb0782dba560d2365c03e63cca41ec50e6064c457a42f28cb0d37b65103e0a439bc77b3306a9844600b32feb7397de74fda3c065ac2c3fea59a37f32a9075267e196354b0ba587b36a03ac1fa3e2d37a0080206a77563a2d360027284e45ded8fce42c0dd012dce68297e9052225fa7594862349787c0e8d4ad64db5d0adba72834a2dd01d9cba741a676fed95dbfd771d945e88920a9ac8b260e"}, @generic={0xa9, 0xd, "76a9f8c9b802bf60b4a5d44ef6d27411c62280da2a17a3bbbc7d050be00c25af4818fcd4dd4bc0356e0d5ccbefe97086243f596de5c225f4496cdbf8e37bc2e99b79013b2a9d2262e1482579e9506ea17b66ba83a5ac013bbde42f9178a7fb75388d97822ad64a519e5770bc5dbc1a1edb6822114a3af8fa55d1127036d85fc4dc9c993e768aa3e783e7a60a43909f8760e13d9fd870abb8a15e1fb3aa9fe769fe1cfe5db3e0d1"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0xb2, 0x6, 0x74}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x10, 0xa, 0x8}}]}}, {{0x9, 0x4, 0x1f, 0x7, 0x4, 0xff, 0x1, 0x36, 0x5, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x3ff, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x22, 0xf001, 0xf, "c7c7f05d3b28bc3424"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1f, 0x3, "bb44"}]}], [{{0x9, 0x5, 0x6, 0x3, 0x20, 0x80, 0x6e, 0x5}}, {{0x9, 0x5, 0x0, 0xc, 0x610, 0x9, 0x80, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x6}, @generic={0xc1, 0x8, "5d6cb7ca742d9c7ca376a93ba84a4f77b6a8f118d34fe1c4b1caeecf554c2a4e85f89ef4186c8a83e7eb2656cb125212e25e6a573f3007dd54c6465d456640a08bedeb1c9e86a7d64c26ecd389b25999193de666029e16c985b3a76abcf1efca6d7cb7864476c1e144d8261067be88dacec79306240308c4544ad04525b6a9732f0158a53b2c32ecd423a5363ad634752ccbbb4503645d583b6d19fa26b0986a830ad2d88efc392235baa883488eb3a83cf0ab0de2dc4125a3d0168f2361dd"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x6, 0x7}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x10, 0x0, 0x4, [@generic={0xe9, 0x7, "ca93dbe8db6b66a77c1eb4d87295240b199aafb51b50e75becd498f1dc0341bed32099c854ff61d4300bfbe28d3211e19f872248dac9b1654f44e948c487c095429cf6fa6645106283c0a764b5a783fc1dd6eb582c4c0ad049258f3f4b42eb303d932a5eecb7f98816d7b3fefefbd12f4a39839cbd765e0268f8e8b0f67410976c682ff323261fd445e01bda47f8f226ba0e98a71322f7fd373c537fe5e959ea38b97d31015733ddb485bd50ebd18fb350e35328cc2111f9663e0aa1d1bec438c25a08b75eb7c287d9eecc18e7c8fdd06d134d31e105532ae4605244c60d77c66ece8158372c2e"}]}}]}}, {{0x9, 0x4, 0xb3, 0x2, 0xb, 0xce, 0xb1, 0x12, 0x3, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x1, "66cc64f869"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x0, 0x6, "002b2061da6106c239"}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x46}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x6, 0x2, 0x9}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x3795, 0x4, "49d350048a"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x40}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x5, 0x1d, "9230c17e"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x94861043b3c9efbd, 0x4, 0x2, 0x2}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x7, 0x8, "4217e82dee"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x0, 0x7f, 0x9, 0x7, [@generic={0xc4, 0x23, "fb2fbb6dce4127fc7cde4cd7ed2962f8db168800662f70e8308cc8537391002633d3b80d535c9f9b7fa424e5782f5e55e6156e723513345c1a8261399cbfc56ed3e6ec00bd598f76c8b5258e685efb3f0242ac7e9240b6ab5740f85ef3482ab07283a23c54fd5d92296bf449340c594e4fa8f852ac0d05b6a5092a45be56197d9dd2b1d8bb5464be16b0feb0efa47ce19945ec18dd0f7635a45b97e382bfdf79b1d36fdeea108386ea8aa4a05c2f52b2c5d29d000aa4334dd4bc57e9b09f6e30bf72"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x53df}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xff, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0xf8, 0x3, [@generic={0xe3, 0x21, "0c4bc9cd3aa3859a48321a5693d80fd955fb88d0f98a98c086df31083927e3f1b4afe4628d1cea5447b1b78d124401c8b040cb0dbc0cef16e4af2152b2b9f405841bc43f57149b48244a65ba1fcc99c9d7a02de48752ac33bc512f163fe89ba5d7e8785068dd92ad8eeefe5d90fa6f0879e006e1c56b04a6c418522ae2b91a52cc2b9d956d8bd58c654479eec98127c5e68f4f5497844c324a55f8b545ab4e87a4c7595528a5164bf463aac3bc92d56ecf6d38355ba88d6964e84180c3fc59594b322469d7bce6df7279a2f3c1d509e2bc6177d0c698fb6211367eefc85eb91643"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0xc, 0xf5, [@generic={0x6, 0x9, "6f4a51eb"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3f7, 0x4, 0x0, 0xfe, [@generic={0x7b, 0x4, "ca0a43d7f27667db7bb88546165fb0ab510d2087352d8098a38b2e01c4aa1d267b422033c839c0d1baaddac63d34e28403cf4c3bf74572681d754e56c20be4d513cb032f833cd6fb8842ff07c36c33ec3916e37674e142f352bafbf43487a546bb9b4813687c92e6904df577955dfac87c5881004be436f1c5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x9, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}, @generic={0x78, 0x31, "67a91abb428ae7515fa748c99ac9c6183ecea9620cb5216ab6873ca45cd31be712bc82ef998399a53f536ec1f4df2b8cbf7dd37b28ed7e919040534a121607876a27f21237c9befacff68f454bf021224b518f0025271f9f3d13f365f1110485114656715d4e3da2116427efa0740947bb179f6490d0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x10}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0xc, 0x90, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x469f}]}}, {{0x9, 0x5, 0xd, 0x0, 0xb2bf7f1f53fd8f73, 0x7, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}, @generic={0xc8, 0x7b72a145d8e93022, "65103b402dfdad2eed91f31fefbd55199ec6b678defd8bf50c119408778f9f25e7d8da045da299adbaf418490248a55d45f4cbe1406799230fab89e7cd1f668a0448b6b98758880cd321d98a4f6f7f0b925cbd41a5d23d3c79ac1bccd7586171aa4c907ca1a12ab18a11c06a02417c19d4d3da21334c5d301221b187fd336c5800bcf9292f28f3f17120d6338fb283583b154b217a37d3f3ffd9cdf833cba445dade728d7b2a2fbf41479f829d3ddb48759d1edf92bf7941167a28490d78681aef36a469a186"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x67, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}, @generic={0x89, 0x62, "dd247c701b2c8f389392ce49395fd9b798affef8122483b969619877bee07a0934ed3d6e699124d66818f582a7c95fee37fa5a476bc43cecb18af52fba9907b3c11a1bb27c00b15c4f773a21cc8f3007182ea051a69de8f2c91d19e217477d28f72c0fe1984cc803df93da500a2ee635bcf50feca56a3d4c298015f842c2516cb174a0a7432929"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x6, 0xf7, 0xf9, [@generic={0xfd, 0x24, "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"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xd, 0x0, 0x8, 0x40, 0xff}, 0x54, &(0x7f0000000dc0)={0x5, 0xf, 0x54, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x9, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0xa0, 0x1, 0x1, 0xf, 0x0, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7d, 0x44, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x1, 0x3ff, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6eb2665426394896f69823d7f44963f2"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0xe7, 0x7, 0xf, 0x48}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.47028887s ago: executing program 7 (id=4751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000000)={0x2, 0x1, 0x5, 0xfffffffffffffff8, 0xfffffff8, 0x8}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd04, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.46976428s ago: executing program 7 (id=4752): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x250}, {r0, 0xd484}, {r0, 0x1080}, {r0, 0x1004}, {r0, 0xe0}], 0x5, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/112, 0x70}], 0x4}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x5, &(0x7f0000001780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000017c0)='syzkaller\x00', 0x8, 0xca, &(0x7f0000001800)=""/202, 0x41100, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0xd, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001980)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1], &(0x7f00000019c0)=[{0x4, 0x5, 0xd, 0x7}, {0x3, 0x2, 0x2, 0xc}, {0x5, 0x2, 0x8, 0x2}, {0x5, 0x5, 0x2, 0x4}], 0x10, 0xa}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@bloom_filter={0x1e, 0x8237, 0x74724353, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xc}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b40)={0x0, 0xad, 0x18}, 0xc) r8 = fcntl$dupfd(r2, 0x0, r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x9, 0x8, 0x1, 0x8000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xc}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c00)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x16, 0x73a, 0x7, 0x5d, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001dc0)={r0, &(0x7f0000001cc0)='/selinux/user\x00', 0x20000, &(0x7f0000001d00)={@_ha_fsid={[0xb, 0x7]}, {0x10, 0x5, 0x4, 0x6}}, 0xa2da, &(0x7f0000001d40)={@_ha_fsid}, &(0x7f0000001d80)=0x11}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x6, 0xf, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f00000003c0)='GPL\x00', 0xa, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x3f, '\x00', r3, @xdp, r4, 0x8, &(0x7f0000001700)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0xe, 0x3, 0xcb}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f0000001e40)=[r6, r7, r8, 0xffffffffffffffff, r9, r10, r11, r12, r13], &(0x7f0000001e80)=[{0x5, 0x5, 0xe, 0x2}], 0x10, 0x5}, 0x94) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000001f80)=@assoc_value={0x0}, &(0x7f0000001fc0)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002000)={0x1b, 0x0, 0x0, 0x28ea, 0x0, r8, 0x65e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000020c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000002240)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)={0xcc, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000002280)=@sack_info={r15, 0x9, 0x230}, &(0x7f00000022c0)=0xc) r17 = syz_open_dev$sg(&(0x7f0000002300), 0xffffffff, 0x0) ioctl$SG_SET_COMMAND_Q(r17, 0x2271, &(0x7f0000002340)=0x1) ioctl$BLKRAGET(r12, 0x1263, &(0x7f0000002380)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000023c0)='./binderfs/binder1\x00', 0x0, 0x0) writev(r6, &(0x7f0000002500)=[{&(0x7f0000002400)="63f6dffb2fc2974bd6324e6362da0a5907b018cf4b3a04f010144d0da4ed31a5f4f5edc84a38b535247c30cf46d039afe79a611c18925d35128fcb2f98ceaf92d010b0a55cd2ba5cc760e5e1d527bf781d3f95475f3ae4cda10b03f0ca2f56cdaf8436dfc0cd3c7ddc01c0871c24149570ef63bd8aa4194c1b276fe706679c38d519709fc85a5d74103fcae138d125efb03e19a9b3e3241a5a25c6ef1fa9d7aa8b8040862fad750c73c01c7c433096e66deb2515f3fe178110d045adbf2d7bce5157da43074d93ef8f954ab8864c00de2d6810b69e4085e1da528d2dc11d6bbbcaf39aa6734b09e4db53b2f87106a49eb69686af1832", 0xf6}], 0x1) r18 = accept4$x25(r8, &(0x7f0000002540), &(0x7f0000002580)=0x12, 0x180000) sendto(r18, &(0x7f00000025c0)="d20704fc6656c7e9db693e198f5169088ea4e04b89c8f3154a1f8a31e9cbc685396cd0f1bb25d2723d4916f987675f0a239d5c0779fe4dc8c69289e4c09f3293fade2764e63f871e006f4fd5a1dc0ff7bfd77ad632ce6b1ccda17f318ab2afbfddc154d61042b3b73332c5c1fb9f9dfa7ae988232a58fd8499d9ffbd834f4f48bdde877e1ff641b11a995803dc8f6d3c5bee55e25e4987245fc6b9d49cb1f19abd69d6481c7e51bb4f83980c83919fcd01f8165686fd5a301ae8cc46f06969950838c9", 0xc3, 0x80, 0x0, 0x0) 1.410318604s ago: executing program 7 (id=4753): r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r2}}]}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x9, {r1}, {r2}, 0x8000000000000000, 0x1}) setuid(0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x10000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @enum={0x7, 0x7, 0x0, 0x6, 0x4, [{0x7, 0x9}, {0xd, 0x7}, {0x2, 0x3}, {0x9, 0x1}, {0x4, 0x7}, {0x5, 0x3}, {0x7, 0x3}]}]}}, 0x0, 0x7a, 0x0, 0x4, 0x0, 0x10000}, 0x28) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002680), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48000) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000180)=0xffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xc0, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f00000001c0)=r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c0000340002801400020020"], 0x6c}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1.360196778s ago: executing program 7 (id=4754): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) pause() close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.250199595s ago: executing program 0 (id=4755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)={0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd2a, 0x4, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x10b044) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000900)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1.189936838s ago: executing program 0 (id=4756): r0 = socket$kcm(0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000180)={0x9, 0x80000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000280)="cb28a3b11fd7888ea990624a5dbef0370a3be1a5be84620e857fdcafd729cbd4ac61a17fc7f66bfc4e6bcaa59771551e12ce344913f1b5380ab2565132887a189a1e2051d037cb3606d7666bac20c848ceac31410ee7c36f17cb2a52b2f1948bfcb43ca995d531de2f410daabeb62c6fb2932276712df902375f982cc5a24eb4bbb5e60169585c8124dcb25ab13066563c31f7de46fe02da45c7ece4823ac8ab187fd27abdaff4e803ff0854ff5360de4e84f5894b06bbfcb9f3df3f95fe841c872fe9836a952974044de708cb380e6f7741eec4f68862fba9d640a21e206c22300f47e7a67ba4f4a66085eed98007", 0x0, 0x14}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000640), 0x4) 1.030237106s ago: executing program 0 (id=4757): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000000c0)=""/82, &(0x7f0000000000)=0x52) 840.189446ms ago: executing program 0 (id=4759): mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) 779.488462ms ago: executing program 4 (id=4762): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x72e81) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000000c0)=0x64, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0xa}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 779.198262ms ago: executing program 0 (id=4763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="61023300503001000802110000010802110000"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 710.182684ms ago: executing program 0 (id=4764): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="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"/4110, @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 639.710153ms ago: executing program 4 (id=4765): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000004c6b1577d3274e278ff7e15de51a6fb753ee5f62c6f66b47cfe6c95f0f5da651292e8fc02b97cfcfb3ecbf442bc99ec3be7391794f9ea94562fd010d0511504bde8fdaf13880a86eb9508d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x353a, 0x1}}, 0x20) (async) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x353a, 0x1}}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') r4 = memfd_secret(0x80000) ftruncate(r4, 0x10) (async) ftruncate(r4, 0x10) pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a00000409000100730104310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000100c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000000a050000000000000000000a000004140000001100010000000000000000000100000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r2, 0xb44, 0xffffffffffff0000, 0x1c}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bind$unix(r7, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r8, r8, 0x2f, 0x2000, 0x4}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r9, 0xc49, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x58) 639.164682ms ago: executing program 4 (id=4766): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fdff7ffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c14d0000000000001c00128008030000677265001800028008000700e000000204001200"], 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) 560.180667ms ago: executing program 4 (id=4767): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 557.991428ms ago: executing program 4 (id=4768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x4}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x4}, 0x20) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) (async) 553.520204ms ago: executing program 4 (id=4769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x80) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) socket$inet6(0xa, 0x80000, 0x14b) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_mpls={0x94, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x3a, 0x4, "3ba5c2542422ae39c39c3e1d82991f54af58db42082607501099b85e0700000000000000edcf08ac66ac00"/54}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f0000000280)=@l2tp6, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x3, &(0x7f0000000400)=""/26, 0x1a}, 0x40000001) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0xfffffff9, 0x41595556, 0x7, 0xb, [{0x2}, {0x4, 0x9}, {0x2, 0x21}, {0x8, 0x3}, {0x8, 0xecbd}, {0x9, 0x3}, {0xc0, 0x8}, {0x10001, 0x7}], 0x2, 0x4, 0x7, 0x0, 0x4}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="72646fd0117e7347acbdf126", 0xc, 0x0}) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = msgget$private(0x0, 0x790) msgsnd(r8, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r8, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x400, 0x0) msgsnd(r8, &(0x7f0000001a40)=ANY=[], 0x401, 0x0) msgsnd(r8, &(0x7f00000002c0)={0x2}, 0x8, 0x0) msgrcv(r8, 0x0, 0x0, 0x0, 0x1800) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r6, &(0x7f0000000300)="fdcc", 0x2, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000200)={r5, 0xc, &(0x7f00000001c0)=""/12}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r11) 489.596717ms ago: executing program 7 (id=4770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x2, 0xc000, 0x2000, &(0x7f0000038000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) cachestat(r3, &(0x7f0000000180)={0x5, 0x2}, &(0x7f0000000280), 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r7 = epoll_create1(0x80000) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) syz_clone(0x8048000, &(0x7f0000000300)="6ac322bb117086bba41a4a9409ed5af5e3fc8cef32e4674108564e2841275cb5d4a5d9fc51f8a8de72b1d19940baeec2ff11d7a18209f905cf11a93ef2cc2ceca300", 0x42, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="15d31401090620a654847f8f91e7d7e36802ce800699fc769eef8ea43e7213c1aea023558a8cb82f489302ee410509866101666c2cae0e127ad5c68df3e1a1cc987f019780d7de10be65154a98b418f37613f52826fc42c128e074433037dc21bbc50e883968cb563dce1e324f7fd73081c1f9a6a094a501748c720a257837e426d714c073098dbf3d7e0705067e8695ec7ec6c86d6b82835348e8f3a2eafa51fd9a941dbd6878ffb16b567b178a10a27a6819972a901e260e89ca41") r8 = syz_open_pts(r6, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \'C'], 0xbb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r10 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000180)) close(r9) r11 = dup3(r8, r6, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000000)={0x80000001}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix_mp={0x3902, 0x5, 0x31435641, 0x9, 0x4, [{0x8, 0x8d00}, {0x4, 0xcc1}, {0x9, 0x7}, {0x8cd, 0x5}, {0x1, 0xd5a}, {0x3, 0xffffffff}, {0x0, 0x3}, {0x4, 0x6}], 0xfa, 0x7, 0x3, 0x1, 0x1}}) fsetxattr$security_selinux(r3, &(0x7f0000000040), &(0x7f0000000100)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) 70.183696ms ago: executing program 8 (id=4771): r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x2, &(0x7f0000000080)=[0x9e, 0x7], 0x2, 0x8}) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x2, &(0x7f0000000080)=[0x9e, 0x7], 0x2, 0x8}) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000002300)={&(0x7f0000002280)=[{&(0x7f0000000140)="262efb", 0x3}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="a90c307b95d72023b160b28f9d46390f555f38240d8ede", 0x17}, {&(0x7f00000011c0)="ed65b2375d2beb0496258d798eb8f3289cf54b51248f0b6c87ac6cb91352248444a7663028e871d3cfc914b6a7ec809ca99aeacfe3a5197145cd2df5db3dbb2e10aa223cf6311a6d5200f7313f972baea015e0045198ea7bec080445db5e4b0752192b89cb9b413ef111", 0x6a}, {&(0x7f0000001240)="cbe557e7a9ddf3940840511ca1717b84315950432e0c0268f6c600c0ae9ec4c28afe45ef7d5340434d", 0x29}, {&(0x7f0000001280)="54a772760902808eacd177afc50b9ce320e33d60bb8c2da62f75a0bc653d75c37e3945e8acb9da2ff975351eb08664407ab61040e591a909959b7cb535c802c5f73387425c0117727c9edbb50019e69822c2dac69d7e46c22eefdbe81237494874ad4de89605b912784390916f43bd9fba93dd3cc56d577deec586dc906afc4bb41dbec667f6712e154b233196d1b79971239e637ec9a063cf16b4ea383a9fc726199aac5fe55a783adc8775f38530dbc617e62e2b4030ac961742b734a26bd29c2b5889e8f7ca739ddc3357055c8261c5f3ce8ed60bfdced7b6af81ae1c71a03dcd0d0b4ba3f80f4d2258c407566e2c039e5c0c99557ea440367f58c76896f0937bcab9e0002c51052322ad38b180881a429602c48464167a805ddaec056babe79f4e23a56034c4439094d50431aa851e87bb30a3803c92455a005544ea6edad14480d18f94c92395988d8e5eadac8268f17654e307d2bbf9c4957af5af79136612bc5409ab22f2882d56c39bb4f8e566b2f89ebbfce48a840a741edbe7393d5811378aff3bca7bb1561a0426800ffbdcd3e22c72f7c1ba1c05220e714c1e72a4a370671d5108c568334dcb93456a1b5dfd3abe5ec097e916801696cb52bd55e954f60b74952d965ece756da23938905f15b9117c1194bfbeef00c26372e42ece7f0620b25b50a43408de97f382ec3ab5f474f98ce74d92fa1c06fddd789b3b5af87a99c7c86629c67c2db07335ba97e7c5bb61e58fa141320a75bb98b49e888d601df44dcbd77e42034cf81c2bf77c5980c81908fc47dda236249d15554e4bf7990bec8af4c46a9e47c3f71c44aa1d7996060acfd5834777d6dbda1144d00029db67805664957f8c70745a86929299f7a37378e13652526728eabb011178761eac9ba458962cddffba2925a44027b3f469521d1ba94460172d0b50cc2845072e63163e2e896a3d59f8ba222858e541357f6a0de6631336b5441b6003dd8ddfc9aae5d1c317d2102ca61285da89f278e8c690bc79cc131c5be5ab05d79f84edae1edc2108ed40aa0be12097931a0b55516ce285e952be1fbae9f217d2924912544fa0d4dee65f886f8292f9830e5461534027a5d9f874fd4008346152de0757c2404ea459af023e1e65627b171a15647c5ceff3004a9aae34f184fa158dcc354a668b13bd000c95fffafa2bf3848251ea53a5a541099805a11ea08a5fb3353e994350e70afb26896b9983148c91cdeb43bfdd2c04bb7b1000e94b6060f13d7a3846c718d815fb95e2fcfeeeedab9696fddadd3f259428713800106d0f131af9f8743ae1b1e5cdd9f9a4bb69fd79aaaef8a5b8fa4500446302ee72b0d2a26b4b53f1d473b909559b640b08b714fcc2f491c148a1cea8a1571ba1c4ed6d13c64a8a205190f74447c47276e9d185e69a61c0904b4e18caa85caf2df092e4b28db0f9c2d3ffd6f118265208b5865c3caea60f8f0efe9476d0760985195e4b41633db6494c9b3a078ed3cbb576d79a8a6e676d7c51cab6ee6fc12e1e28c5edfb49e3e3837ca14e50efcfb61389777c01c88129be5f17fa0b9306b205f8d7a48ebfdc4a64ed6d6ea8325f81cece13c01a4a1c0354a53577ab3d5993e0541bc82b1a5b4c60b42af8db3abd134ce2678c586e97fa015fcf1420f39dcc079914433bf78d3009c66733eaffc7b9fbf72cb2ba309490ff7e09b7342c44afd47fcdaece7ad38960250f5edb80d1d47649f943653b63efc76ab5a90b5bbdc44ec709c88c72e1a12d66a137fb85a11144c6682e94c7bbb3dc3d6c393ba55ef27ec6b6facbedc9c4d6cf79d8830801556a5019eac9f3c22f63cfba63e928ce6b6e68b963ea1b7751f560d1166786fd1c1b0af3e73eba4c044705c6684e24eab877bb4d761e771c85499d5ab8f6987aa34fb6bce0f9519b4fc50865f40c70aab8a92b5b0ac6131cd1c9923efe5a94028844ff7ce6f8f0131d710ac765e2a57268b62f21f1c7710d5d51f9fee47aea5bbef65c6c36de8f96b73b54b475928a6eaf9846f7f4588db8fe86151dd020b6f398c6328c98c68ce2e1d6ae0870cbefa1e5598657e0e7f9c9d7e0e68905ddbd98dd33e90c5e7bbabd93668d29cadaeb80bb1fd7a9ea80df74a9b6df43cba5a13eb9c23db4b55f2370bc7e6c8b35606cbea122b1d67b498ec02feebeee5206159e02aee8c42fa479e66e7cd1147a1ce70aefc81a22bb551547b403d689c3b9858dda73267db526dfad399a972f7ab8bea29fe0097807ae89446c55d7fd0baf129761a2484134117f38add097b624615347a893e19a6e6eaa4b5d23c5de570d33c3b26e2f8798b86d22abdfc827b4ced09d88a1a24abd4936a65d6a0d44cff4b67028de8dcaac602fde89ae1cafec533b197ae6bc4a687fc1731933dda30565614182390fc3f8bcdab6775e9d0f28642768f8909ed61b58a2d747ce431cb1a22b7070b46c46712b04fd1e7c155e3542365178314fb23779d6061e489185050598ffcc9d8764025818da750986f464be436d4552d781f0aded537a83e69f75352725b9994e6490acdd1ebfaef875237f4bc573827b9692aa780347938c30f0faeebb8139c15d88f7b9040e1eb980951f764adca17dee0a280780da9f3bce2a0059d0e66649380ccf693d20aac21139b00e04152859420c22db440f7c4970392c62a8b1f8adcb646230d9af2ddd29c880db9f311a289372b42fbe180cb1de8e3bccedb992958a8977953aed63307592f3df6fe8e32c03e8247db4272609d5a685cede6830a39d44ba1a11382299d2b0750f1aeaad9519890bd9ac800a9c9c6abc66b0acf80d84cf0b6bc0495196a9ff56159326a0d55e0ee338614f177bfad9209df548d59e8590c6108d4272fd07179074489713947bbc8f1116618b2656151ab1db3478de6f477c8fce2a288c566b65d60d7f40f12f4b8a75b5ffa638fd53e11728f85c8eda114c670c69d4bd560adc7aa9db59e3abde686b62baed618426365d2f0d1956334e2d99c3fe472b712f97befbf2973cc5819b8f992bde9914174e4e11b2fdec89e7860949c1e091c38c20375270cc1b682179a9e5dd86b6a0e24e0eb5135797ddb951616858af3c2b964ddd6bcdc30b9c3812bc0290c5603c25a58a401131256015685c2a84bfdc2d36f9cc767249cb110bee057734fd01f1dfe339c1891a352dd2f62e858b4831506b3b5aee514f42cace05b2c82a5695659db6c73e72b46a81bf3dc1c1106cc7684e143917dc041f0604523a2ac12015026c79d1f681a7d78d3896458874ff9b4fba3c82aa6cd24ff9c7ea54d69d6d453df997d546c2ec86635a5087933115046d3f8a32905a470fc553e8538554fb59c35ba3db474662bde504f642e16b40e2c54369a4a382e49a46e03b811347e5e6a1a657bd789541fccd715eb94e482354bc946213c1932e947f335f8950dd4d1081be7bdcb88b312aa35fda7eb70396074bbf5998ea579046a206c1d13c08937e662cf01dc3d117fb176ca24fdcad52d699ec33aaa0686a743283f0ad6ca7ce2f165999a27e6f1f1430733cc8b4a51127c972ba826adcb1aea7e102b546913d27bf8b37281481e7dacc426340a02c5bcc28587c25af219eb853a53cf1e9e719416ded1df3a1487fa264c01e63724c5af2c5787b93bca416c161981242c592109b050c21ec2fa279571e0533aa9d27331745930f2afce7974a944692b1d6abad0fdd8edd7f7a65f8cc9f8c637596f851027153cfeb735bdbde7974150da36d9297f7e0f545d81b6153e1c36f09ab3cd33c52067d643cb886714757e713b8f48120a79dab8b0b1e2108a6cc9a6bf3249ba41b5e3924b7126edd080bcb3d38a5651b2d821d89a504aec394cf9f85d0833305adfeeaeb105b0edd7db2fb3c7abb4667eee73b455d9e54f35bb88c3a6e4d3892bc3690eb134a8a8836a91d21a53a5bb20918807096c2748f67f8436a0df5ce69be0c69a2f6d88c8412defe66d0658c97f2cee3bd36e047ffcdbb026776a9c4467866b99366ea1491ad52c69697704d4bd1a9b13d1cd7da439358c797ce0ec361064166103e7ee5442524b7fcd4f4bd99b4fb5b4d9db151190ad20853c24272155ef2c7f55b7f85ffd1f1c68d36b60d546fea24c66c1a33681710ba9d81a208e2523362a0b1ab6a5b1bcb1745a719811035e9dcc427283feacb98de7b45cdf9ef6031d03be6532de65b8e1f20c0ef7e5e00be39816b1acf54e1ff4eada979882b5f9726c00b899ef5a4d051b3ccb56ad4ab04bb62815257db4edb6c49849e0f03fb50fbfdd88b32d327bb42dc17bc5eba513712497644742ee81128d5253c41a77262b06bc82609169528ca7f72a1733495ae2a2c740ed3a4f0b52ddb13233b258426788425a1547982bd696f0e45d9daa01109370385ff4405ea1a7a3ca99717bd8c2c1c19ce858125950d0d290c3583ec3e697b912559b1878964572830c0e6f231200a6f3b69a4bf47c3f23adc84e0027ce6683ddb21e9bff05438da91a8d3cdeb7ee16b82db940129527f2f923e0dee742091422b0289604e76b46dda30c6a44514d9abbf73d3305d4ab526f3ddd67d3db04ba1de1fcd73bf04b61812f2f0b1d0a9acdd46f849c8f70cf21a3c117f0b54dcffdc6cdd80b813dafdef9ff1bcdb2969f71a08c39f3236ef253e06beb6a1a6dc061cf993d89fc2273601b26079188a5cca5be5227d3ab44e607b8b586f298fec556f76ea9ee635ae9a02a6a62133809a3a8882eb5157ebf1a8965a8a290dc06bd6227a95b0320ef7d8bc47d8951031fd1c828d0d36ed230cc0b5975ba12f3efcc2df8e5dec7a68001a03f776f38f55e160531ea96b9085ef34bcb4c7b3b4d5ee57ebb63b3660c2ae3a9bfe23fd46bc0f4c53516dcf3c8587eca927dd7a7d7f289bb845c66fecc8c0218df3f3444f55845e10287027ad184b4aa82a74e5c2ff92b18afdd87da539b10cf799083cc944330cca26ddf1bf394c3b6c266661dbd59616c710af105982948e95221e64b26ef48eaa46c8f84cd059811771af27a6b7ee902059f28e3711b135f337f51fe772e2c2594ae0ef67bfe2e72580106138520bc7e42b39047c8861f8da03b7b706504ff7df0d6b8f6e38e87a4f6c7b5225eee21b8cdf5d3a2cc4357646a65d867a08bd4361544ebc6b75eb0f941a0129cd237b7461f7bbf64715f831fdf73fcd04dfa9c5e9e9a4f31544e773bb772c0ba2ba82556e27c29a21be610258f8da4cd92d5914f94030bdf3c931bd7f74d9c30f50f412d2539572b95700c395413e9b06a99c42693dc7ec04fad6ea2dc376e082b9d0168469daf7b11270747b69106617e20a02ecf3a198c4692bece87c790ab8afad70e8ec109de1147226cc15f9344c59b70299a2a5b039ac02c420d4300cd8d30037baacd02847c285c65c4838546cba90994f942d23ec81c6d828d10e725d98bd83a1791753ae6b75fbfa1770c231e2fee80edd7402fb897b7c34ec82c30ce24f2c64bc8e24a24835d81a4129567b8fe6fd23507f90701ce9737c055cff2d560ed93cf52ded7f93abedc1f59419b329edd7598374f6aa967673bd5566685df035183bd4878b28c3dfea1962985f8c3cf40bd859781a851267f75ce221e70c44037c8e8ef062cceba1ed05580ae9f50c6c76a0e0898396c517b65af1e26ed9036c7cd0c62a42550415dae1a4b60536631923342ed56b7da0472d28421cc53c053af5b82829025a73a4c6eb0b79c0c7c8fc00c255bb4c2368011c4ea99076b375f46f4760129179face90b7131880615d3111602ad47e41930d2ef1", 0x1000}], 0x6, 0x6, 0x0, 0x800, 0x5, 0x3, 0xb, 0x8}) r2 = syz_open_dev$cec(&(0x7f0000002380), 0x0, 0x141000) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=@delnexthop={0x28, 0x69, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xa800}, 0x40051) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000024c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000002500), 0xc0100, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002500), 0xc0100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002540)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x1ff) (async) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002580)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000025c0), 0x200040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1d) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f0000002600)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000002680)=0x854) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000026c0)={0x800, 0xa, 0x7, 0x0, 0x1}) (async) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000026c0)={0x800, 0xa, 0x7, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000002700)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000002700)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000002740)=0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000002780)={0xc0000010}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000002780)={0xc0000010}) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480d5}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000028c0)={0x12}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000002900)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002940)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002980)=@int=0xfff, 0x4) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002980)=@int=0xfff, 0x4) mmap$panthor(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x8010, r4, 0x2) (async) mmap$panthor(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x8010, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x24, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x44801) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x24, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x44801) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002bc0), r4) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x24, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 69.774814ms ago: executing program 8 (id=4772): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 7 (id=4773): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0xc041) (async) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0xc041) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) (async) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382) syz_usb_disconnect(r8) syz_usb_connect$uac3(0x5, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x94, 0x30, 0xed, {0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x30, 0x5f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0xf0, {0xa, 0x25, 0x25, 0x6, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x0, 0x40, {0xa, 0x25, 0x25, 0xc53, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x6, &(0x7f00000002c0)=@string={0x6, 0x3, "240565ab"}}, {0x90, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x0, 0x0}]}) (async) syz_usb_connect$uac3(0x5, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x94, 0x30, 0xed, {0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x30, 0x5f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0xf0, {0xa, 0x25, 0x25, 0x6, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x0, 0x40, {0xa, 0x25, 0x25, 0xc53, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x6, &(0x7f00000002c0)=@string={0x6, 0x3, "240565ab"}}, {0x90, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x0, 0x0}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8ff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x6}, {0x0, 0x5, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "240b11f1c9de226c", "efc14bb7129055c5efed92d6c96944fd6bc54815347bf10fa0aa963057caeca1", "f5b2fbaf", "a213fc353711f919"}, 0x38) kernel console output (not intermixed with test programs): 38 using dummy_hcd [ 345.822920][T19613] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 345.824857][T19613] syzkaller1: Refused to change device type [ 345.841553][ T9] usb 5-1: device descriptor read/8, error -71 [ 345.924627][ T5296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.937986][ T5296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.943298][ T5296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.947413][ T5296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.950067][ T5296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.955148][ T9] usb usb5-port1: unable to enumerate USB device [ 346.002625][T19626] netlink: 'syz.8.3987': attribute type 1 has an invalid length. [ 346.051669][T19626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.055976][T19626] bond1: (slave bond2): making interface the new active one [ 346.059370][T19626] bond1: (slave bond2): Enslaving as an active interface with an up link [ 346.073543][T19626] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 346.078314][T19626] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3987'. [ 346.084307][T19626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.250303][T15830] syz_tun (unregistering): left allmulticast mode [ 346.252686][T15830] syz_tun (unregistering): left promiscuous mode [ 346.255677][T15830] bridge0: port 3(syz_tun) entered disabled state [ 346.274184][T19629] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3988'. [ 346.385649][T19651] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3994'. [ 346.397645][T19619] chnl_net:caif_netlink_parms(): no params data found [ 346.454204][T19619] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.456552][T19619] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.459026][T19619] bridge_slave_0: entered allmulticast mode [ 346.461926][T19619] bridge_slave_0: entered promiscuous mode [ 346.465765][T19619] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.468116][T19619] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.470458][T19619] bridge_slave_1: entered allmulticast mode [ 346.475282][T19619] bridge_slave_1: entered promiscuous mode [ 346.492460][T19619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.499496][T19619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.518491][T19619] team0: Port device team_slave_0 added [ 346.522147][T19619] team0: Port device team_slave_1 added [ 346.542295][T19619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.545340][T19619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.556473][T19619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.586929][T19619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.589175][T19619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.599137][T19619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.631271][T19619] hsr_slave_0: entered promiscuous mode [ 346.634717][T19619] hsr_slave_1: entered promiscuous mode [ 346.640766][T19619] debugfs: 'hsr0' already exists in 'hsr' [ 346.643202][T19619] Cannot create hsr debugfs directory [ 346.767336][T19669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.800998][ T6195] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 346.807065][T19669] team0: Port device team_slave_1 removed [ 346.854601][T19619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.858604][T19619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.952351][ T6195] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 346.956281][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.960257][T19619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.963825][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.967371][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 346.969547][T19619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.974710][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.977763][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.981399][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 346.984388][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.987104][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.990447][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 346.993604][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.996407][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.999914][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 347.004681][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.007457][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.008409][T19678] netlink: 'syz.7.4001': attribute type 1 has an invalid length. [ 347.011788][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 347.017623][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.020500][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.024195][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 347.027465][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.030366][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.034110][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 347.036980][ T6195] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.039822][ T6195] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.043917][ T6195] usb 13-1: config 0 interface 0 has no altsetting 0 [ 347.047554][ T6195] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 347.050533][ T6195] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 347.053722][ T6195] usb 13-1: Product: syz [ 347.055151][ T6195] usb 13-1: Manufacturer: syz [ 347.056694][ T6195] usb 13-1: SerialNumber: syz [ 347.061142][ T6195] usb 13-1: config 0 descriptor?? [ 347.066151][ T6195] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 347.066895][T19619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.071834][T19619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.159047][T19619] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.162830][T19619] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.268275][T19687] binder: 19686:19687 ioctl 89f8 200000000500 returned -22 [ 347.281703][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 347.281714][ T40] audit: type=1400 audit(1773554310.136:1881): avc: denied { unmount } for pid=18857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 347.284686][ T39] usb 13-1: USB disconnect, device number 3 [ 347.288973][ T39] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 347.330143][T19694] vlan2: entered promiscuous mode [ 347.332879][T19694] vlan2: entered allmulticast mode [ 347.334948][T19694] hsr_slave_1: entered allmulticast mode [ 347.377673][T19619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.382719][T19619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.389212][T19619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.405106][T19619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.467313][T19705] overlayfs: failed to set uuid (477/file0, err=-1); falling back to uuid=null. [ 347.470301][T19705] overlayfs: failed to verify upper root origin [ 347.472066][T19619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.476294][T19704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.487254][T19619] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.496087][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.498591][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.506513][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.509275][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.651146][T19619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.807932][T19619] veth0_vlan: entered promiscuous mode [ 347.815733][T19619] veth1_vlan: entered promiscuous mode [ 347.834652][T19619] veth0_macvtap: entered promiscuous mode [ 347.838414][T19619] veth1_macvtap: entered promiscuous mode [ 347.847357][T19619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.864089][T19619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.874886][ T7002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.877784][ T7002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.881789][ T7002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.884864][ T7002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.942546][ T7003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.945115][ T7003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.967118][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.972371][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.980774][ T63] Bluetooth: hci2: command tx timeout [ 348.013447][T19741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19741 comm=syz.4.3984 [ 348.079646][ T40] audit: type=1400 audit(1773554310.926:1882): avc: denied { create } for pid=19750 comm="syz.4.4013" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.097631][T19751] /dev/nullb0: Can't open blockdev [ 348.098259][ T40] audit: type=1400 audit(1773554310.946:1883): avc: denied { link } for pid=19750 comm="syz.4.4013" name="#76" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.191777][ T40] audit: type=1400 audit(1773554311.046:1884): avc: denied { unmount } for pid=19619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 348.232823][T19761] bond8: entered promiscuous mode [ 348.238665][T19763] netlink: 'syz.4.4017': attribute type 62 has an invalid length. [ 348.372011][ T40] audit: type=1400 audit(1773554311.226:1885): avc: denied { load_policy } for pid=19777 comm="syz.7.4021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 348.372574][T19778] SELinux: unknown common r [ 348.382149][T19778] SELinux: failed to load policy [ 348.429890][ T63] Bluetooth: hci2: unexpected event 0x06 length: 13 > 3 [ 348.432876][T19781] pimreg: entered allmulticast mode [ 348.616161][T19800] lo: MTU too low for tipc bearer [ 348.617890][T19800] tipc: Enabling of bearer rejected, failed to enable media [ 348.655347][ T40] audit: type=1400 audit(1773554311.506:1886): avc: denied { write } for pid=19801 comm="syz.0.4029" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 348.665541][T19804] __nla_validate_parse: 3 callbacks suppressed [ 348.665553][T19804] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4030'. [ 348.756023][T19806] use of bytesused == 0 is deprecated and will be removed in the future, [ 348.758950][T19806] use the actual size instead. [ 348.777228][T19806] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4031'. [ 348.793672][ T40] audit: type=1400 audit(1773554311.646:1887): avc: denied { unmount } for pid=19116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 348.838322][T19814] x_tables: ip_tables: osf match: only valid for protocol 6 [ 349.058326][T19830] Bluetooth: MGMT ver 1.23 [ 349.059831][T19830] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 349.065606][T19831] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4040'. [ 349.092938][T19830] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 349.115788][T19838] tipc: New replicast peer: 255.255.255.255 [ 349.116853][T19833] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 349.118825][T19838] tipc: Enabled bearer , priority 10 [ 349.120752][T19833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.121003][T19833] vhci_hcd vhci_hcd.0: Device attached [ 349.128483][T19838] tipc: Enabling of bearer rejected, already enabled [ 349.130281][T19839] vhci_hcd: unknown pdu 2 [ 349.134959][ T7003] vhci_hcd vhci_hcd.4: stop threads [ 349.136625][ T7003] vhci_hcd vhci_hcd.4: release socket [ 349.138567][ T7003] vhci_hcd vhci_hcd.4: disconnect device [ 349.658024][T19869] bond1: Removing last arp target with arp_interval on [ 349.660958][ T39] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 349.763718][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4052'. [ 349.806899][T19881] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4053'. [ 349.820865][ T39] usb 13-1: Using ep0 maxpacket: 8 [ 349.833205][ T39] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 349.835944][ T39] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.839177][ T39] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.842538][ T39] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.845676][ T39] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.849775][ T39] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.852736][ T39] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.929110][ T40] audit: type=1326 audit(1773554312.776:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19882 comm="syz.7.4054" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8444d9c799 code=0x0 [ 350.060994][ T63] Bluetooth: hci2: command tx timeout [ 350.062462][ T39] usb 13-1: GET_CAPABILITIES returned 0 [ 350.065531][ T39] usbtmc 13-1:16.0: can't read capabilities [ 350.230920][ T6003] tipc: Node number set to 1897411935 [ 350.273359][T19862] usb 13-1: usbtmc_ioctl_clear_out_halt returned -32 [ 350.278941][ T1463] usb 13-1: USB disconnect, device number 4 [ 350.625396][ T40] audit: type=1400 audit(1773554313.476:1889): avc: denied { setopt } for pid=19890 comm="syz.4.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.627283][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 350.634961][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.641635][T19891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.679741][ T40] audit: type=1400 audit(1773554313.526:1890): avc: denied { connect } for pid=19890 comm="syz.4.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 350.680817][T19892] loop6: detected capacity change from 0 to 2640 [ 350.688609][T19892] buffer_io_error: 27 callbacks suppressed [ 350.688619][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.694325][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.696808][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.699285][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.701981][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.704624][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.707229][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.709768][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.712566][T19892] ldm_validate_partition_table(): Disk read failed. [ 350.714796][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.717349][T19892] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.719933][T19892] Dev loop6: unable to read RDB block 0 [ 350.722042][T19892] loop6: unable to read partition table [ 350.730406][T19892] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 350.914069][ T6003] Process accounting resumed [ 351.027254][T19908] syzkaller1: entered promiscuous mode [ 351.029096][T19908] syzkaller1: entered allmulticast mode [ 351.033108][ T6004] IPVS: starting estimator thread 0... [ 351.035148][T19908] netlink: 'syz.7.4063': attribute type 4 has an invalid length. [ 351.140879][T19909] IPVS: using max 43 ests per chain, 103200 per kthread [ 351.166241][T19914] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 351.398218][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4066'. [ 351.406866][T19918] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4066'. [ 351.648696][T19935] ceph: Path missing in source [ 351.956987][T19942] No source specified [ 352.142232][ T63] Bluetooth: hci2: command tx timeout [ 352.321379][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'. [ 352.324733][T19950] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4077'. [ 352.346009][T19950] IPVS: persistence engine module ip_vs_pe_s not found [ 352.351087][ T1347] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 352.390061][T19953] SELinux: policydb string does not match my string SE Linux [ 352.393715][T19953] SELinux: failed to load policy [ 352.513829][ T1347] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.517754][ T1347] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 352.521172][ T1347] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 352.525147][ T1347] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.530176][ T1347] usb 13-1: config 0 descriptor?? [ 352.534952][ T1347] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 352.538387][ T1347] dvb-usb: bulk message failed: -22 (3/0) [ 352.548482][ T1347] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 352.552695][ T1347] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 352.555594][ T1347] usb 13-1: media controller created [ 352.558548][ T1347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.576571][ T1347] dvb-usb: bulk message failed: -22 (6/0) [ 352.581814][ T1347] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.588995][ T1347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input49 [ 352.599180][ T1347] dvb-usb: schedule remote query interval to 150 msecs. [ 352.610685][ T1347] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 352.755880][ T1347] usb 13-1: USB disconnect, device number 5 [ 352.757887][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 352.757896][ T40] audit: type=1400 audit(1773554315.606:1895): avc: denied { create } for pid=19966 comm="syz.0.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 352.779502][ T40] audit: type=1400 audit(1773554315.626:1896): avc: denied { setattr } for pid=19966 comm="syz.0.4083" name="" dev="pipefs" ino=93939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 352.780114][ T1347] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 353.309460][T19993] xt_socket: unknown flags 0x48 [ 353.310958][T19992] syzkaller0: entered promiscuous mode [ 353.314088][T19992] syzkaller0: entered allmulticast mode [ 353.361011][T19996] loop5: detected capacity change from 0 to 7 [ 353.364365][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.367690][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.373827][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.378057][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.391416][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.395540][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.399226][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.402549][T16079] ldm_validate_partition_table(): Disk read failed. [ 353.405213][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.408871][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.413055][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.421085][T16079] Dev loop5: unable to read RDB block 0 [ 353.423335][T16079] loop5: unable to read partition table [ 353.425214][T16079] loop5: partition table beyond EOD, truncated [ 353.435922][T19996] ldm_validate_partition_table(): Disk read failed. [ 353.439107][T19996] Dev loop5: unable to read RDB block 0 [ 353.450615][T19996] loop5: unable to read partition table [ 353.452593][T19996] loop5: partition table beyond EOD, truncated [ 353.457652][T19996] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 353.573615][T20029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=20029 comm=syz.8.4103 [ 353.589813][T20031] FAT-fs (sr0): bogus number of reserved sectors [ 353.595721][T20031] FAT-fs (sr0): Can't find a valid FAT filesystem [ 353.689513][ T40] audit: type=1400 audit(1773554316.536:1897): avc: denied { compute_member } for pid=20036 comm="syz.8.4107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 353.711731][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.716155][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.720436][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.720801][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.725282][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.728170][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.732972][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.738330][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.740030][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.745781][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.749409][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.750700][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.754110][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.755673][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.759173][T20040] binder_alloc: binder_alloc_mmap_handler: 20038 200000ffd000-200001000000 already mapped failed -16 [ 353.769276][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.772679][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.774658][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.777170][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.778649][T20045] __nla_validate_parse: 3 callbacks suppressed [ 353.778659][T20045] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4109'. [ 353.779121][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.787719][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.789764][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.792730][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.794805][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.797366][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.799407][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.802742][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.805045][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.807941][ T40] audit: type=1400 audit(1773554316.656:1898): avc: denied { getopt } for pid=20044 comm="syz.8.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.815270][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.817245][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.830356][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.832492][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835236][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835242][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835285][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835290][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835329][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835334][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835376][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835381][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835420][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835425][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835465][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835470][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835509][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835513][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835552][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.835557][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.835595][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.874896][T20039] syz.7.4108 (20039): drop_caches: 2 [ 353.875744][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.881070][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.883712][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.887014][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.889087][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.892323][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.894313][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.896792][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.898777][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.901661][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.905548][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.905606][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.910041][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.912835][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.914841][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.917313][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.919298][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.922071][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.924052][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.926557][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.930406][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.933330][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.935333][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.937976][T20041] binder: BINDER_SET_CONTEXT_MGR already set [ 353.940361][T20041] binder: 20038:20041 ioctl 4018620d 200000004a80 returned -16 [ 353.989024][ T40] audit: type=1400 audit(1773554316.836:1899): avc: denied { read write } for pid=20049 comm="syz.7.4111" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 353.993926][T20050] syz.7.4111 (20050): drop_caches: 2 [ 354.000450][ T40] audit: type=1400 audit(1773554316.836:1900): avc: denied { open } for pid=20049 comm="syz.7.4111" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 354.196064][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4114'. [ 354.230781][ T5296] Bluetooth: hci2: command tx timeout [ 354.354568][ T40] audit: type=1400 audit(1773554317.206:1901): avc: denied { block_suspend } for pid=20062 comm="syz.0.4113" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 354.364113][ T5296] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 354.386004][T20068] futex_wake_op: syz.7.4116 tries to shift op by -1; fix this program [ 354.389019][T20068] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 354.389019][T20068] program syz.7.4116 not setting count and/or reply_len properly [ 354.444513][T20063] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 354.489032][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4119'. [ 354.698832][T20096] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4125'. [ 354.716260][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 354.720218][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 354.747004][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4127'. [ 354.773275][T20101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20101 comm=syz.7.4127 [ 354.784584][ T40] audit: type=1400 audit(1773554317.636:1902): avc: denied { ioctl } for pid=20105 comm="syz.4.4129" path="socket:[94162]" dev="sockfs" ino=94162 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 354.819118][T20109] netlink: 'syz.4.4130': attribute type 62 has an invalid length. [ 354.824118][T20110] netlink: 'syz.4.4130': attribute type 62 has an invalid length. [ 354.849789][ T39] IPVS: starting estimator thread 0... [ 354.912616][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4134'. [ 354.919389][T20123] netlink: 'syz.7.4134': attribute type 23 has an invalid length. [ 354.940857][T20118] IPVS: using max 43 ests per chain, 103200 per kthread [ 355.064427][T20132] netdevsim netdevsim7: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 355.075182][ T40] audit: type=1400 audit(1773554317.926:1903): avc: denied { connect } for pid=20131 comm="syz.7.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.116710][ T40] audit: type=1400 audit(1773554317.966:1904): avc: denied { cmd } for pid=20135 comm="syz.4.4140" path="socket:[94771]" dev="sockfs" ino=94771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 355.191630][T20145] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4142'. [ 355.595792][T20158] befs: (nbd8): unable to read superblock [ 355.694661][T20163] macvlan2: entered promiscuous mode [ 355.961024][ T9659] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 356.111022][ T9659] usb 13-1: Using ep0 maxpacket: 32 [ 356.115634][ T9659] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.120519][ T9659] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.125518][ T9659] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 356.131203][ T9659] usb 13-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 356.135047][ T9659] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.140396][ T9659] usb 13-1: config 0 descriptor?? [ 356.311094][ T5296] Bluetooth: hci2: command 0x0406 tx timeout [ 358.167665][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'. [ 358.190935][T20145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.205800][ T9659] usbhid 13-1:0.0: can't add hid device: -71 [ 358.207846][ T9659] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 358.222894][ T9659] usb 13-1: USB disconnect, device number 6 [ 358.379873][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 358.379884][ T40] audit: type=1400 audit(1773554321.226:1907): avc: denied { accept } for pid=20221 comm="syz.0.4155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.380786][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 358.425664][ T63] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 358.429289][ T63] Bluetooth: hci4: unexpected event for opcode 0x203e [ 358.495318][T20229] loop9: detected capacity change from 0 to 2640 [ 358.497758][T20229] buffer_io_error: 46 callbacks suppressed [ 358.497768][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.502869][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.509089][ T40] audit: type=1400 audit(1773554321.356:1908): avc: denied { getopt } for pid=20230 comm="syz.7.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.509100][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.509122][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.522589][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.525157][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.527707][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.530236][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.533107][T20229] ldm_validate_partition_table(): Disk read failed. [ 358.535278][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.537825][T20229] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.540346][T20229] Dev loop9: unable to read RDB block 0 [ 358.543760][T20229] loop9: unable to read partition table [ 358.545743][T20229] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 358.624816][ T40] audit: type=1400 audit(1773554321.476:1909): avc: denied { read } for pid=20240 comm="syz.7.4162" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 358.632479][T20242] random: crng reseeded on system resumption [ 358.638854][ T40] audit: type=1400 audit(1773554321.486:1910): avc: denied { ioctl } for pid=20240 comm="syz.7.4162" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 358.779417][ T40] audit: type=1400 audit(1773554321.626:1911): avc: denied { mount } for pid=20254 comm="syz.8.4164" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 358.789713][ T40] audit: type=1400 audit(1773554321.636:1912): avc: denied { mounton } for pid=20254 comm="syz.8.4164" path="/69/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 358.802017][ T40] audit: type=1400 audit(1773554321.656:1913): avc: denied { unmount } for pid=19116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 358.853024][T20264] blktrace: Concurrent blktraces are not allowed on sg0 [ 358.896864][ T40] audit: type=1400 audit(1773554321.746:1914): avc: denied { mounton } for pid=20269 comm="syz.0.4169" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 358.897141][T20270] virtio-fs: tag not found [ 358.918885][T20270] fuse: Bad value for 'fd' [ 358.996557][T20272] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 358.999376][T20273] netlink: 'syz.8.4168': attribute type 12 has an invalid length. [ 359.002307][T20273] netlink: 'syz.8.4168': attribute type 29 has an invalid length. [ 359.004922][T20273] __nla_validate_parse: 4 callbacks suppressed [ 359.004936][T20273] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4168'. [ 359.012140][T20273] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4168'. [ 359.123874][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4171'. [ 359.127802][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4171'. [ 359.230937][T20286] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 359.748473][T20308] SELinux: policydb string length 1701603686 does not match expected length 8 [ 359.751543][T20308] SELinux: failed to load policy [ 359.754232][T20310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20310 comm=syz.8.4180 [ 359.816172][T20318] bridge0: entered promiscuous mode [ 359.818417][T20318] macvlan2: entered promiscuous mode [ 359.839959][T20320] l2tp_mt_check6: 1 callbacks suppressed [ 359.839971][T20320] xt_l2tp: v2 doesn't support IP mode [ 359.885944][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4186'. [ 359.888814][T20328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4186'. [ 359.923119][ T40] audit: type=1400 audit(1773554322.776:1915): avc: denied { shutdown } for pid=20322 comm="syz.0.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.001314][T20333] input: syz1 as /devices/virtual/input/input50 [ 360.020484][T20331] syzkaller0: entered promiscuous mode [ 360.025990][T20331] syzkaller0: entered allmulticast mode [ 360.065169][T20339] binder: 20334:20339 ioctl 4018620d 0 returned -22 [ 360.071970][T20339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=20339 comm=syz.0.4189 [ 360.653548][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4192'. [ 360.658094][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4192'. [ 361.718042][T20352] bridge0: Device is already in use. [ 361.763188][T20358] overlay: Unknown parameter 'dont_measure' [ 361.808825][T20368] overlayfs: failed to resolve 'dont_appraise': -2 [ 361.812090][T20368] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.818932][ T40] audit: type=1400 audit(1773554324.666:1916): avc: denied { write } for pid=20364 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 361.895966][T20378] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 361.900131][T20378] overlayfs: failed to look up (tracing) for ino (-66) [ 361.962609][T20385] bridge3: entered promiscuous mode [ 361.964584][T20385] bridge3: entered allmulticast mode [ 362.001226][ T6003] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 362.050126][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4201'. [ 362.150780][ T6003] usb 12-1: Using ep0 maxpacket: 32 [ 362.154541][ T6003] usb 12-1: unable to get BOS descriptor set [ 362.157502][ T6003] usb 12-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.164132][ T6003] usb 12-1: string descriptor 0 read error: -22 [ 362.166235][ T6003] usb 12-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 362.169287][ T6003] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.456140][ T6003] usb 12-1: USB disconnect, device number 4 [ 362.460867][ T63] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 362.465924][ T63] Bluetooth: hci4: Injecting HCI hardware error event [ 362.469221][ T63] Bluetooth: hci4: hardware error 0x00 [ 362.991570][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4209'. [ 363.082979][ T7002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.086032][T20418] new mount options do not match the existing superblock, will be ignored [ 363.086710][ T7002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.090570][T20418] cgroup: Unknown subsys name 'ecb(cipher_null)' [ 363.102687][T20418] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 363.104764][T20418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.108953][T20418] vhci_hcd vhci_hcd.0: Device attached [ 363.113863][T20420] vhci_hcd: cannot find the pending unlink 1023 [ 363.114000][T20418] cgroup: Unknown subsys name 'T' [ 363.140525][T20420] vhci_hcd: connection closed [ 363.141365][ T7007] vhci_hcd vhci_hcd.4: stop threads [ 363.145656][ T7007] vhci_hcd vhci_hcd.4: release socket [ 363.154438][ T6004] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 363.157875][ T7007] vhci_hcd vhci_hcd.4: disconnect device [ 363.171954][ T7002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.175207][ T7002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.256241][T20428] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 363.260244][T20428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 363.269321][ T7002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.274110][ T7002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.304119][ T6004] usb 13-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 363.307380][ T6004] usb 13-1: config 0 interface 0 has no altsetting 0 [ 363.320056][ T6004] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.325276][ T6004] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.328840][ T6004] usb 13-1: Product: syz [ 363.331444][ T6004] usb 13-1: Manufacturer: syz [ 363.333594][ T6004] usb 13-1: SerialNumber: syz [ 363.339092][ T6004] usb 13-1: config 0 descriptor?? [ 363.343566][T20407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 363.350253][ T6004] usb 13-1: selecting invalid altsetting 0 [ 363.388905][ T7002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.393179][ T7002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.550025][ T7002] bridge_slave_1: left allmulticast mode [ 363.552396][ T7002] bridge_slave_1: left promiscuous mode [ 363.557582][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.562945][ T7002] bridge_slave_0: left allmulticast mode [ 363.565331][ T7002] bridge_slave_0: left promiscuous mode [ 363.568679][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.576129][ T6004] usb 13-1: USB disconnect, device number 7 [ 363.883676][ T7002] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 363.886422][ T7002] bridge2 (unregistering): left promiscuous mode [ 363.933988][ T7002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.939900][ T7002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.944609][ T7002] bond0 (unregistering): Released all slaves [ 363.949045][ T7002] bond1 (unregistering): Released all slaves [ 363.956088][ T7002] bond2 (unregistering): Released all slaves [ 363.966194][T20433] ip6gre1: entered promiscuous mode [ 363.968006][T20433] ip6gre1: entered allmulticast mode [ 363.981486][T20440] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 363.998731][T20441] bond0: (slave bond_slave_0): Releasing backup interface [ 364.063811][ T7002] tipc: Disabling bearer [ 364.065538][T20445] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.065567][T20445] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 364.065835][T20445] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.073947][ T7002] tipc: Left network mode [ 364.078117][T20445] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 364.113005][T20448] __nla_validate_parse: 2 callbacks suppressed [ 364.113017][T20448] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4220'. [ 364.119840][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 364.119850][ T40] audit: type=1400 audit(1773554326.966:1920): avc: denied { create } for pid=20447 comm="syz.8.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 364.252583][T20458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=20458 comm=syz.7.4223 [ 364.261511][T20458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20458 comm=syz.7.4223 [ 364.456089][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4226'. [ 364.459126][T20475] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4226'. [ 364.542904][ T63] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 364.740826][ T6004] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 364.833774][T20504] kAFS: unable to lookup cell 'syz0' [ 364.870870][ T6004] usb 12-1: device descriptor read/64, error -71 [ 364.900598][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 364.907723][ T7002] hsr_slave_0: left promiscuous mode [ 364.912838][ T7002] veth1_macvtap: left promiscuous mode [ 364.914820][ T7002] veth0_macvtap: left promiscuous mode [ 364.916756][ T7002] veth1_vlan: left promiscuous mode [ 364.918901][ T7002] veth0_vlan: left promiscuous mode [ 365.003262][ T63] Bluetooth: hci0: ISO packet too small [ 365.004571][T20521] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.011326][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4235'. [ 365.012263][T20523] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.023001][T20521] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 365.110832][ T6004] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 365.240905][ T6004] usb 12-1: device descriptor read/64, error -71 [ 365.314574][T20532] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 365.351261][ T6004] usb usb12-port1: attempt power cycle [ 365.442742][T20546] program syz.8.4242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.487692][T20552] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4244'. [ 365.496814][T20552] netlink: 'syz.8.4244': attribute type 58 has an invalid length. [ 365.513726][T20555] syzkaller0: entered promiscuous mode [ 365.515546][T20555] syzkaller0: entered allmulticast mode [ 365.518581][ T63] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 365.608889][ T7002] IPVS: stop unused estimator thread 0... [ 365.618925][T20562] netlink: 'syz.0.4248': attribute type 2 has an invalid length. [ 365.653027][ T24] IPVS: starting estimator thread 0... [ 365.657560][T20565] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 365.690453][ T40] audit: type=1400 audit(1773554328.536:1921): avc: denied { listen } for pid=20568 comm="syz.8.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 365.701622][ T6004] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 365.721261][ T6004] usb 12-1: device descriptor read/8, error -71 [ 365.760815][T20567] IPVS: using max 43 ests per chain, 103200 per kthread [ 365.782091][ T40] audit: type=1326 audit(1773554328.636:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20577 comm="syz.8.4254" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f946e19c799 code=0x7fdf0000 [ 365.941067][ T1347] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 365.961329][ T6004] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 365.981491][ T6004] usb 12-1: device descriptor read/8, error -71 [ 366.090817][ T1347] usb 5-1: Using ep0 maxpacket: 32 [ 366.091132][ T6004] usb usb12-port1: unable to enumerate USB device [ 366.094423][ T1347] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 366.099383][ T1347] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 366.103797][ T1347] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.107594][ T1347] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 366.114218][ T1347] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 366.117216][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.119922][ T1347] usb 5-1: Product: syz [ 366.122045][ T1347] usb 5-1: Manufacturer: syz [ 366.123702][ T1347] usb 5-1: SerialNumber: syz [ 366.130102][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 366.135537][ T1347] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input51 [ 366.350767][ T1347] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 366.353733][ T1347] (id 0x00) [ 366.400704][ T1347] rc_core: IR keymap rc-imon-pad not found [ 366.402823][ T1347] Registered IR keymap rc-empty [ 366.404488][ T1347] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 366.407793][ T1347] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 366.551344][ T1347] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 366.555548][ T1347] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input52 [ 366.564794][ T1347] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:39> initialized [ 366.722436][ T40] audit: type=1400 audit(1773554329.576:1923): avc: denied { write } for pid=20591 comm="syz.4.4259" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.747629][T20587] netlink: 'syz.8.4257': attribute type 32 has an invalid length. [ 366.750209][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4257'. [ 366.762671][T20587] bond3: Setting coupled_control to off (0) [ 366.785084][T20573] imon:send_packet: packet tx failed (-71) [ 366.785495][ T6003] usb 5-1: USB disconnect, device number 39 [ 366.810836][T20573] imon:vfd_write: send packet #0 failed [ 367.066874][T20606] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 367.213712][T20610] netlink: zone id is out of range [ 367.215450][T20610] netlink: zone id is out of range [ 367.217159][T20610] netlink: zone id is out of range [ 367.218932][T20610] netlink: zone id is out of range [ 367.220801][T20610] netlink: zone id is out of range [ 367.222623][T20610] netlink: zone id is out of range [ 367.224657][T20610] netlink: zone id is out of range [ 367.226494][T20610] netlink: zone id is out of range [ 367.228232][T20610] netlink: zone id is out of range [ 367.660783][ T5296] Bluetooth: hci2: command 0x0406 tx timeout [ 367.689482][ T40] audit: type=1400 audit(1773554330.536:1924): avc: denied { append } for pid=20629 comm="syz.7.4268" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 367.993088][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4273'. [ 367.996060][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4273'. [ 368.004754][ T1150] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.004824][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4273'. [ 368.008585][ T1150] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.015240][ T1150] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.019173][ T1150] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.146573][T20658] syzkaller0: entered promiscuous mode [ 368.148600][T20658] syzkaller0: entered allmulticast mode [ 368.533415][T20673] netlink: 'syz.8.4281': attribute type 1 has an invalid length. [ 368.536031][T20673] netlink: 'syz.8.4281': attribute type 1 has an invalid length. [ 368.591990][T19000] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 368.606161][T20675] mmap: syz.8.4282 (20675): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 368.785348][ T40] audit: type=1400 audit(1773554331.636:1925): avc: denied { lock } for pid=20685 comm="syz.4.4287" path="socket:[97972]" dev="sockfs" ino=97972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 368.793367][ T1150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.794322][ T1150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.794486][ T1150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.794506][ T1150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.807106][ T40] audit: type=1400 audit(1773554331.636:1926): avc: denied { lock } for pid=20685 comm="syz.4.4287" path="socket:[97972]" dev="sockfs" ino=97972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 369.642810][ T40] audit: type=1400 audit(1773554332.496:1927): avc: denied { validate_trans } for pid=20699 comm="syz.8.4291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 369.715815][T20703] __nla_validate_parse: 12 callbacks suppressed [ 369.715826][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4292'. [ 369.790291][T20713] net_ratelimit: 47 callbacks suppressed [ 369.790303][T20713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.104537][T20731] autofs4:pid:20731:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 370.109122][T20731] autofs4:pid:20731:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 370.173638][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4300'. [ 370.268577][ T5296] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 370.322315][ T40] audit: type=1400 audit(1773554333.176:1928): avc: denied { execute } for pid=20745 comm="syz.4.4301" path="/sys/kernel/debug/binder/failed_transaction_log" dev="debugfs" ino=6385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 370.483411][T20762] befs: (nullb0): No write support. Marking filesystem read-only [ 370.487458][T20762] befs: (nullb0): invalid magic header [ 370.518599][T20757] kvm: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 370.523570][T20757] kvm: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 370.547401][T20757] kvm: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 370.574734][T20757] kvm: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 370.578040][T20757] kvm: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 370.595781][T20757] kvm_intel: kvm [20756]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 370.779902][T20770] nbd: must specify an index to disconnect [ 370.783027][T20772] nbd: must specify an index to disconnect [ 370.883409][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 370.952965][T20783] netlink: 'syz.0.4308': attribute type 1 has an invalid length. [ 371.285828][T20799] FAT-fs (sr0): bogus number of reserved sectors [ 371.287034][T20800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6869 sclass=netlink_route_socket pid=20800 comm=syz.0.4315 [ 371.288740][T20799] FAT-fs (sr0): Can't find a valid FAT filesystem [ 371.387167][T20815] netlink: 'syz.4.4319': attribute type 1 has an invalid length. [ 371.390934][T20814] netlink: 'syz.4.4319': attribute type 1 has an invalid length. [ 371.459561][T20834] trusted_key: encrypted_key: master key parameter 'def0000000000000004093' is invalid [ 371.524646][ T40] audit: type=1400 audit(1773554334.376:1929): avc: denied { view } for pid=20833 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 371.525206][T20835] trusted_key: encrypted_key: insufficient parameters specified [ 371.539732][T20835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4323'. [ 371.696187][T20843] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4327'. [ 371.750972][ T5296] Bluetooth: hci0: command 0x0401 tx timeout [ 371.755367][ T63] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 371.794694][T20849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.797240][T20849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.807896][T20849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.810346][T20849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.096874][T20855] kvm: kvm [20854]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 372.101770][T20855] kvm: kvm [20854]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 372.101979][T20857] Cannot find set identified by id 0 to match [ 372.125471][T20855] kvm: kvm [20854]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 372.151881][T20855] kvm: kvm [20854]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 372.156366][T20855] kvm: kvm [20854]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 372.309184][T20861] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4334'. [ 372.330002][T20865] dlm: no locking on control device [ 372.378183][ T40] audit: type=1400 audit(1773554335.226:1930): avc: denied { add_name } for pid=20864 comm="syz.4.4336" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.387539][ T40] audit: type=1400 audit(1773554335.226:1931): avc: denied { create } for pid=20864 comm="syz.4.4336" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 372.396299][ T40] audit: type=1400 audit(1773554335.226:1932): avc: denied { associate } for pid=20864 comm="syz.4.4336" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 372.405888][ T40] audit: type=1400 audit(1773554335.226:1933): avc: denied { read append } for pid=20864 comm="syz.4.4336" name="cpuset.effective_cpus" dev="9p" ino=78643889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.413855][ T40] audit: type=1400 audit(1773554335.226:1934): avc: denied { open } for pid=20864 comm="syz.4.4336" path="/79/file0/cpuset.effective_cpus" dev="9p" ino=78643889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.422031][ T40] audit: type=1400 audit(1773554335.256:1935): avc: denied { write } for pid=20864 comm="syz.4.4336" name="cpuset.effective_cpus" dev="9p" ino=78643889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.427635][T20868] ip6erspan0: entered promiscuous mode [ 372.429524][ T40] audit: type=1400 audit(1773554335.266:1936): avc: denied { lock } for pid=20864 comm="syz.4.4336" path="/79/file0/cpuset.effective_cpus" dev="9p" ino=78643889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.578945][T20871] netlink: 'syz.0.4338': attribute type 1 has an invalid length. [ 372.592690][T20871] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.659854][T20876] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4340'. [ 372.762707][T20888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4339'. [ 373.017331][T20895] tmpfs: Unknown parameter '0x0000000000000003' [ 373.190790][ T9659] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 373.883442][T20931] BIDI support in bsg has been removed. [ 373.956430][T20935] sp0: Synchronizing with TNC [ 373.959636][T20935] [U] è [ 374.399547][T20957] bridge0: port 3(syz_tun) entered blocking state [ 374.402187][T20957] bridge0: port 3(syz_tun) entered disabled state [ 374.404276][T20957] syz_tun: entered allmulticast mode [ 374.407155][T20957] syz_tun: entered promiscuous mode [ 374.409071][T20957] bridge0: port 3(syz_tun) entered blocking state [ 374.411733][T20957] bridge0: port 3(syz_tun) entered forwarding state [ 374.467086][T20965] netlink: 'syz.7.4367': attribute type 1 has an invalid length. [ 374.488470][T20965] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 374.493163][T20965] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 374.512725][T20965] bond2: (slave ip6gre1): making interface the new active one [ 374.515611][T20965] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 374.522650][T20965] netlink: 200 bytes leftover after parsing attributes in process `syz.7.4367'. [ 374.581947][T20976] tmpfs: Bad value for 'mpol' [ 374.588240][T20975] tmpfs: Bad value for 'mpol' [ 374.644986][T20990] overlayfs: failed to resolve './file0': -2 [ 374.697991][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 374.698002][ T40] audit: type=1326 audit(1773554337.546:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20981 comm="syz.4.4371" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a3f59c799 code=0x0 [ 374.777198][T21004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4375'. [ 374.778847][ T40] audit: type=1400 audit(1773554337.626:1941): avc: denied { read append } for pid=21003 comm="syz.7.4375" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.791373][ T40] audit: type=1400 audit(1773554337.626:1942): avc: denied { open } for pid=21003 comm="syz.7.4375" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.908618][T21009] netlink: 'syz.7.4376': attribute type 1 has an invalid length. [ 374.929913][T21009] bond3: entered promiscuous mode [ 374.932074][T21009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.942562][T21009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.944960][T21009] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 374.948257][T21009] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 374.952748][T21012] 9p: Could not find request transport: Sd [ 374.957972][T21009] bond3: (slave xfrm1): making interface the new active one [ 374.960414][T21009] xfrm1: entered promiscuous mode [ 374.963017][T21009] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 375.072738][T21083] netlink: 'syz.0.4381': attribute type 63 has an invalid length. [ 375.076145][T21083] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4381'. [ 375.080000][T21083] gretap0: entered allmulticast mode [ 375.083673][T21083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.166694][ T40] audit: type=1326 audit(1773554338.016:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21111 comm="syz.7.4383" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8444d9c799 code=0x0 [ 375.382500][T21122] netlink: 'syz.0.4384': attribute type 3 has an invalid length. [ 375.388830][T21123] netlink: 'syz.0.4384': attribute type 3 has an invalid length. [ 375.392912][T21122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4384'. [ 375.392926][T21123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4384'. [ 375.516411][ T40] audit: type=1400 audit(1773554338.366:1944): avc: denied { setattr } for pid=21129 comm="syz.0.4387" name="NETLINK" dev="sockfs" ino=100948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 375.631733][T21145] binder: BINDER_SET_CONTEXT_MGR already set [ 375.634292][T21145] binder: 21144:21145 ioctl 4018620d 200000000240 returned -16 [ 375.637609][T21145] binder: BINDER_SET_CONTEXT_MGR already set [ 375.639502][T21146] binder_alloc_mmap_handler: 22 callbacks suppressed [ 375.639517][T21146] binder_alloc: binder_alloc_mmap_handler: 21144 200000ffd000-200001000000 already mapped failed -16 [ 375.640287][T21145] binder: 21144:21145 ioctl 4018620d 200000000240 returned -16 [ 375.640298][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640308][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640464][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640471][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640516][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640521][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640591][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640597][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640735][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640741][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640788][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640793][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640834][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640884][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640928][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640933][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.640972][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.640977][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641053][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641060][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641100][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641105][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641180][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641187][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641232][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641237][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641276][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641281][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641389][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641395][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641455][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641530][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641575][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641580][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641656][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641662][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641705][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641710][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641749][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641754][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641846][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641852][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641892][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641897][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.641993][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.641999][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642038][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642043][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642120][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642126][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642167][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642172][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642260][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642266][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642307][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642312][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642350][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642355][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642441][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642446][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642497][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642502][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642614][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642619][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642660][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642665][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642753][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642758][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642816][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642822][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642927][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642934][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.642975][T21147] binder: BINDER_SET_CONTEXT_MGR already set [ 375.642980][T21147] binder: 21144:21147 ioctl 4018620d 200000000040 returned -16 [ 375.643607][T21146] binder_alloc: binder_alloc_mmap_handler: 21144 200000ffd000-200001000000 already mapped failed -16 [ 375.705663][T21150] mkiss: ax0: crc mode is auto. [ 375.784454][ T9659] usb 13-1: unable to get BOS descriptor or descriptor too short [ 375.824088][ T9659] usb 13-1: no configurations [ 375.825622][ T9659] usb 13-1: can't read configurations, error -22 [ 375.853339][T21157] pimreg9: entered allmulticast mode [ 376.053584][T21165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46877 sclass=netlink_route_socket pid=21165 comm=syz.7.4398 [ 376.064673][T21168] netlink: 'syz.4.4399': attribute type 16 has an invalid length. [ 376.067690][T21168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4399'. [ 376.070554][T21168] veth1_macvtap: entered allmulticast mode [ 376.160977][ T9659] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 376.311007][ T9659] usb 13-1: Using ep0 maxpacket: 8 [ 376.314575][ T9659] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.318016][ T9659] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.321396][ T9659] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 376.324860][ T9659] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.329720][ T9659] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 376.331092][ T5984] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 376.333481][ T9659] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.461120][ T5984] usb 12-1: device descriptor read/64, error -71 [ 376.544004][ T9659] usb 13-1: GET_CAPABILITIES returned 0 [ 376.545973][ T9659] usbtmc 13-1:16.0: can't read capabilities [ 376.700788][ T5984] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 376.830975][ T5984] usb 12-1: device descriptor read/64, error -71 [ 376.865378][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.941114][ T5984] usb usb12-port1: attempt power cycle [ 377.155766][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4403'. [ 377.292504][ T5984] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 377.311645][ T5984] usb 12-1: device descriptor read/8, error -71 [ 377.353938][T21230] loop2: detected capacity change from 0 to 3 [ 377.357574][T16079] Dev loop2: unable to read RDB block 3 [ 377.359394][T16079] loop2: AHDI p1 p2 p3 [ 377.360823][T16079] loop2: partition table partially beyond EOD, truncated [ 377.363412][T16079] loop2: p1 start 1601398130 is beyond EOD, truncated [ 377.365576][T16079] loop2: p2 start 1702059890 is beyond EOD, truncated [ 377.369119][T21230] Dev loop2: unable to read RDB block 3 [ 377.371234][T21230] loop2: AHDI p1 p2 p3 [ 377.372699][T21230] loop2: partition table partially beyond EOD, truncated [ 377.375176][T21230] loop2: p1 start 1601398130 is beyond EOD, truncated [ 377.377492][T21230] loop2: p2 start 1702059890 is beyond EOD, truncated [ 377.410419][T21232] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4411'. [ 377.414076][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4411'. [ 377.445178][T21234] overlayfs: failed to resolve './file0': -2 [ 377.518393][T21236] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 377.520972][T21236] overlayfs: failed to set xattr on upper [ 377.522868][T21236] overlayfs: ...falling back to redirect_dir=nofollow. [ 377.525077][T21236] overlayfs: ...falling back to index=off. [ 377.526954][T21236] overlayfs: ...falling back to uuid=null. [ 377.561042][ T5984] usb 12-1: new full-speed USB device number 12 using dummy_hcd [ 377.582583][ T5984] usb 12-1: device descriptor read/8, error -71 [ 377.635401][ T40] audit: type=1326 audit(1773554340.486:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.0.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46b9c799 code=0x7ffc0000 [ 377.645886][ T40] audit: type=1326 audit(1773554340.486:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.0.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46b9c799 code=0x7ffc0000 [ 377.656465][ T40] audit: type=1326 audit(1773554340.486:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.0.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46b9c799 code=0x7ffc0000 [ 377.665941][ T40] audit: type=1326 audit(1773554340.486:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.0.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46b9c799 code=0x7ffc0000 [ 377.675465][ T40] audit: type=1326 audit(1773554340.486:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.0.4414" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46b9c799 code=0x7ffc0000 [ 377.691030][ T5984] usb usb12-port1: unable to enumerate USB device [ 377.694349][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 377.697536][T21242] netlink: 'syz.0.4415': attribute type 7 has an invalid length. [ 377.700149][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'. [ 377.704324][T21242] netlink: 'syz.0.4415': attribute type 7 has an invalid length. [ 377.772332][T21247] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.976488][T21254] netlink: 'syz.0.4418': attribute type 10 has an invalid length. [ 378.834221][T21102] usb 13-1: USB disconnect, device number 9 [ 378.912204][ T5296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.915735][ T5296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.918836][ T5296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.926964][ T5296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.929748][ T5296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.160457][T21292] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 379.206484][T21267] chnl_net:caif_netlink_parms(): no params data found [ 379.242910][ T7003] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.246373][ T7003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.278474][T21267] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.282840][T21267] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.286017][T21267] bridge_slave_0: entered allmulticast mode [ 379.289370][T21267] bridge_slave_0: entered promiscuous mode [ 379.294628][T21267] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.297679][T21267] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.300608][T21267] bridge_slave_1: entered allmulticast mode [ 379.304870][T21267] bridge_slave_1: entered promiscuous mode [ 379.328784][ T7003] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.334673][ T7003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.347564][T21267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.353286][T21267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.376671][T21267] team0: Port device team_slave_0 added [ 379.381113][T21267] team0: Port device team_slave_1 added [ 379.396276][ T7003] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.399868][ T7003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.417268][T21267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.420123][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.431222][T21267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.436743][T21267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.440173][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.452227][T21267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.461942][ T5984] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 379.490473][ T7003] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.493992][ T7003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.507184][T21267] hsr_slave_0: entered promiscuous mode [ 379.510217][T21267] hsr_slave_1: entered promiscuous mode [ 379.513491][T21267] debugfs: 'hsr0' already exists in 'hsr' [ 379.515858][T21267] Cannot create hsr debugfs directory [ 379.623402][ T5984] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 379.626351][ T5984] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.628948][ T5984] usb 12-1: Product: syz [ 379.630358][ T5984] usb 12-1: Manufacturer: syz [ 379.632796][ T5984] usb 12-1: SerialNumber: syz [ 379.645650][ T5984] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 379.684705][ T7003] bridge0: port 3(batadv0) entered disabled state [ 379.689845][ T7003] bridge_slave_1: left allmulticast mode [ 379.693368][ T7003] bridge_slave_1: left promiscuous mode [ 379.695304][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.697573][ T1463] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 379.704675][ T7003] bridge_slave_0: left allmulticast mode [ 379.706540][ T7003] bridge_slave_0: left promiscuous mode [ 379.708491][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.722483][ T7003] veth5: left allmulticast mode [ 379.724148][ T7003] veth5: left promiscuous mode [ 379.725811][ T7003] bridge6: port 1(veth5) entered disabled state [ 379.731274][ T7003] veth0_to_bond: left allmulticast mode [ 379.733088][ T7003] veth0_to_bond: left promiscuous mode [ 379.734946][ T7003] bridge8: port 2(veth0_to_bond) entered disabled state [ 379.740190][ T7003] veth7: left allmulticast mode [ 379.743025][ T7003] veth7: left promiscuous mode [ 379.744711][ T7003] bridge8: port 1(veth7) entered disabled state [ 379.827053][ T7003] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 379.829588][ T7003] xfrm1 (unregistering): left promiscuous mode [ 379.901314][ T9659] usb 12-1: USB disconnect, device number 13 [ 380.443257][ T7003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.446367][ T7003] bond_slave_0: left allmulticast mode [ 380.449946][ T7003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.453348][ T7003] bond_slave_1: left allmulticast mode [ 380.455886][ T7003] bond0 (unregistering): Released all slaves [ 380.467181][ T7003] bond1 (unregistering): Released all slaves [ 380.475598][ T7003] bond2 (unregistering): Released all slaves [ 380.491228][ T7003] bond3 (unregistering): Released all slaves [ 380.497919][ T7003] bond4 (unregistering): Released all slaves [ 380.507981][ T7003] bond5 (unregistering): Released all slaves [ 380.511451][T21317] netlink: 'syz.7.4437': attribute type 64 has an invalid length. [ 380.514221][T21317] netlink: 'syz.7.4437': attribute type 4 has an invalid length. [ 380.515592][ T7003] bond6 (unregistering): Released all slaves [ 380.516762][T21317] __nla_validate_parse: 3 callbacks suppressed [ 380.516771][T21317] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4437'. [ 380.524664][ T7003] bond7 (unregistering): Released all slaves [ 380.534628][ T7003] bond8 (unregistering): Released all slaves [ 380.541907][ T7003] bond9 (unregistering): Released all slaves [ 380.637794][ T7003] tipc: Disabling bearer [ 380.646029][ T7003] tipc: Left network mode [ 380.728050][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 380.728065][ T40] audit: type=1400 audit(1773554343.566:1989): avc: denied { write } for pid=21331 comm="syz.8.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.738884][ T40] audit: type=1400 audit(1773554343.566:1990): avc: denied { bind } for pid=21331 comm="syz.8.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.786701][ T1463] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 380.789263][ T1463] ath9k_htc: Failed to initialize the device [ 380.806152][ T9659] usb 12-1: ath9k_htc: USB layer deinitialized [ 380.940994][ T5296] Bluetooth: hci3: command tx timeout [ 380.972584][T21351] openvswitch: netlink: IP tunnel dst address not specified [ 380.982961][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4443'. [ 380.992934][ T6747] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.992959][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4443'. [ 380.995719][ T6747] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.004044][ T6747] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.006763][ T6747] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.037577][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4444'. [ 381.040809][T13479] usb 13-1: new low-speed USB device number 10 using dummy_hcd [ 381.202082][T13479] usb 13-1: Invalid ep0 maxpacket: 16 [ 381.298459][T21267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.316470][ T7003] hsr_slave_0: left promiscuous mode [ 381.328454][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.335217][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.343807][ T7003] veth1_macvtap: left promiscuous mode [ 381.346261][ T7003] veth0_macvtap: left promiscuous mode [ 381.348727][ T7003] veth1_vlan: left promiscuous mode [ 381.350882][T13479] usb 13-1: new low-speed USB device number 11 using dummy_hcd [ 381.352855][ T7003] veth0_vlan: left promiscuous mode [ 381.390947][ T6195] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 381.392835][ T7003] pimreg9 (unregistering): left allmulticast mode [ 381.487130][ T7003] team0 (unregistering): Port device team_slave_1 removed [ 381.494566][ T7003] team0 (unregistering): Port device team_slave_0 removed [ 381.520807][T13479] usb 13-1: Invalid ep0 maxpacket: 16 [ 381.523718][T13479] usb usb13-port1: attempt power cycle [ 381.550992][ T6195] usb 12-1: Using ep0 maxpacket: 8 [ 381.554619][ T6195] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.558254][ T6195] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.561612][ T6195] usb 12-1: config 0 interface 0 has no altsetting 0 [ 381.563809][ T6195] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 381.566996][ T6195] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.571354][ T6195] usb 12-1: config 0 descriptor?? [ 381.578619][T21267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.583765][T21267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.587981][T21267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.635019][T21267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.644263][T21267] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.650581][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.653008][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.658546][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.661077][ T7004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.769968][T21267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.806485][T21267] veth0_vlan: entered promiscuous mode [ 381.813412][T21267] veth1_vlan: entered promiscuous mode [ 381.832805][T21267] veth0_macvtap: entered promiscuous mode [ 381.837913][T21267] veth1_macvtap: entered promiscuous mode [ 381.848599][T21267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.859660][T21267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.868703][ T6747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.870836][T13479] usb 13-1: new low-speed USB device number 12 using dummy_hcd [ 381.871996][ T6747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.872444][ T7003] IPVS: stop unused estimator thread 0... [ 381.882387][ T6747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.885333][ T6747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.891662][T13479] usb 13-1: Invalid ep0 maxpacket: 16 [ 381.922836][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.925785][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.946821][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.953663][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.981900][ T6195] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 381.984229][ T6195] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 381.986545][ T6195] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 381.988800][ T6195] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 381.991928][ T6195] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 381.994708][ T6195] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 382.021648][T13479] usb 13-1: new low-speed USB device number 13 using dummy_hcd [ 382.041166][T13479] usb 13-1: Invalid ep0 maxpacket: 16 [ 382.042151][T21385] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 382.043113][T13479] usb usb13-port1: unable to enumerate USB device [ 382.069539][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4450'. [ 382.141636][T21391] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4452'. [ 382.180956][ T40] audit: type=1400 audit(1773554345.026:1991): avc: denied { setattr } for pid=21366 comm="syz.7.4447" name="file0" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.182851][T21367] fuse: Bad value for 'fd' [ 382.193563][ T40] audit: type=1400 audit(1773554345.036:1992): avc: denied { mounton } for pid=21366 comm="syz.7.4447" path="/176/file0" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.195277][ T6004] usb 12-1: USB disconnect, device number 14 [ 382.202706][ T40] audit: type=1400 audit(1773554345.046:1993): avc: denied { write } for pid=21366 comm="syz.7.4447" name="file0" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.213640][ T40] audit: type=1400 audit(1773554345.046:1994): avc: denied { open } for pid=21366 comm="syz.7.4447" path="/176/file0" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.276345][T21397] netlink: 'syz.0.4454': attribute type 10 has an invalid length. [ 382.278615][T21396] vlan2: entered allmulticast mode [ 382.281931][T21396] dummy0: entered allmulticast mode [ 382.284615][T21396] bridge0: port 3(vlan2) entered blocking state [ 382.286683][T21396] bridge0: port 3(vlan2) entered disabled state [ 382.289637][T21396] vlan2: entered promiscuous mode [ 382.291781][T21396] dummy0: entered promiscuous mode [ 382.300428][T21397] bridge0: port 3(vlan2) entered blocking state [ 382.304147][T21397] bridge0: port 3(vlan2) entered forwarding state [ 382.312254][T21397] team0: Port device dummy0 added [ 382.443294][ T40] audit: type=1800 audit(1773554345.296:1995): pid=21405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4456" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 382.745968][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'. [ 382.750002][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4458'. [ 382.753968][T21415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4458'. [ 382.868513][T21422] fuse: Unknown parameter 'fd"0x000000000000000b' [ 382.868772][T21429] binder: 21428:21429 ioctl c0306201 2000000001c0 returned -14 [ 383.020561][T21439] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4465'. [ 383.031370][ T5296] Bluetooth: hci3: command tx timeout [ 383.092752][ T40] audit: type=1400 audit(1773554345.946:1996): avc: denied { connect } for pid=21445 comm="syz.7.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.099393][ T40] audit: type=1400 audit(1773554345.946:1997): avc: denied { ioctl } for pid=21445 comm="syz.7.4467" path="socket:[105544]" dev="sockfs" ino=105544 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.216480][T21456] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.502791][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.506456][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.515082][ T40] audit: type=1400 audit(1773554346.366:1998): avc: denied { setattr } for pid=21487 comm="syz.7.4481" name="/" dev="9p" ino=78643851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.161955][T21513] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 385.100782][ T5296] Bluetooth: hci3: command tx timeout [ 385.427004][T21523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 385.429891][T21523] overlayfs: missing 'lowerdir' [ 385.541076][T21525] delete_channel: no stack [ 385.617187][T21529] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 385.675204][T21533] netlink: 'syz.8.4495': attribute type 9 has an invalid length. [ 385.677794][T21533] netlink: 'syz.8.4495': attribute type 11 has an invalid length. [ 385.680371][T21533] netlink: 'syz.8.4495': attribute type 12 has an invalid length. [ 385.683572][T21533] __nla_validate_parse: 3 callbacks suppressed [ 385.683581][T21533] netlink: 211736 bytes leftover after parsing attributes in process `syz.8.4495'. [ 385.728091][T21536] netlink: zone id is out of range [ 385.729821][T21536] netlink: zone id is out of range [ 385.731636][T21536] netlink: zone id is out of range [ 385.733388][T21536] netlink: zone id is out of range [ 385.735046][T21536] netlink: zone id is out of range [ 385.736730][T21536] netlink: zone id is out of range [ 385.738412][T21536] netlink: zone id is out of range [ 385.740075][T21536] netlink: zone id is out of range [ 386.085184][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 386.325397][T21545] gfs2: error -5 reading superblock [ 386.326040][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 386.326054][ T40] audit: type=1400 audit(1773554349.176:2003): avc: denied { mounton } for pid=21541 comm="syz.8.4498" path="/syzcgroup/unified/syz8" dev="pstore" ino=5952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 386.564979][ T40] audit: type=1400 audit(1773554349.416:2004): avc: denied { read } for pid=21551 comm="syz.7.4501" name="file0" dev="9p" ino=78643913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 386.570764][T21555] 9pnet_virtio: no channels available for device syz [ 386.574861][T21552] syzkaller1: entered promiscuous mode [ 386.574875][T21552] syzkaller1: entered allmulticast mode [ 386.659896][T21559] netlink: 'syz.0.4503': attribute type 4 has an invalid length. [ 386.705654][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 386.868231][T21577] netlink: 'syz.4.4508': attribute type 1 has an invalid length. [ 386.908265][ T40] audit: type=1800 audit(1773554349.756:2005): pid=21580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4510" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 387.029227][T21590] SELinux: ebitmap start bit (4278255616) is beyond the end of the bitmap (320) [ 387.032549][T21590] SELinux: failed to load policy [ 387.190844][ T5296] Bluetooth: hci3: command tx timeout [ 387.193649][T21611] syzkaller0: entered promiscuous mode [ 387.195552][T21611] syzkaller0: entered allmulticast mode [ 387.788319][T21614] net_ratelimit: 1 callbacks suppressed [ 387.788339][T21614] openvswitch: netlink: Missing valid actions attribute. [ 387.792645][T21614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.841603][T21616] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 388.106509][ T40] audit: type=1400 audit(1773554350.956:2006): avc: denied { map } for pid=21617 comm="syz.4.4522" path="socket:[103308]" dev="sockfs" ino=103308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.164263][T21652] loop2: detected capacity change from 0 to 7 [ 389.169496][T16047] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 389.172941][T16047] loop2: partition table partially beyond EOD, truncated [ 389.177176][T16047] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 389.187561][T16047] loop2: p2 start 445263249 is beyond EOD, truncated [ 389.196271][T21652] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 389.198832][T21652] loop2: partition table partially beyond EOD, truncated [ 389.201508][T21652] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 389.205183][T21652] loop2: p2 start 445263249 is beyond EOD, truncated [ 389.247921][T16047] udevd[16047]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 389.262575][T16079] udevd[16079]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 389.313641][T21656] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 389.368750][ T5296] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 389.521749][T21677] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4539'. [ 389.521828][T21680] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4539'. [ 389.532991][T21677] netlink: 'syz.8.4539': attribute type 12 has an invalid length. [ 389.571993][T21683] rpc_pipefs: Unknown parameter 'discard' [ 389.980104][T21701] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4548'. [ 390.040973][T13479] Process accounting resumed [ 390.053466][T21708] input: syz0 as /devices/virtual/input/input54 [ 390.301324][ T40] audit: type=1326 audit(1773554353.146:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.308679][ T40] audit: type=1326 audit(1773554353.146:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.324704][ T6004] usb 12-1: new full-speed USB device number 15 using dummy_hcd [ 390.327627][ T40] audit: type=1326 audit(1773554353.156:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.337010][T21732] netlink: 'syz.8.4557': attribute type 63 has an invalid length. [ 390.337633][T21733] netlink: 'syz.8.4557': attribute type 63 has an invalid length. [ 390.340763][ T40] audit: type=1326 audit(1773554353.156:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.350496][ T40] audit: type=1326 audit(1773554353.156:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.357827][ T40] audit: type=1326 audit(1773554353.156:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 390.402888][T21732] netlink: 'syz.8.4557': attribute type 4 has an invalid length. [ 390.485877][ T6004] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.491959][ T6004] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 390.497132][ T6004] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 390.502971][ T6004] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.521557][ T6004] usb 12-1: config 0 descriptor?? [ 390.529371][ T6004] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 390.534991][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 390.541356][ T6004] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 390.548685][ T6004] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 390.551472][ T6004] usb 12-1: media controller created [ 390.553936][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.567084][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 390.569004][ T6004] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 390.573766][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input55 [ 390.578694][ T6004] dvb-usb: schedule remote query interval to 150 msecs. [ 390.590918][ T6004] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 390.673700][T21738] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 390.734010][T21102] usb 12-1: USB disconnect, device number 15 [ 390.745832][T21102] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 391.156472][T21755] syzkaller1: entered promiscuous mode [ 391.158946][T21755] syzkaller1: entered allmulticast mode [ 391.257200][T21757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=21757 comm=syz.7.4564 [ 391.330716][ T40] kauditd_printk_skb: 10003 callbacks suppressed [ 391.330727][ T40] audit: type=1326 audit(1773554354.176:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.345926][ T40] audit: type=1326 audit(1773554354.186:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.354498][ T40] audit: type=1326 audit(1773554354.196:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.362075][ T40] audit: type=1326 audit(1773554354.196:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.369477][ T40] audit: type=1326 audit(1773554354.196:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.377085][ T40] audit: type=1326 audit(1773554354.196:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.389335][ T40] audit: type=1326 audit(1773554354.196:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.397140][ T40] audit: type=1326 audit(1773554354.196:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.409623][ T40] audit: type=1326 audit(1773554354.196:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.417196][ T40] audit: type=1326 audit(1773554354.196:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.4.4556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3f59c799 code=0x50000 [ 391.580513][T21769] input: syz1 as /devices/virtual/input/input56 [ 391.645430][T21773] input: syz0 as /devices/virtual/input/input57 [ 391.670021][T21772] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 391.685766][T21772] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 391.701632][T21772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4570'. [ 391.772284][T21778] GUP no longer grows the stack in syz.8.4572 (21778): 200000006000-200000008000 (200000004000) [ 391.776601][T21778] CPU: 2 UID: 0 PID: 21778 Comm: syz.8.4572 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.776621][T21778] Tainted: [L]=SOFTLOCKUP [ 391.776625][T21778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.776632][T21778] Call Trace: [ 391.776641][T21778] [ 391.776646][T21778] dump_stack_lvl+0x100/0x190 [ 391.776694][T21778] gup_vma_lookup.cold+0x83/0x96 [ 391.776711][T21778] fixup_user_fault+0x253/0x510 [ 391.776725][T21778] fault_in_user_writeable+0x70/0xe0 [ 391.776744][T21778] futex_lock_pi+0x682/0x7b0 [ 391.776759][T21778] ? __pfx_futex_lock_pi+0x10/0x10 [ 391.776787][T21778] ? __pfx___futex_wait+0x10/0x10 [ 391.776801][T21778] ? lockdep_hardirqs_on+0x78/0x100 [ 391.776834][T21778] ? __pfx_futex_wake_mark+0x10/0x10 [ 391.776851][T21778] ? vfs_write+0x911/0x1070 [ 391.776868][T21778] ? vfs_write+0x15d/0x1070 [ 391.776884][T21778] ? __pfx_dev_write+0x10/0x10 [ 391.776905][T21778] do_futex+0x18a/0x350 [ 391.776916][T21778] ? __pfx_do_futex+0x10/0x10 [ 391.776930][T21778] __x64_sys_futex+0x34f/0x4d0 [ 391.776944][T21778] ? __pfx___x64_sys_futex+0x10/0x10 [ 391.776960][T21778] do_syscall_64+0x106/0xf80 [ 391.776973][T21778] ? clear_bhb_loop+0x40/0x90 [ 391.776988][T21778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.777000][T21778] RIP: 0033:0x7f946e19c799 [ 391.777010][T21778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.777037][T21778] RSP: 002b:00007f946efb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 391.777048][T21778] RAX: ffffffffffffffda RBX: 00007f946e415fa0 RCX: 00007f946e19c799 [ 391.777055][T21778] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 391.777062][T21778] RBP: 00007f946e232c99 R08: 0000000000000000 R09: 0000000000000000 [ 391.777068][T21778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.777075][T21778] R13: 00007f946e416038 R14: 00007f946e415fa0 R15: 00007ffeac15fb48 [ 391.777090][T21778] [ 391.867025][T21783] netlink: 212916 bytes leftover after parsing attributes in process `syz.8.4574'. [ 391.867803][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4575'. [ 391.903770][T21785] : entered promiscuous mode [ 391.959720][T21792] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.966798][T21792] nbd: must specify an index to disconnect [ 392.250246][T21817] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 392.265915][T21818] bridge_slave_0: left allmulticast mode [ 392.268386][T21818] bridge_slave_0: left promiscuous mode [ 392.270435][T21818] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.278235][T21818] bridge_slave_1: left allmulticast mode [ 392.280202][T21818] bridge_slave_1: left promiscuous mode [ 392.283971][T21818] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.289714][T21818] bond0: (slave bond_slave_0): Releasing backup interface [ 392.298445][T21818] bond0: (slave bond_slave_1): Releasing backup interface [ 392.314987][T21818] team0: Port device team_slave_0 removed [ 392.322124][T21818] team0: Port device team_slave_1 removed [ 392.324613][T21818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.327355][T21818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.332245][T21818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.335264][T21818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.339257][T21818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.501151][T21820] XFS (nbd0): SB validate failed with error -5. [ 392.521603][ T25] block nbd0: Attempted send on invalid socket [ 392.524488][ T25] blk_print_req_error: 25 callbacks suppressed [ 392.524500][ T25] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 392.895336][T21862] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 393.013792][T21867] tipc: Started in network mode [ 393.016247][T21867] tipc: Node identity ac14140f, cluster identity 4711 [ 393.019741][T21867] tipc: New replicast peer: 255.255.255.255 [ 393.023198][T21867] tipc: Enabled bearer , priority 10 [ 393.064865][T21871] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 393.214131][T21876] Cannot find add_set index 0 as target [ 393.485439][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 393.488479][T21899] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4604'. [ 393.503951][T21899] netlink: 'syz.8.4604': attribute type 19 has an invalid length. [ 393.506562][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4604'. [ 393.510022][T21899] netlink: 'syz.8.4604': attribute type 19 has an invalid length. [ 393.516745][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4604'. [ 393.520723][T21903] Failed to get privilege flags for destination (handle=0x2:0x156) [ 393.610535][T21910] netlink: 'syz.0.4608': attribute type 1 has an invalid length. [ 393.640575][T21910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.665777][T21910] bond1: (slave geneve2): making interface the new active one [ 393.682555][T21910] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 393.686232][ T6747] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.693077][ T6747] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.698426][ T6747] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.706833][ T6747] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.737130][T21923] netlink: 'syz.4.4611': attribute type 3 has an invalid length. [ 393.953655][T21939] sp0: Synchronizing with TNC [ 393.957730][T21938] [U] è`` [ 394.018091][T21948] netlink: 'syz.7.4621': attribute type 13 has an invalid length. [ 394.040758][T21100] tipc: Node number set to 2886997007 [ 394.254414][ T7003] Bluetooth: hci4: Frame reassembly failed (-84) [ 394.257023][ T1208] Bluetooth: hci4: Frame reassembly failed (-84) [ 394.414073][T22004] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4639'. [ 394.857091][T22033] vlan4: entered allmulticast mode [ 394.858835][T22033] dummy0: entered allmulticast mode [ 394.860961][T22033] bridge0: port 4(vlan4) entered blocking state [ 394.863407][T22033] bridge0: port 4(vlan4) entered disabled state [ 394.866614][T22033] vlan4: entered promiscuous mode [ 394.868467][T22033] dummy0: entered promiscuous mode [ 394.926501][T22034] netlink: 'syz.7.4647': attribute type 10 has an invalid length. [ 394.934719][T22034] bridge0: port 4(vlan4) entered blocking state [ 394.936808][T22034] bridge0: port 4(vlan4) entered forwarding state [ 394.940019][T22034] team0: Port device dummy0 added [ 395.091210][T22038] can0: slcan on ttynull. [ 395.151863][T22037] can0 (unregistered): slcan off ttynull. [ 395.335172][T22048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4653'. [ 395.429401][T22064] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 395.995768][T22091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.301738][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.349634][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.354064][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.357752][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.362661][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.366281][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.369864][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.374043][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.377706][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.381996][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.385690][T22105] binder_alloc: binder_alloc_mmap_handler: 22103 200000ffd000-200001000000 already mapped failed -16 [ 396.446253][T22110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 396.468557][T22106] overlayfs: failed to resolve './bus/file0': -2 [ 396.949812][T22140] netlink: 'syz.4.4680': attribute type 10 has an invalid length. [ 396.952647][T22140] __nla_validate_parse: 1 callbacks suppressed [ 396.952656][T22140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4680'. [ 396.973151][T22140] team0: entered promiscuous mode [ 396.974886][T22140] team_slave_0: entered promiscuous mode [ 396.976829][T22140] team_slave_1: entered promiscuous mode [ 396.978912][T22140] team0: entered allmulticast mode [ 396.980674][T22140] team_slave_0: entered allmulticast mode [ 396.982709][T22140] team_slave_1: entered allmulticast mode [ 396.985010][T22140] bridge0: port 3(team0) entered blocking state [ 396.987160][T22140] bridge0: port 3(team0) entered disabled state [ 396.990462][T22140] bridge0: port 3(team0) entered blocking state [ 396.992611][T22140] bridge0: port 3(team0) entered forwarding state [ 397.431512][T22154] overlayfs: workdir and upperdir must be separate subtrees [ 397.438969][ T40] kauditd_printk_skb: 14830 callbacks suppressed [ 397.438981][ T40] audit: type=1400 audit(1773554360.286:26856): avc: denied { mounton } for pid=22153 comm="syz.8.4684" path="/186/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 397.507594][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4687'. [ 397.517408][T22160] netlink: 'syz.8.4687': attribute type 3 has an invalid length. [ 397.521890][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4687'. [ 397.526480][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4687'. [ 397.529996][T22160] netlink: 'syz.8.4687': attribute type 3 has an invalid length. [ 397.533132][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4687'. [ 397.768466][T22182] delete_channel: no stack [ 397.781256][ T40] audit: type=1400 audit(1773554360.636:26857): avc: denied { remount } for pid=22187 comm="syz.0.4696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 397.789023][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4695'. [ 397.872579][T22200] netlink: 'syz.0.4699': attribute type 30 has an invalid length. [ 398.066493][T22225] XFS (nbd7): SB validate failed with error -5. [ 398.161403][T22222] bridge0: port 4(syz_tun) entered blocking state [ 398.167503][T22222] bridge0: port 4(syz_tun) entered disabled state [ 398.169766][T22222] syz_tun: entered allmulticast mode [ 398.178011][T22222] syz_tun: entered promiscuous mode [ 398.180042][T22222] bridge0: port 4(syz_tun) entered blocking state [ 398.182256][T22222] bridge0: port 4(syz_tun) entered forwarding state [ 398.222643][T22246] vcan0: tx drop: invalid sa for name 0x0000000000000101 [ 398.299702][ T40] audit: type=1400 audit(1773554361.146:26858): avc: denied { shutdown } for pid=22261 comm="syz.4.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 398.306435][ T40] audit: type=1400 audit(1773554361.156:26859): avc: denied { read } for pid=22261 comm="syz.4.4720" path="socket:[109931]" dev="sockfs" ino=109931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 398.335983][T22265] SELinux: ebitmap: truncated map [ 398.354128][T22265] SELinux: failed to load policy [ 398.366743][T22252] lo speed is unknown, defaulting to 1000 [ 398.369442][T22252] lo speed is unknown, defaulting to 1000 [ 398.372383][T22252] lo speed is unknown, defaulting to 1000 [ 398.375969][T22252] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 398.384525][T22252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 398.401534][ T40] audit: type=1400 audit(1773554361.246:26860): avc: denied { connect } for pid=22274 comm="syz.4.4725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.406184][T22252] lo speed is unknown, defaulting to 1000 [ 398.411641][T22252] lo speed is unknown, defaulting to 1000 [ 398.417275][T22252] lo speed is unknown, defaulting to 1000 [ 398.419922][T22252] lo speed is unknown, defaulting to 1000 [ 398.424042][T22252] lo speed is unknown, defaulting to 1000 [ 398.426652][T22252] lo speed is unknown, defaulting to 1000 [ 398.429292][T22252] lo speed is unknown, defaulting to 1000 [ 398.431951][T22252] lo speed is unknown, defaulting to 1000 [ 398.441613][T22252] lo speed is unknown, defaulting to 1000 [ 398.443920][ T40] audit: type=1400 audit(1773554361.296:26861): avc: denied { listen } for pid=22281 comm="syz.4.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.507774][T22288] syzkaller0: entered promiscuous mode [ 398.509604][T22288] syzkaller0: entered allmulticast mode [ 398.804195][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4736'. [ 398.830391][T22303] lo speed is unknown, defaulting to 1000 [ 398.837268][T22310] veth0: entered promiscuous mode [ 398.839315][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4736'. [ 399.010817][T13479] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 399.173010][T13479] usb 5-1: config 0 has no interfaces? [ 399.177360][T13479] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 399.181651][T13479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.184780][T13479] usb 5-1: Product: syz [ 399.186208][T13479] usb 5-1: Manufacturer: syz [ 399.187787][T13479] usb 5-1: SerialNumber: syz [ 399.191270][T13479] usb 5-1: config 0 descriptor?? [ 399.364570][ T40] audit: type=1400 audit(1773554362.216:26862): avc: denied { mount } for pid=22317 comm="syz.8.4738" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 399.372562][T22318] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 399.372655][ T40] audit: type=1400 audit(1773554362.226:26863): avc: denied { mounton } for pid=22317 comm="syz.8.4738" path="/191/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 399.455086][T13479] usb 5-1: USB disconnect, device number 40 [ 399.611609][ T1463] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 399.741068][ T1463] usb 13-1: device descriptor read/64, error -71 [ 399.981260][ T1463] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 399.998480][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4740'. [ 400.125189][ T1463] usb 13-1: device descriptor read/64, error -71 [ 400.134364][T22337] syzkaller0: entered promiscuous mode [ 400.136289][T22337] syzkaller0: entered allmulticast mode [ 400.143014][T22337] tipc: Started in network mode [ 400.144733][T22337] tipc: Node identity f23985300389, cluster identity 4711 [ 400.147186][T22337] tipc: Enabled bearer , priority 0 [ 400.155047][T22336] tipc: Resetting bearer [ 400.170916][T22336] tipc: Disabling bearer [ 400.231262][ T1463] usb usb13-port1: attempt power cycle [ 400.258648][T22340] netlink: 'syz.7.4745': attribute type 1 has an invalid length. [ 400.270369][T22340] bond4: entered promiscuous mode [ 400.272583][T22340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.288664][T22340] macvtap1: entered allmulticast mode [ 400.304533][T22340] bond4: (slave bridge5): making interface the new active one [ 400.307960][T22340] bridge5: entered promiscuous mode [ 400.311620][T22340] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 400.322985][T22340] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=4 [ 400.349988][T22351] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 400.362458][ T40] audit: type=1400 audit(1773554363.206:26864): avc: denied { read } for pid=22349 comm="syz.0.4747" path="socket:[110089]" dev="sockfs" ino=110089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 400.533656][T22354] openvswitch: netlink: Missing key (keys=40, expected=80) [ 400.570853][ T1463] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 400.591254][ T1463] usb 13-1: device descriptor read/8, error -71 [ 400.609035][T22358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4749'. [ 400.652544][ T63] block nbd0: Receive control failed (result -1) [ 400.842044][ T1463] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 400.882800][ T1463] usb 13-1: device descriptor read/8, error -71 [ 400.985463][T22364] binder: 22363:22364 ioctl 40305829 200000000000 returned -22 [ 400.989828][T22364] binder: 22363:22364 ioctl c0306201 2000000001c0 returned -14 [ 401.002061][ T1463] usb usb13-port1: unable to enumerate USB device [ 401.637432][ T40] audit: type=1400 audit(1773554364.486:26865): avc: denied { map } for pid=22387 comm="syz.4.4760" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.002182][T13479] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 402.054793][T22419] vivid-000: kernel_thread() failed [ 402.150780][T13479] usb 5-1: Using ep0 maxpacket: 8 [ 402.153785][T13479] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.156986][T13479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.160457][T13479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.163797][T13479] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.167985][T13479] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.171322][T13479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.379132][T13479] usb 5-1: GET_CAPABILITIES returned 0 [ 402.381274][T13479] usbtmc 5-1:16.0: can't read capabilities [ 402.471375][T22432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.474389][T22432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.540881][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 402.554867][ T5296] [ 402.556028][ T5296] ====================================================== [ 402.559112][ T5296] WARNING: possible circular locking dependency detected [ 402.562233][ T5296] syzkaller #0 Tainted: G L [ 402.564932][ T5296] ------------------------------------------------------ [ 402.567874][ T5296] kworker/u33:1/5296 is trying to acquire lock: [ 402.570615][ T5296] ffff88801caf6a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0xa3/0x320 [ 402.575365][ T5296] [ 402.575365][ T5296] but task is already holding lock: [ 402.578334][ T5296] ffff88801caf6988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0xf0 [ 402.582001][ T5296] [ 402.582001][ T5296] which lock already depends on the new lock. [ 402.582001][ T5296] [ 402.586536][ T5296] [ 402.586536][ T5296] the existing dependency chain (in reverse order) is: [ 402.589543][ T5296] [ 402.589543][ T5296] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 402.592130][ T5296] down_write+0x8b/0x1f0 [ 402.593727][ T5296] kernfs_add_one+0x38/0x850 [ 402.595397][ T5296] kernfs_create_dir_ns+0xfc/0x1a0 [ 402.597380][ T5296] internal_create_group+0x36f/0xf40 [ 402.599600][ T5296] cpuhp_invoke_callback+0x3ab/0x9a0 [ 402.601980][ T5296] cpuhp_issue_call+0x1b8/0x970 [ 402.604404][ T5296] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 402.607274][ T5296] __cpuhp_setup_state+0xf4/0x300 [ 402.609714][ T5296] do_one_initcall+0x11d/0x760 [ 402.612060][ T5296] kernel_init_freeable+0x6e5/0x7a0 [ 402.614601][ T5296] kernel_init+0x1f/0x1e0 [ 402.616743][ T5296] ret_from_fork+0x754/0xd80 [ 402.618993][ T5296] ret_from_fork_asm+0x1a/0x30 [ 402.621338][ T5296] [ 402.621338][ T5296] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 402.624900][ T5296] [ 402.624900][ T5296] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 402.628221][ T5296] cpus_read_lock+0x42/0x170 [ 402.630468][ T5296] static_key_slow_inc+0x12/0x30 [ 402.632825][ T5296] setup_udp_tunnel_sock+0x542/0x680 [ 402.635436][ T5296] l2tp_tunnel_register+0xa01/0xc00 [ 402.637950][ T5296] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 402.640855][ T5296] pppol2tp_connect+0xaf0/0x1c20 [ 402.643169][ T5296] __sys_connect_file+0x141/0x1a0 [ 402.645615][ T5296] __sys_connect+0x141/0x170 [ 402.647861][ T5296] __x64_sys_connect+0x72/0xb0 [ 402.650185][ T5296] do_syscall_64+0x106/0xf80 [ 402.652412][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.655209][ T5296] [ 402.655209][ T5296] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 402.658501][ T5296] lock_sock_nested+0x41/0xf0 [ 402.660784][ T5296] inet_shutdown+0x67/0x410 [ 402.662981][ T5296] nbd_mark_nsock_dead+0xae/0x5c0 [ 402.665455][ T5296] recv_work+0x5fb/0x8c0 [ 402.667583][ T5296] process_one_work+0xa23/0x19a0 [ 402.669980][ T5296] worker_thread+0x5ef/0xe50 [ 402.672167][ T5296] kthread+0x370/0x450 [ 402.674144][ T5296] ret_from_fork+0x754/0xd80 [ 402.676322][ T5296] ret_from_fork_asm+0x1a/0x30 [ 402.678635][ T5296] [ 402.678635][ T5296] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 402.681938][ T5296] __mutex_lock+0x1a2/0x1b90 [ 402.684246][ T5296] nbd_queue_rq+0x428/0x1080 [ 402.686514][ T5296] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 402.689151][ T5296] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 402.692148][ T5296] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 402.694970][ T5296] blk_mq_run_hw_queue+0x23c/0x670 [ 402.697418][ T5296] blk_mq_dispatch_list+0x51d/0x1360 [ 402.699989][ T5296] blk_mq_flush_plug_list+0x130/0x600 [ 402.702612][ T5296] __blk_flush_plug+0x2c4/0x4b0 [ 402.704992][ T5296] __submit_bio+0x584/0x6c0 [ 402.707252][ T5296] submit_bio_noacct_nocheck+0x562/0xc10 [ 402.709970][ T5296] submit_bio_noacct+0xd17/0x2010 [ 402.712421][ T5296] submit_bh_wbc+0x59c/0x770 [ 402.714691][ T5296] block_read_full_folio+0x264/0x8e0 [ 402.717273][ T5296] filemap_read_folio+0xfc/0x3b0 [ 402.719587][ T5296] do_read_cache_folio+0x2d7/0x6b0 [ 402.720960][ T1347] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 402.722066][ T5296] read_part_sector+0xd1/0x370 [ 402.722087][ T5296] adfspart_check_ICS+0x93/0x910 [ 402.729295][ T5296] bdev_disk_changed+0x7f8/0xc80 [ 402.731681][ T5296] blkdev_get_whole+0x187/0x290 [ 402.733833][ T5296] bdev_open+0x2c7/0xe40 [ 402.735405][ T5296] blkdev_open+0x34e/0x4f0 [ 402.737027][ T5296] do_dentry_open+0x6d8/0x1660 [ 402.738795][ T5296] vfs_open+0x82/0x3f0 [ 402.740778][ T5296] path_openat+0x208c/0x31a0 [ 402.743048][ T5296] do_file_open+0x20e/0x430 [ 402.744755][ T5296] do_sys_openat2+0x10d/0x1e0 [ 402.746471][ T5296] __x64_sys_openat+0x12d/0x210 [ 402.748554][ T5296] do_syscall_64+0x106/0xf80 [ 402.750834][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.753591][ T5296] [ 402.753591][ T5296] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 402.755913][ T5296] __mutex_lock+0x1a2/0x1b90 [ 402.757709][ T5296] nbd_queue_rq+0xba/0x1080 [ 402.759948][ T5296] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 402.762677][ T5296] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 402.765136][ T5296] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 402.767262][ T5296] blk_mq_run_hw_queue+0x23c/0x670 [ 402.769245][ T5296] blk_mq_dispatch_list+0x51d/0x1360 [ 402.771848][ T5296] blk_mq_flush_plug_list+0x130/0x600 [ 402.774309][ T5296] __blk_flush_plug+0x2c4/0x4b0 [ 402.776037][ T5296] __submit_bio+0x584/0x6c0 [ 402.777711][ T5296] submit_bio_noacct_nocheck+0x562/0xc10 [ 402.779699][ T5296] submit_bio_noacct+0xd17/0x2010 [ 402.781273][T13479] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 402.781511][ T5296] submit_bh_wbc+0x59c/0x770 [ 402.781527][ T5296] block_read_full_folio+0x264/0x8e0 [ 402.781542][ T5296] filemap_read_folio+0xfc/0x3b0 [ 402.790268][ T5296] do_read_cache_folio+0x2d7/0x6b0 [ 402.792788][ T5296] read_part_sector+0xd1/0x370 [ 402.794884][ T5296] adfspart_check_ICS+0x93/0x910 [ 402.796634][ T5296] bdev_disk_changed+0x7f8/0xc80 [ 402.798722][ T5296] blkdev_get_whole+0x187/0x290 [ 402.801093][ T5296] bdev_open+0x2c7/0xe40 [ 402.803242][ T5296] blkdev_open+0x34e/0x4f0 [ 402.805443][ T5296] do_dentry_open+0x6d8/0x1660 [ 402.807665][ T5296] vfs_open+0x82/0x3f0 [ 402.809176][ T5296] path_openat+0x208c/0x31a0 [ 402.810875][ T5296] do_file_open+0x20e/0x430 [ 402.812522][ T5296] do_sys_openat2+0x10d/0x1e0 [ 402.814368][ T5296] __x64_sys_openat+0x12d/0x210 [ 402.816701][ T5296] do_syscall_64+0x106/0xf80 [ 402.818547][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.821136][ T5296] [ 402.821136][ T5296] -> #4 (set->srcu){.+.+}-{0:0}: [ 402.824257][ T5296] __synchronize_srcu+0xa1/0x2a0 [ 402.826524][ T5296] blk_mq_quiesce_queue+0x149/0x1c0 [ 402.828868][ T5296] elevator_switch+0x17b/0x7e0 [ 402.830621][ T5296] elevator_change+0x352/0x530 [ 402.832349][ T5296] elevator_set_default+0x29e/0x360 [ 402.834537][ T5296] blk_register_queue+0x412/0x590 [ 402.836952][ T5296] __add_disk+0x73f/0xe40 [ 402.838992][ T5296] add_disk_fwnode+0x118/0x5c0 [ 402.841299][ T5296] nbd_dev_add+0x77a/0xb10 [ 402.842900][ T5296] nbd_init+0x291/0x2b0 [ 402.844435][ T5296] do_one_initcall+0x11d/0x760 [ 402.846180][ T5296] kernel_init_freeable+0x6e5/0x7a0 [ 402.848265][ T5296] kernel_init+0x1f/0x1e0 [ 402.850442][ T5296] ret_from_fork+0x754/0xd80 [ 402.852261][ T5296] ret_from_fork_asm+0x1a/0x30 [ 402.853993][ T5296] [ 402.853993][ T5296] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 402.856552][ T5296] __mutex_lock+0x1a2/0x1b90 [ 402.858257][ T5296] elevator_change+0x1bc/0x530 [ 402.859966][ T5296] elevator_set_none+0x92/0xf0 [ 402.861696][ T5296] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 402.863767][ T5296] nbd_start_device+0x1a6/0xbd0 [ 402.865536][ T5296] nbd_ioctl+0x4a6/0xd30 [ 402.867103][ T5296] blkdev_ioctl+0x5ad/0x6f0 [ 402.869283][ T5296] __x64_sys_ioctl+0x18e/0x210 [ 402.871057][ T5296] do_syscall_64+0x106/0xf80 [ 402.871812][ T1347] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 402.872731][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.872746][ T5296] [ 402.872746][ T5296] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 402.875490][ T1347] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 402.877662][ T5296] blk_alloc_queue+0x610/0x790 [ 402.877683][ T5296] blk_mq_alloc_queue+0x174/0x290 [ 402.880834][ T1347] usb 12-1: config 0 interface 0 has no altsetting 0 [ 402.883781][ T5296] __blk_mq_alloc_disk+0x29/0x120 [ 402.883798][ T5296] nbd_dev_add+0x492/0xb10 [ 402.883812][ T5296] nbd_init+0x291/0x2b0 [ 402.887091][ T1347] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 402.887408][ T5296] do_one_initcall+0x11d/0x760 [ 402.890027][ T1347] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 402.891477][ T5296] kernel_init_freeable+0x6e5/0x7a0 [ 402.891498][ T5296] kernel_init+0x1f/0x1e0 [ 402.891514][ T5296] ret_from_fork+0x754/0xd80 [ 402.891523][ T5296] ret_from_fork_asm+0x1a/0x30 [ 402.891536][ T5296] [ 402.891536][ T5296] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 402.891553][ T5296] fs_reclaim_acquire+0xc4/0x100 [ 402.891564][ T5296] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 402.891579][ T5296] __kernfs_iattrs+0x126/0x400 [ 402.891594][ T5296] __kernfs_setattr+0x4d/0x3c0 [ 402.893337][ T1347] usb 12-1: Product: syz [ 402.894821][ T5296] kernfs_iop_setattr+0xda/0x130 [ 402.894840][ T5296] notify_change+0xb25/0x1330 [ 402.894856][ T5296] do_truncate+0x1df/0x240 [ 402.897818][ T1347] usb 12-1: Manufacturer: syz [ 402.899500][ T5296] path_openat+0x2a55/0x31a0 [ 402.899515][ T5296] do_file_open+0x20e/0x430 [ 402.899525][ T5296] do_sys_openat2+0x10d/0x1e0 [ 402.902302][ T1347] usb 12-1: SerialNumber: syz [ 402.904085][ T5296] __x64_sys_openat+0x12d/0x210 [ 402.904101][ T5296] do_syscall_64+0x106/0xf80 [ 402.904115][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.931754][T13479] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.932205][ T5296] [ 402.932205][ T5296] -> #0 [ 402.933806][T13479] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.935510][ T5296] (&root->kernfs_iattr_rwsem [ 402.937302][T13479] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.939378][ T5296] ){++++}-{4:4}: [ 402.939391][ T5296] __lock_acquire+0x14b8/0x2630 [ 402.942451][T13479] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 402.943816][ T5296] lock_acquire+0x1cf/0x380 [ 402.943836][ T5296] down_write+0x8b/0x1f0 [ 402.947127][T13479] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 402.948761][ T5296] kernfs_unlink_sibling+0xa3/0x320 [ 402.948785][ T5296] __kernfs_remove+0x308/0x910 [ 402.948795][ T5296] kernfs_remove_by_name_ns+0x68/0xf0 [ 402.953916][T13479] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.954658][ T5296] sysfs_unmerge_group+0xe7/0x170 [ 402.954672][ T5296] dpm_sysfs_remove+0x7f/0xb0 [ 402.954682][ T5296] device_del+0x180/0x9b0 [ 402.958261][T13479] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.960388][ T5296] device_unregister+0x1d/0xe0 [ 402.960416][ T5296] hci_conn_del_sysfs+0xb9/0x1a0 [ 402.962294][T13479] usb 13-1: Product: syz [ 402.965520][ T5296] hci_conn_del+0x506/0x1180 [ 402.965537][ T5296] hci_abort_conn_sync+0x7d9/0xb20 [ 402.965551][ T5296] abort_conn_sync+0x142/0x350 [ 402.967415][T13479] usb 13-1: Manufacturer: syz [ 402.969100][ T5296] hci_cmd_sync_work+0x1c0/0x470 [ 402.969117][ T5296] process_one_work+0xa23/0x19a0 [ 402.969129][ T5296] worker_thread+0x5ef/0xe50 [ 402.969139][ T5296] kthread+0x370/0x450 [ 402.969148][ T5296] ret_from_fork+0x754/0xd80 [ 402.969158][ T5296] ret_from_fork_asm+0x1a/0x30 [ 403.008851][ T5296] [ 403.008851][ T5296] other info that might help us debug this: [ 403.008851][ T5296] [ 403.012138][ T5296] Chain exists of: [ 403.012138][ T5296] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 403.012138][ T5296] [ 403.016696][ T5296] Possible unsafe locking scenario: [ 403.016696][ T5296] [ 403.019078][ T5296] CPU0 CPU1 [ 403.020808][ T5296] ---- ---- [ 403.022589][ T5296] lock(&root->kernfs_rwsem); [ 403.024175][ T5296] lock(cpuhp_state_mutex); [ 403.026456][ T5296] lock(&root->kernfs_rwsem); [ 403.028792][ T5296] lock(&root->kernfs_iattr_rwsem); [ 403.030512][ T5296] [ 403.030512][ T5296] *** DEADLOCK *** [ 403.030512][ T5296] [ 403.033116][ T5296] 5 locks held by kworker/u33:1/5296: [ 403.034864][ T5296] #0: ffff88803a37c148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 403.038132][ T5296] #1: ffffc900064bfd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 403.041903][ T5296] #2: ffff888045468ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 403.045058][ T5296] #3: ffff8880454680c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 403.048128][ T5296] #4: ffff88801caf6988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0xf0 [ 403.051495][ T5296] [ 403.051495][ T5296] stack backtrace: [ 403.053458][ T5296] CPU: 3 UID: 0 PID: 5296 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.053475][ T5296] Tainted: [L]=SOFTLOCKUP [ 403.053480][ T5296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.053488][ T5296] Workqueue: hci1 hci_cmd_sync_work [ 403.053504][ T5296] Call Trace: [ 403.053510][ T5296] [ 403.053515][ T5296] dump_stack_lvl+0x100/0x190 [ 403.053534][ T5296] print_circular_bug.cold+0x178/0x1c7 [ 403.053551][ T5296] check_noncircular+0x146/0x160 [ 403.053570][ T5296] __lock_acquire+0x14b8/0x2630 [ 403.053589][ T5296] ? __lock_acquire+0x4a5/0x2630 [ 403.053606][ T5296] lock_acquire+0x1cf/0x380 [ 403.053623][ T5296] ? kernfs_unlink_sibling+0xa3/0x320 [ 403.053641][ T5296] ? __pfx___might_resched+0x10/0x10 [ 403.053654][ T5296] down_write+0x8b/0x1f0 [ 403.053671][ T5296] ? kernfs_unlink_sibling+0xa3/0x320 [ 403.053688][ T5296] ? __pfx_down_write+0x10/0x10 [ 403.053704][ T5296] kernfs_unlink_sibling+0xa3/0x320 [ 403.053722][ T5296] __kernfs_remove+0x308/0x910 [ 403.053732][ T5296] ? kernfs_find_ns+0x283/0x540 [ 403.053742][ T5296] kernfs_remove_by_name_ns+0x68/0xf0 [ 403.053755][ T5296] sysfs_unmerge_group+0xe7/0x170 [ 403.053766][ T5296] dpm_sysfs_remove+0x7f/0xb0 [ 403.053778][ T5296] device_del+0x180/0x9b0 [ 403.053794][ T5296] ? __pfx_device_del+0x10/0x10 [ 403.053808][ T5296] ? __pfx_device_find_child+0x10/0x10 [ 403.053821][ T5296] ? __pfx___cancel_work+0x10/0x10 [ 403.053833][ T5296] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 403.053851][ T5296] device_unregister+0x1d/0xe0 [ 403.053866][ T5296] hci_conn_del_sysfs+0xb9/0x1a0 [ 403.053880][ T5296] hci_conn_del+0x506/0x1180 [ 403.053895][ T5296] hci_abort_conn_sync+0x7d9/0xb20 [ 403.053911][ T5296] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 403.053926][ T5296] ? find_held_lock+0x2b/0x80 [ 403.053940][ T5296] ? abort_conn_sync+0xf8/0x350 [ 403.053950][ T5296] ? abort_conn_sync+0xf8/0x350 [ 403.053962][ T5296] abort_conn_sync+0x142/0x350 [ 403.053974][ T5296] hci_cmd_sync_work+0x1c0/0x470 [ 403.053988][ T5296] ? rcu_is_watching+0x12/0xc0 [ 403.054002][ T5296] process_one_work+0xa23/0x19a0 [ 403.054016][ T5296] ? __pfx_process_one_work+0x10/0x10 [ 403.054032][ T5296] ? __pfx_hci_cmd_sync_work+0x10/0x10 [ 403.054047][ T5296] worker_thread+0x5ef/0xe50 [ 403.054059][ T5296] ? __pfx_worker_thread+0x10/0x10 [ 403.054070][ T5296] ? kthread+0x13a/0x450 [ 403.054079][ T5296] ? __pfx_worker_thread+0x10/0x10 [ 403.054090][ T5296] kthread+0x370/0x450 [ 403.054099][ T5296] ? __pfx_kthread+0x10/0x10 [ 403.054109][ T5296] ret_from_fork+0x754/0xd80 [ 403.054120][ T5296] ? __pfx_ret_from_fork+0x10/0x10 [ 403.054130][ T5296] ? __switch_to+0x7b4/0x1120 [ 403.054143][ T5296] ? __pfx_kthread+0x10/0x10 [ 403.054153][ T5296] ret_from_fork_asm+0x1a/0x30 [ 403.054169][ T5296] [ 403.144799][ T1347] usb 12-1: config 0 descriptor?? [ 403.151927][ T1463] usb 5-1: USB disconnect, device number 41 [ 403.157394][ T1347] usb 12-1: can't set config #0, error -71 [ 403.160737][ T1347] usb 12-1: USB disconnect, device number 16 [ 403.168621][T13479] cdc_wdm 13-1:1.0: skipping garbage [ 403.171182][T13479] cdc_wdm 13-1:1.0: skipping garbage [ 403.175632][T13479] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 403.178135][T13479] cdc_wdm 13-1:1.0: Unknown control protocol [ 403.366678][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.369933][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.373084][T13479] usb 13-1: USB disconnect, device number 18