last executing test programs: 2m41.119121077s ago: executing program 0 (id=4337): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0ed3e4ad14000100ffffffffb0c9000004000000f9ffffff0800020063ffffff"], 0x3c}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x8, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="80005b020eaa4da2a1494497e3bfd97d4215c73dc76f0f2bdd7ea1d066508acab817064ee83fbe8b64e4611c633cdeec3f5e3ce4edbfd5599f25c9cc9cc04d149ad3bf92222c2e42adc1c2c170d080ac0f8d424f07168cb0194b9e9fb1255c3247e3f17d4f50c947db06ed9e6113233776676e812af9faf7b98aa0a4f9b176127c52c9a34fcbad3b9eccf800964b1217f6778f84d1f6e3eacf9fbfe6e4247859cd13682695d7596912224d73ff78036695196650228a4fa0cae3", 0xba}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000120004002abd7004fbdbdf252859020b4e224e2308000000f8ffffff060000000700000007000000ff070000030000000e000000", @ANYRES32=r7, @ANYBLOB="06000000ff0700000002000001000000cd00010018bf01000000000000007f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde3003cde4f773e9d99435553d14e043cdfd97b15bafcf3e789127be3ffabaab415f0b9e597e000000"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000a8850247ceacf2010000000000000008391980bd7bd411cf902361c56ce2ff030000dde378ed6770f69d79799754dcb68eceec444994e4e793b1", @ANYRES16=r11, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f6472"], 0x80}}, 0x0) 2m39.720572676s ago: executing program 0 (id=4343): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="f617a8ea0700ffffff", 0x9, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x7}, 0x14) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000001880)={0x3, r3, 0xfff, 0x3ff, 0x2, 0x944}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, r5, 0xee00) shmctl$IPC_STAT(0x0, 0x2, 0x0) 2m38.390550396s ago: executing program 0 (id=4347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 2m38.167176797s ago: executing program 0 (id=4349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 2m38.041419006s ago: executing program 0 (id=4351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.931039907s ago: executing program 0 (id=4353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='5', 0x1) 2m33.705459954s ago: executing program 3 (id=4375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffe56, &(0x7f0000000340)=0x1) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="14000200ff0100000000000000000000000000010800080025040000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) 2m29.835624769s ago: executing program 3 (id=4388): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/bus/pci/drivers/dwc3-pci/new_id\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='8086 2', 0x6) 2m29.835470763s ago: executing program 3 (id=4389): socket(0x10, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x989680}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m29.800054227s ago: executing program 3 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 2m28.855405783s ago: executing program 3 (id=4394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4a86, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x897d, 0x100000, 0x8, 0x8000, 0x3, 0x0, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xb0, 0x0, 0x3, [{{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x8, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r7, r8, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) 2m27.686615002s ago: executing program 3 (id=4398): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2m24.893911585s ago: executing program 4 (id=4434): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 2m24.010521201s ago: executing program 4 (id=4439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.842896914s ago: executing program 4 (id=4442): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) removexattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@known='user.syz\x00') 2m23.822723353s ago: executing program 4 (id=4443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 2m23.733202309s ago: executing program 4 (id=4444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @remote}, {0x0, 0x0, 0xfffffffffffffc54, 0x0, @gue={{0x2}}}}}}}, 0x0) 2m23.732573666s ago: executing program 4 (id=4445): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+', 0x1) 2m22.750346384s ago: executing program 32 (id=4353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='5', 0x1) 2m12.625082406s ago: executing program 33 (id=4398): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2m9.735632243s ago: executing program 1 (id=4565): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x64}}, 0x24048004) r4 = memfd_create(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r4, 0x0, 0x1000009) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000100)={0x20000014}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m8.78441213s ago: executing program 1 (id=4572): pipe2(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 2m8.702824112s ago: executing program 34 (id=4445): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+', 0x1) 2m7.933251678s ago: executing program 1 (id=4575): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0ed3e4ad14000100ffffffffb0c9000004000000f9ffffff0800020063ffffff"], 0x3c}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x8, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="80005b020eaa4da2a1494497e3bfd97d4215c73dc76f0f2bdd7ea1d066508acab817064ee83fbe8b64e4611c633cdeec3f5e3ce4edbfd5599f25c9cc9cc04d149ad3bf92222c2e42adc1c2c170d080ac0f8d424f07168cb0194b9e9fb1255c3247e3f17d4f50c947db06ed9e6113233776676e812af9faf7b98aa0a4f9b176127c52c9a34fcbad3b9eccf800964b1217f6778f84d1f6e3eacf9fbfe6e4247859cd13682695d7596912224d73ff78036695196650228a4fa0cae3", 0xba}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000120004002abd7004fbdbdf252859020b4e224e2308000000f8ffffff060000000700000007000000ff070000030000000e000000", @ANYRES32=r7, @ANYBLOB="06000000ff0700000002000001000000cd00010018bf01000000000000007f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde3003cde4f773e9d99435553d14e043cdfd97b15bafcf3e789127be3ffabaab415f0b9e597e000000"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000a8850247ceacf2010000000000000008391980bd7bd411cf902361c56ce2ff030000dde378ed6770f69d79799754dcb68eceec444994e4e793b1", @ANYRES16=r11, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005"], 0x80}}, 0x0) 2m6.956739794s ago: executing program 1 (id=4583): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 2m5.615275636s ago: executing program 1 (id=4589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="35fc3a", 0x3) 2m5.395075425s ago: executing program 1 (id=4590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 1m50.273114782s ago: executing program 35 (id=4590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 35.186821632s ago: executing program 2 (id=4882): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r5 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000440)={0x0, 0xffff, 0x0, 0x0, r1}) sendmmsg$unix(r3, &(0x7f0000000b40)=[{{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="5de82194b514d764e7c6b8fa74", 0xd}, {&(0x7f0000000300)="790496fa4607d0cc3f0e28e3f9855f9e0a721177dd2f965dcfefc932964911917baa296a8ba753dac0fa34fe5f431698e28264e1c24232669a33102425428fb504731b28579899c6fb4a5f6a32f103f93b793afbb286", 0x56}], 0x2, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r3, r0]}}], 0xd8, 0x4846}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000700)="740d59c26d5c17787506c7e84ef2029a66d85eda03f74809badf722ef05e8c75a945e9b5a21d635bff0ee3542f5f91f6011c4f718328bda4c9", 0x39}, {&(0x7f0000000800)="1c66b1566cef56d5e29ed38e68e6414a1a607b836fa54487aa8253c95bedcbba44eb7bea4f1df7a3c03e07d55b9eec9a15a901f2007dede8a44a4bb4ef7072c8cd6969905a68d7759e0ba163408c5a6a0b5b93", 0x53}, {&(0x7f0000000c40)="3826689d28b71b270f80eeeda0f625d6377e4070355241988595a0747bdc6ee58fd535ef9cf22f134aa5b55843711eb3edf72b98c47bfa858a4c204a3b8a8c2fcbe4319337df779751b4fa436a0545719d6f5e840f11d3c20179f303f992a0aee4174fe6892b78ef959bcf8cd24b10e253d0e2131f35f205266edf68655d8d9906000000babc865608b7", 0x8a}, {&(0x7f0000000900)="e2bf9641fcc5", 0x6}, {&(0x7f0000000940)="72251f4e43c08fe351b8b65388648ab0770ff75989a42918d99af40808281c03f8b4b2ea2b64f71e2b21b0fab6d4ca", 0x2f}, {&(0x7f0000000980)="a5c6099afa531f52c55a2b6f7136a0c3db09e4dda6748775b8895814472d2323b1ff4c7f7d86b84a353059d29a3fc5c3ae0679f35ba8d658b1681f0a9a6586d2dc3c0087aafa30888b8c0c052b5e2b817789e2a6ac3c", 0x56}, {&(0x7f0000000a00)="4d3046ce2350809d14a5cd1dcbe32f2f7e1a37e5b5bdcfe4b748a3c37eb034639166c9bda758b6c677ea5f79c29d86af53b3b59ffdaca92901dc018033fd58d172dfe57b7b49facc95717c98b7a693", 0x4f}, {&(0x7f0000000a80)="78b9b91a061bf950620bc256", 0xc}], 0x8, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x20, 0x8000000}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000780)={r10, 0x100, 0x4, 0x0, 0x3, [0x0, 0x0, 0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000140)={r11, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r13, 0x2000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=r12, @ANYBLOB="485a000000000002240012800b000100627269647745000014000280080008"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 33.047001979s ago: executing program 2 (id=4888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c000000080002"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c000180080001"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 28.251791476s ago: executing program 2 (id=4907): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0ed3e4ad14000100ffffffffb0c9000004000000f9ffffff0800020063ffffff"], 0x3c}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x8, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="80005b020eaa4da2a1494497e3bfd97d4215c73dc76f0f2bdd7ea1d066508acab817064ee83fbe8b64e4611c633cdeec3f5e3ce4edbfd5599f25c9cc9cc04d149ad3bf92222c2e42adc1c2c170d080ac0f8d424f07168cb0194b9e9fb1255c3247e3f17d4f50c947db06ed9e6113233776676e812af9faf7b98aa0a4f9b176127c52c9a34fcbad3b9eccf800964b1217f6778f84d1f6e3eacf9fbfe6e4247859cd13682695d7596912224d73ff78036695196650228a4fa0cae3", 0xba}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000120004002abd7004fbdbdf252859020b4e224e2308000000f8ffffff060000000700000007000000ff070000030000000e000000", @ANYRES32=r7, @ANYBLOB="06000000ff0700000002000001000000cd00010018bf01000000000000007f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde3003cde4f773e9d99435553d14e043cdfd97b15bafcf3e789127be3ffabaab415f0b9e597e000000"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000a8850247ceacf2010000000000000008391980bd7bd411cf902361c56ce2ff030000dde378ed6770f69d79", @ANYRES16=r11, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x80}}, 0x0) 27.157235904s ago: executing program 2 (id=4913): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000280), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,ver']) 26.664741299s ago: executing program 2 (id=4915): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)="35fc3a", 0x3) 26.547084526s ago: executing program 2 (id=4919): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) 11.205652893s ago: executing program 36 (id=4919): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) 9.823351671s ago: executing program 6 (id=4984): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_usb_connect(0x6, 0x36, 0x0, 0x0) 8.307536403s ago: executing program 7 (id=4987): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.287116282s ago: executing program 7 (id=4990): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087d1e38310000000000010902240001000080050904008101030003000921021047012228000905810340"], 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xd4) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') write$cgroup_int(r5, &(0x7f0000000100)=0x8000000000000000, 0x12) close(r0) 7.191474456s ago: executing program 8 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0ed3e4ad14000100ffffffffb0c9000004000000f9ffffff0800020063ffffff"], 0x3c}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x8, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="80005b020eaa4da2a1494497e3bfd97d4215c73dc76f0f2bdd7ea1d066508acab817064ee83fbe8b64e4611c633cdeec3f5e3ce4edbfd5599f25c9cc9cc04d149ad3bf92222c2e42adc1c2c170d080ac0f8d424f07168cb0194b9e9fb1255c3247e3f17d4f50c947db06ed9e6113233776676e812af9faf7b98aa0a4f9b176127c52c9a34fcbad3b9eccf800964b1217f6778f84d1f6e3eacf9fbfe6e4247859cd13682695d7596912224d73ff78036695196650228a4fa0cae3", 0xba}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000120004002abd7004fbdbdf252859020b4e224e2308000000f8ffffff060000000700000007000000ff070000030000000e000000", @ANYRES32=r7, @ANYBLOB="06000000ff0700000002000001000000cd00010018bf01000000000000007f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde3003cde4f773e9d99435553d14e043cdfd97b15bafcf3e789127be3ffabaab415f0b9e597e000000"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000a8850247ceacf2010000000000000008391980bd7bd411cf902361c56ce2ff030000dde378ed6770f69d79799754dcb68eceec", @ANYRES16=r11, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x80}}, 0x0) 6.151900227s ago: executing program 6 (id=4993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.13516882s ago: executing program 5 (id=4994): close(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 6.071086464s ago: executing program 5 (id=4995): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffee, 0x3cc}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES64=r3], 0x7c}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) userfaultfd(0x80001) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f00000e1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000120000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000117000/0x4000)=nil, 0x0}, 0x8d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xffffffffffffff6e) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000000340)="3f000000010003", 0x7) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0x646, 0x0, 0x0, 0x1000, 0xfffffff5, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000000000a100000000000000a4100100", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000cea3e4f532f8980f6d3157cf03f7158cd9920055bced1df1262572c4e0f9f9564f6463d94e87a23e2feae0fde30fb638b0b0338596494510bddd5d4d9067dae974c4ca491e66aea509b7a8875dd40b0f1117ddc15021e8281d5323a646591286a6c0dbcaa46ba30dc5e0027d793f9e06f4940f838fb45a964b60952edf72404e7e38c12fdc980200000072c7127bfb5f8b08c107ebb94328e522bc892b9b4523df06c0eeec", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000000000000d00"/24, @ANYRES32=r5, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r9, 0x58, &(0x7f0000000180)}, 0x10) 6.068786521s ago: executing program 8 (id=4996): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x581840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0xb, r0, 0x80000}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000280)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000cc0)=[@txtime={{0x18, 0x1, 0x3d, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14}}], 0x48}}], 0x2, 0x20000814) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000e00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2w2\x96\xb2\xe9=[\xa1/\xd3\xda\xbc\xfa\xea\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa7\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc4=.\xc6o\xfc\xa1\xb7\x88\xcfr\xf5@\x19\x13k\xe3d\x1a\x97\x99\x8f\xc9>\xbf3#\x03\xd4\x93\xc2\v\xf2\xba\xfb\x86\x9dr\x8e\xca\xe0s\xfe$\xce\xdb\\\x8f\x05\x92!\xe4\xd0|\x9bC\xc4\xf8\xd9%\xff\xef+X\a%\xbcA\t.\xdd[~$d\t\xb5\xa5\x17K\x1e\xe4z\xad\xca\xfe\xb0\x7f\xb8\x1b\x92\x950\xf7k\xadW\x1d\xd2\xea6\b\xc7\xc8}\x9a\x9c\xea`\xfe\xc1\xc1&\x8a#\x1a\xd5\\/\x02\x1e2\xa6\xc1\x84\xc4\x87\xd0\x97w\x94T\x99\xc7\x8a\xf9VN\xa4XN\x8d\x04\x91\x13\x8f\xe1;\a\xcfEI\xee~x\xce\xb8\t\xad\xf4\xde\xf4\xd0\xfb\xbf\x8f\xbf\a\x00\xcd\x10\xc1I\xc5\x93\x94;UZ\x95\x17\x1d\xf3:\'\xfd~\xed7\x12\x02\x1dr\x05\xf3\x805\x110\x06X\xb7{\x7fZ\x15\xe2\xfa6{', 0x800, 0x11, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1e", 0x4e}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x180000) 5.621945524s ago: executing program 8 (id=4997): fsmount(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsmount(r4, 0x1, 0xf3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x3f8, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1b8, 0x1f8, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 4.786247152s ago: executing program 5 (id=4998): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x67, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000540)=""/186, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) unshare(0x6a040000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, 0x0, 0x2300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0x100000, 0x1cc5, 0x8001, 0x8, 0x4, 0x0, 0x0, 0x1, 0x759}}, 0x50) 4.531031611s ago: executing program 6 (id=4999): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') open(0x0, 0x80140, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6, 0x1}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.49359409s ago: executing program 7 (id=5000): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.885727186s ago: executing program 8 (id=5001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d4000000"], 0x44}}, 0x0) 2.822942493s ago: executing program 6 (id=5002): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4000308014000400503a05035bf73ce4ba00018008000000060001"], 0x5c}}, 0x40000) 2.700400221s ago: executing program 6 (id=5003): write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000004c0)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) write(r1, &(0x7f0000000200)='1d6b 0001 0', 0xb) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) close(0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0x8, 0x0, 'queue0\x00', 0x80000000}) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x4eaa, r6}, 0x38) 2.545795874s ago: executing program 5 (id=5004): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r5 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000440)={0x0, 0xffff, 0x0, 0x0, r1}) sendmmsg$unix(r3, &(0x7f0000000b40)=[{{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="5de82194b514d764e7c6b8fa74", 0xd}, {&(0x7f0000000300)="790496fa4607d0cc3f0e28e3f9855f9e0a721177dd2f965dcfefc932964911917baa296a8ba753dac0fa34fe5f431698e28264e1c24232669a33102425428fb504731b28579899c6fb4a5f6a32f103f93b793afbb286", 0x56}], 0x2, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r3, r0]}}], 0xd8, 0x4846}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000700)="740d59c26d5c17787506c7e84ef2029a66d85eda03f74809badf722ef05e8c75a945e9b5a21d635bff0ee3542f5f91f6011c4f718328bda4c9e851eaac5434", 0x3f}, {&(0x7f0000000800)="1c66b1566cef56d5e29ed38e68e6414a1a607b836fa54487aa8253c95bedcbba44eb7bea4f1df7a3c03e07d55b9eec9a15a901f2007dede8a44a4bb4ef7072c8cd6969905a68d7759e0ba163408c5a6a0b5b93", 0x53}, {&(0x7f0000000c40)="3826689d28b71b270f80eeeda0f625d6377e4070355241988595a0747bdc6ee58fd535ef9cf22f134aa5b55843711eb3edf72b98c47bfa858a4c204a3b8a8c2fcbe4319337df779751b4fa436a0545719d6f5e840f11d3c20179f303f992a0aee4174fe6892b78ef959bcf8cd24b10e253d0e2131f35f205266edf68655d8d9906000000babc865608b7", 0x8a}, {&(0x7f0000000900)="e2bf9641fcc5", 0x6}, {&(0x7f0000000940)="72251f4e43c08fe351b8b65388648ab0770ff75989a42918d99af40808281c03f8b4b2ea2b64f71e2b21b0fab6d4ca", 0x2f}, {&(0x7f0000000980)="a5c6099afa531f52c55a2b6f7136a0c3db09e4dda6748775b8895814472d2323b1ff4c7f7d86b84a353059d29a3fc5c3ae0679f35ba8d658b1681f0a9a6586d2dc3c0087aafa30888b8c0c052b5e2b817789e2a6ac3c", 0x56}, {&(0x7f0000000a00)="4d3046ce2350809d14a5cd1dcbe32f2f7e1a37e5b5bdcfe4b748a3c37eb034639166c9bda758b6c677ea5f79c29d86af53b3b59ffdaca92901dc018033fd58d172dfe57b7b49facc95717c98b7a693", 0x4f}, {&(0x7f0000000a80)="78b9b91a061bf950620bc256", 0xc}], 0x8, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x20, 0x8000000}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000780)={r10, 0x100, 0x4, 0x0, 0x3, [0x0, 0x0, 0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000140)={r11, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r13, 0x2000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=r12, @ANYBLOB="485a000000000002240012800b000100627269647745000014000280080008"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 1.209529644s ago: executing program 5 (id=5005): close(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 1.20696397s ago: executing program 8 (id=5006): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0ed3e4ad14000100ffffffffb0c9000004000000f9ffffff0800020063ffffff"], 0x3c}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x8, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="80005b020eaa4da2a1494497e3bfd97d4215c73dc76f0f2bdd7ea1d066508acab817064ee83fbe8b64e4611c633cdeec3f5e3ce4edbfd5599f25c9cc9cc04d149ad3bf92222c2e42adc1c2c170d080ac0f8d424f07168cb0194b9e9fb1255c3247e3f17d4f50c947db06ed9e6113233776676e812af9faf7b98aa0a4f9b176127c52c9a34fcbad3b9eccf800964b1217f6778f84d1f6e3eacf9fbfe6e4247859cd13682695d7596912224d73ff78036695196650228a4fa0cae3", 0xba}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000120004002abd7004fbdbdf252859020b4e224e2308000000f8ffffff060000000700000007000000ff070000030000000e000000", @ANYRES32=r7, @ANYBLOB="06000000ff0700000002000001000000cd00010018bf01000000000000007f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde3003cde4f773e9d99435553d14e043cdfd97b15bafcf3e789127be3ffabaab415f0b9e597e000000"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000a8850247ceacf2010000000000000008391980bd7bd411cf902361c56ce2ff030000dde378ed6770f69d79799754dcb68eceec444994e4", @ANYRES16=r11, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x80}}, 0x0) 1.20478221s ago: executing program 6 (id=5007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32, @ANYBLOB="13aef6a411f6b42e"], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x700, 0x20, 0x1, 0x8, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x3, 0x0, 0x7f, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@rr={0x7, 0xf, 0xf1, [@multicast2, @local, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x80, 0x20, 0xd, 0xffffff01, {{0x22, 0x4, 0x0, 0x3, 0x88, 0x66, 0x0, 0x84, 0x2d, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @end, @timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x1, [{@remote, 0x6}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x4}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@multicast2, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xffffffff}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x59, [@multicast1, @empty]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x5, [0x50, 0x3, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0xc0, 0x2, 0x2, 0x94, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x20, 0xb, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0xe4, 0xc2e4, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x80, 0x4, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0xe, 0x400, 0x34, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x1, 0x7, 0x5, 0xfff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x5, 0x1, {{0x11, 0x4, 0x0, 0x1, 0x44, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0x10, 0x8b, 0x0, 0x9, [0x2, 0x6, 0x5]}, @ssrr={0x89, 0x1f, 0x65, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast, @multicast2, @multicast1]}]}}}}}) r9 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r10, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@local, @loopback, 0x0}, &(0x7f0000000a80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x10, 0x6, 0x8, @mcast1, @loopback, 0x20, 0x10, 0x100, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x9, 0x25, @loopback, @private1, 0x7, 0x7, 0xfffffff8, 0x400000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x39, 0xffffffff, 0xf, @rand_addr=' \x01\x00', @loopback, 0x8, 0x1, 0x1, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x1b0, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20885}, 0x4) r16 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r16, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000040)='./file0\x00', 0xc) 1.195752647s ago: executing program 7 (id=5008): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.15022617s ago: executing program 5 (id=5009): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087d1e38310000000000010902240001000080050904008101030003000921021047012228000905810340"], 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') write$cgroup_int(r5, &(0x7f0000000100)=0x8000000000000000, 0x12) close(r0) 245.423091ms ago: executing program 8 (id=5010): fsmount(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsmount(r4, 0x1, 0xf3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x3f8, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1b8, 0x1f8, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 211.346866ms ago: executing program 7 (id=5011): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') open(0x0, 0x80140, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6, 0x1}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 64.723751ms ago: executing program 7 (id=5012): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtclass={0xdc, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xffe0, 0x6}, {0xfff1, 0xd}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x10000, 0x80000001, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x1000, 0x62f3bd05}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffff, 0x3, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8001, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x1, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x5, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0xf6, 0x40}}, @tclass_kind_options=@c_multiq={0xb}]}, 0xdc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 9 (id=4974): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtclass={0xdc, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xffe0, 0x6}, {0xfff1, 0xd}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x10000, 0x80000001, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x1000, 0x62f3bd05}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffff, 0x3, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8001, 0x7, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x1, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x5, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0xf6, 0x40}}, @tclass_kind_options=@c_multiq={0xb}]}, 0xdc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) modify_ldt$read(0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) socket$can_j1939(0x1d, 0x2, 0x7) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): connect, device number 9 [ 1539.629806][T22602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1539.638944][T22602] netlink: 'syz.2.4158': attribute type 2 has an invalid length. [ 1539.646696][T22602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1539.659225][T22602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1539.668274][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1540.351983][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.359189][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.561846][T22615] overlayfs: regular lower layers cannot follow data lower layers [ 1541.801635][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1541.915137][T22628] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1541.924257][T22628] netlink: 'syz.4.4167': attribute type 2 has an invalid length. [ 1541.932100][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1541.951496][T22628] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1541.960561][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1542.169085][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.557328][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1542.575513][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.608385][T22617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22617 comm=syz.3.4164 [ 1542.632076][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1543.115442][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.150903][T22633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22633 comm=syz.2.4168 [ 1543.183335][ T24] usb 2-1: config 0 descriptor?? [ 1543.184410][T22633] overlayfs: failed to resolve './bus': -2 [ 1543.524765][T22643] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1543.533885][T22643] netlink: 'syz.4.4170': attribute type 2 has an invalid length. [ 1544.352520][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1544.607105][T22644] netlink: 'syz.3.4172': attribute type 2 has an invalid length. [ 1544.689454][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1544.715889][ T24] usb 2-1: USB disconnect, device number 99 [ 1545.968928][T17271] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1546.137226][T17271] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1546.148713][T17271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.160486][T17271] usb 1-1: config 0 has no interfaces? [ 1546.166149][T17271] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1546.227716][T17271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.362883][T17271] usb 1-1: config 0 descriptor?? [ 1546.513375][T22670] overlayfs: regular lower layers cannot follow data lower layers [ 1548.959780][T18214] usb 1-1: USB disconnect, device number 122 [ 1549.695916][T22695] __nla_validate_parse: 7 callbacks suppressed [ 1549.695932][T22695] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4185'. [ 1549.711216][T22695] netlink: 'syz.2.4185': attribute type 2 has an invalid length. [ 1549.718977][T22695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4185'. [ 1549.728901][T22695] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4185'. [ 1549.737964][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4185'. [ 1550.466756][T22704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22704 comm=syz.0.4187 [ 1550.522083][T22704] overlayfs: failed to resolve './bus': -2 [ 1551.565196][ T30] audit: type=1400 audit(1785266842.238:664): avc: denied { setopt } for pid=22709 comm="syz.2.4190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1551.774377][T22710] trusted_key: syz.2.4190 sent an empty control message without MSG_MORE. [ 1553.038938][T17271] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1553.406942][T17271] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1553.457817][T17271] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.522320][T17271] usb 4-1: config 220 has no interface number 2 [ 1553.564864][T17271] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1553.663674][T17271] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1553.720494][T17271] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1553.865122][T17271] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1553.876157][T17271] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1553.885598][T17271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.896001][T17271] usb 4-1: Product: syz [ 1553.900864][T17271] usb 4-1: Manufacturer: syz [ 1553.905725][T17271] usb 4-1: SerialNumber: syz [ 1554.043249][T22739] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1554.052355][T22739] netlink: 'syz.0.4197': attribute type 2 has an invalid length. [ 1554.060120][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1554.070282][T22739] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1554.079335][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1554.658705][T17271] usb 4-1: selecting invalid altsetting 0 [ 1554.679495][ T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1554.702353][T17271] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1554.713582][T17271] uvcvideo 4-1:220.0: No valid video chain found. [ 1554.836693][T17271] usb 4-1: selecting invalid altsetting 0 [ 1554.842473][T17271] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1554.854003][T17271] usb 4-1: USB disconnect, device number 10 [ 1554.899026][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1555.035703][ T24] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.046898][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1555.053532][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1555.063648][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.073248][ T24] usb 5-1: config 0 descriptor?? [ 1555.078902][T18214] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1555.536980][T22749] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1555.546131][T22749] netlink: 'syz.1.4200': attribute type 2 has an invalid length. [ 1555.553913][T22749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1555.563726][T22749] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1555.572786][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1555.960117][T18214] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1555.969448][T18214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.991553][T18214] usb 3-1: config 0 descriptor?? [ 1556.046337][T22755] vxcan0: tx address claim with different name [ 1557.319552][ T30] audit: type=1400 audit(1785266847.998:665): avc: denied { create } for pid=22768 comm="syz.1.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1557.364241][ T30] audit: type=1400 audit(1785266848.028:666): avc: denied { write } for pid=22768 comm="syz.1.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1557.802723][T18214] usb 3-1: Cannot set autoneg [ 1557.827514][T18214] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1557.844123][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1558.035189][T18214] usb 3-1: USB disconnect, device number 89 [ 1558.654189][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1558.666566][ T24] usb 5-1: USB disconnect, device number 109 [ 1559.211942][T22791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1559.232995][T22791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22791 comm=syz.0.4211 [ 1560.925849][T22804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1561.015002][T22804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22804 comm=syz.0.4214 [ 1562.228801][T18214] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1562.403883][T18214] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.425211][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1562.461018][T18214] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.493915][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1562.528381][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1562.563159][T18214] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.690405][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1562.725392][T18214] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.753580][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1562.797993][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1562.871501][T18214] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.925706][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1562.966373][T18214] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.001624][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1563.030798][T18214] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1563.062169][T18214] usb 4-1: string descriptor 0 read error: -22 [ 1563.071567][T18214] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1563.081369][T18214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.129724][T18214] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1563.145200][T22840] vxcan0: tx address claim with different name [ 1563.800150][T22849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1563.809286][T22849] netlink: 'syz.1.4226': attribute type 2 has an invalid length. [ 1563.817023][T22849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1563.837144][T22849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1563.846233][T22849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1565.931180][ T24] usb 4-1: USB disconnect, device number 11 [ 1566.911231][T22876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1566.955514][T22876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22876 comm=syz.2.4233 [ 1567.112824][T22880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4234'. [ 1567.189853][T22880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22880 comm=syz.4.4234 [ 1567.536044][T22880] overlayfs: failed to resolve './bus': -2 [ 1567.867983][T22888] fuse: Unknown parameter 'user_i00000000000000000000' [ 1568.193464][T22894] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1568.202567][T22894] netlink: 'syz.2.4239': attribute type 2 has an invalid length. [ 1568.210350][T22894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1568.231380][T22894] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1568.240476][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1568.572561][T22895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4238'. [ 1568.633144][T22895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22895 comm=syz.4.4238 [ 1569.101437][T22903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1569.110580][T22903] netlink: 'syz.2.4241': attribute type 2 has an invalid length. [ 1569.118330][T22903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1570.749776][T18214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1570.914611][T18214] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1570.924092][T18214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.986366][T18214] usb 4-1: config 0 descriptor?? [ 1571.830831][T22925] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1571.839949][T22925] netlink: 'syz.1.4248': attribute type 2 has an invalid length. [ 1572.315720][T22926] vxcan0: tx address claim with different name [ 1572.549040][T18214] usb 4-1: Cannot set autoneg [ 1572.655588][T18214] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1572.712593][T18214] usb 4-1: USB disconnect, device number 12 [ 1574.550694][T22940] __nla_validate_parse: 3 callbacks suppressed [ 1574.550713][T22940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1574.565953][T22940] netlink: 'syz.0.4252': attribute type 2 has an invalid length. [ 1574.573681][T22940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1574.583578][T22940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1574.592637][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1575.581833][T22950] vxcan0: tx address claim with different name [ 1576.198328][T22954] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1576.207516][T22954] netlink: 'syz.4.4257': attribute type 2 has an invalid length. [ 1576.215338][T22954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1576.235409][T22954] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1576.244493][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1576.833238][T22969] vxcan0: tx address claim with different name [ 1578.619423][T22982] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1578.628505][T22982] netlink: 'syz.3.4265': attribute type 2 has an invalid length. [ 1578.636272][T22982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1579.074061][T22983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22983 comm=syz.1.4264 [ 1579.200162][T22983] overlayfs: failed to resolve './bus': -2 [ 1579.499624][T22998] vxcan0: tx address claim with different name [ 1580.811491][T23006] __nla_validate_parse: 3 callbacks suppressed [ 1580.811521][T23006] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1580.826792][T23006] netlink: 'syz.3.4271': attribute type 2 has an invalid length. [ 1580.834578][T23006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1581.499597][T16277] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 1581.667530][T16277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1581.897419][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1581.916357][T16277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1581.972422][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1581.994988][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1582.097861][T16277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.106112][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1582.119607][T16277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.131452][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1582.142740][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1582.158664][T16277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.218752][T23024] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1582.235160][T23024] netlink: 'syz.1.4277': attribute type 2 has an invalid length. [ 1582.242918][T23024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1582.255807][T23024] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1582.264901][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1582.584858][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1582.596100][T16277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.607950][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1582.630647][T16277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1582.656086][T16277] usb 5-1: string descriptor 0 read error: -22 [ 1582.663410][T16277] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1582.675102][T16277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.972172][T16277] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1584.218306][ T30] audit: type=1326 audit(1785266874.888:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.321567][T23033] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 1584.328303][T23033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1584.336472][ T30] audit: type=1326 audit(1785266874.888:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.372837][T23033] vhci_hcd vhci_hcd.0: Device attached [ 1584.394615][ T30] audit: type=1326 audit(1785266874.888:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.434225][T23054] fuse: Unknown parameter 'user_id00000000000000000000' [ 1584.441370][ T30] audit: type=1326 audit(1785266874.888:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.506156][ T30] audit: type=1326 audit(1785266874.888:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.576281][ T30] audit: type=1326 audit(1785266874.888:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1584.758799][T18214] usb 38-1: SetAddress Request (2) to port 0 [ 1584.900296][T23060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1584.909388][T23060] netlink: 'syz.0.4285': attribute type 2 has an invalid length. [ 1584.917094][T23060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1584.959824][T18214] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1585.055337][T21599] usb 5-1: USB disconnect, device number 110 [ 1585.212390][ T30] audit: type=1326 audit(1785266874.888:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1585.304281][ T30] audit: type=1326 audit(1785266874.888:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1585.349590][ T30] audit: type=1326 audit(1785266874.888:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1585.385906][ T30] audit: type=1326 audit(1785266874.888:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.4279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd19bf9de99 code=0x7ffc0000 [ 1585.428812][T23050] vhci_hcd: connection reset by peer [ 1585.967091][ T6647] vhci_hcd vhci_hcd.2: stop threads [ 1586.124214][ T6647] vhci_hcd vhci_hcd.2: release socket [ 1586.152410][ T6647] vhci_hcd vhci_hcd.2: disconnect device [ 1586.596906][T23086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4294'. [ 1588.652081][T23111] fuse: Bad value for 'fd' [ 1589.228781][T21599] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1589.295382][T23122] binder: 23113:23122 ioctl c0306201 0 returned -14 [ 1589.490078][T21599] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1589.574651][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1589.574694][ T30] audit: type=1400 audit(1785266880.248:754): avc: denied { write } for pid=23132 comm="syz.3.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1589.678896][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1589.813914][T21599] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1589.834011][T21599] usb 5-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1589.846107][T21599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.859251][T21599] usb 5-1: config 0 descriptor?? [ 1589.988771][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1589.999135][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1590.015688][ T24] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1590.035289][ T24] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1590.055447][ T24] usb 2-1: config 14 has no interface number 0 [ 1590.065850][ T24] usb 2-1: config 14 has no interface number 1 [ 1590.079534][ T24] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1590.099158][T18214] usb 38-1: device descriptor read/8, error -110 [ 1590.214857][ T24] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1590.254473][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1590.281873][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1590.293356][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1590.304876][ T24] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.327052][ T24] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1590.358771][ T24] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1590.382714][ T24] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1590.397959][T21599] hid (null): global environment stack underflow [ 1590.399235][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.414567][ T24] usb 2-1: Product: syz [ 1590.419059][ T24] usb 2-1: Manufacturer: syz [ 1590.424222][ T24] usb 2-1: SerialNumber: syz [ 1590.438122][T21599] hid (null): global environment stack underflow [ 1590.460018][T21599] magicmouse 0003:05AC:0323.0005: unknown main item tag 0x1 [ 1590.473970][T21599] magicmouse 0003:05AC:0323.0005: global environment stack underflow [ 1590.503764][T21599] magicmouse 0003:05AC:0323.0005: item 0 2 1 11 parsing failed [ 1590.586151][T23144] binder: 23136:23144 ioctl c0306201 0 returned -14 [ 1590.846333][T21599] magicmouse 0003:05AC:0323.0005: magicmouse hid parse failed [ 1590.855235][T18214] usb usb38-port1: attempt power cycle [ 1590.861652][T21599] magicmouse 0003:05AC:0323.0005: probe with driver magicmouse failed with error -22 [ 1590.879302][T21599] usb 5-1: USB disconnect, device number 111 [ 1591.177101][ T24] legousbtower 2-1:14.57: interrupt endpoints not found [ 1591.452487][T18214] usb usb38-port1: unable to enumerate USB device [ 1591.950779][ T24] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1591.961472][ T24] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1592.031697][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 1592.648921][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1592.914549][T21599] usb 2-1: USB disconnect, device number 100 [ 1592.920588][ C0] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1592.961350][T21599] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1593.062815][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1593.074279][ T24] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1593.084910][ T24] usb 5-1: config 220 has no interface number 2 [ 1593.096966][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1593.110670][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1593.117496][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1593.124836][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1593.133698][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1593.154653][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.173024][ T24] usb 5-1: Product: syz [ 1593.177611][ T24] usb 5-1: Manufacturer: syz [ 1593.183707][ T24] usb 5-1: SerialNumber: syz [ 1593.298900][T17271] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1593.417076][ T24] usb 5-1: selecting invalid altsetting 0 [ 1593.425539][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1593.441303][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 1593.452998][ T24] usb 5-1: selecting invalid altsetting 0 [ 1593.461347][T17271] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1593.470485][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1593.478623][T17271] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1593.492222][ T24] usb 5-1: USB disconnect, device number 112 [ 1593.502979][T17271] usb 3-1: config 220 has no interface number 2 [ 1593.515148][T17271] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1593.530655][T17271] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1593.537449][T17271] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1593.545953][T17271] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1593.566643][T17271] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1593.582468][T17271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.590739][T17271] usb 3-1: Product: syz [ 1593.594912][T17271] usb 3-1: Manufacturer: syz [ 1593.599906][T17271] usb 3-1: SerialNumber: syz [ 1593.819275][T17271] usb 3-1: selecting invalid altsetting 0 [ 1593.835667][T17271] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1593.843892][T17271] uvcvideo 3-1:220.0: No valid video chain found. [ 1593.863769][T17271] usb 3-1: selecting invalid altsetting 0 [ 1593.872519][T17271] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1593.884763][T17271] usb 3-1: USB disconnect, device number 90 [ 1593.959832][T21599] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 1594.116313][T21599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1594.136070][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1594.175296][T21599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1594.197684][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1594.209352][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1594.224724][T21599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1594.246459][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1594.263187][T21599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1594.306342][T23189] 9p: Bad value for 'rfdno' [ 1594.317710][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1594.368020][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1594.401953][T21599] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1594.420602][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1594.438498][T21599] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1594.451735][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1594.463526][T21599] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1594.486661][T21599] usb 2-1: string descriptor 0 read error: -22 [ 1594.506961][T21599] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1594.516624][T21599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.550892][T21599] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1594.668766][T18214] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1594.830273][T18214] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1594.852639][T18214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.891968][T18214] usb 1-1: config 0 descriptor?? [ 1596.417525][T23211] binder: 23208:23211 ioctl c0306201 0 returned -14 [ 1596.769637][T18214] usb 1-1: Cannot set autoneg [ 1596.775561][T18214] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1596.785639][T17271] usb 2-1: USB disconnect, device number 101 [ 1596.875046][T18214] usb 1-1: USB disconnect, device number 123 [ 1598.033703][ T30] audit: type=1400 audit(1785266888.708:755): avc: denied { name_connect } for pid=23217 comm="syz.1.4331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1598.318943][T21599] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1598.478819][T21599] usb 2-1: Using ep0 maxpacket: 8 [ 1598.487011][T21599] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1598.517616][T21599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.663456][ T30] audit: type=1400 audit(1785266889.278:756): avc: denied { write } for pid=23224 comm="syz.3.4333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1599.010576][T21599] usb 2-1: config 0 has no interface number 0 [ 1599.035591][T21599] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1599.084463][T21599] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1599.115672][T21599] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1599.270508][T21599] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1599.280536][T21599] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1599.296040][T21599] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1599.305913][T21599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.328749][T21599] usb 2-1: Product: syz [ 1599.437002][T21599] usb 2-1: Manufacturer: syz [ 1599.441910][T21599] usb 2-1: SerialNumber: syz [ 1599.457770][T21599] usb 2-1: config 0 descriptor?? [ 1599.463644][ T30] audit: type=1400 audit(1785266890.128:757): avc: denied { setopt } for pid=23232 comm="syz.4.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1599.464251][T23218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1599.537804][ T30] audit: type=1400 audit(1785266890.208:758): avc: denied { setopt } for pid=23239 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1599.579207][ T30] audit: type=1400 audit(1785266890.238:759): avc: denied { connect } for pid=23239 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1599.739448][T21599] usb 2-1: NFC: intf ffff88807a4e2000 id ffffffff8fc688e0 [ 1599.940704][T21599] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 1599.953939][T21599] usb 2-1: USB disconnect, device number 102 [ 1599.964220][T21599] usb 2-1: NFC: intf ffff88807a4e2000 [ 1600.026951][T23251] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4338'. [ 1600.036116][T23251] netlink: 'syz.3.4338': attribute type 2 has an invalid length. [ 1600.043880][T23251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4338'. [ 1601.417368][T23261] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1601.600045][T23274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1601.624770][T23273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4344'. [ 1601.648256][T23274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23274 comm=syz.1.4345 [ 1601.671864][T23273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23273 comm=syz.4.4344 [ 1601.787573][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.793874][T23274] overlayfs: failed to resolve './bus': -2 [ 1601.795161][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.626833][T23290] fuse: Unknown parameter '0x0000000000000003' [ 1602.812786][T23294] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1602.948779][ T30] audit: type=1400 audit(1785266893.618:760): avc: denied { mount } for pid=23299 comm="syz.0.4353" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1602.978116][ T30] audit: type=1400 audit(1785266893.628:761): avc: denied { search } for pid=23299 comm="syz.0.4353" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1603.001524][ T30] audit: type=1400 audit(1785266893.628:762): avc: denied { write } for pid=23299 comm="syz.0.4353" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1603.024393][ T30] audit: type=1400 audit(1785266893.628:763): avc: denied { open } for pid=23299 comm="syz.0.4353" path="/296/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1603.855445][ T30] audit: type=1400 audit(1785266894.128:764): avc: denied { mount } for pid=23312 comm="syz.4.4359" name="/" dev="ramfs" ino=116051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1604.266939][T23329] ======================================================= [ 1604.266939][T23329] WARNING: The mand mount option has been deprecated and [ 1604.266939][T23329] and is ignored by this kernel. Remove the mand [ 1604.266939][T23329] option from the mount to silence this warning. [ 1604.266939][T23329] ======================================================= [ 1604.317465][ T30] audit: type=1400 audit(1785266894.988:765): avc: denied { mount } for pid=23319 comm="syz.1.4361" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1605.302286][ T30] audit: type=1400 audit(1785266895.978:766): avc: denied { unmount } for pid=18251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1605.330091][T23325] syzkaller1: entered promiscuous mode [ 1605.355902][T23325] syzkaller1: entered allmulticast mode [ 1605.409018][ T30] audit: type=1400 audit(1785266896.088:767): avc: denied { write } for pid=23333 comm="syz.4.4366" name="functions" dev="configfs" ino=9158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1605.466018][ T30] audit: type=1400 audit(1785266896.118:768): avc: denied { write } for pid=23333 comm="syz.4.4366" name="c.1" dev="configfs" ino=7896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1605.539058][ T30] audit: type=1400 audit(1785266896.118:769): avc: denied { write } for pid=23333 comm="syz.4.4366" name="c.1" dev="configfs" ino=7896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1605.580048][T23334] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 2840 at bInterval 1 > max ISOC 1023, may drop data! [ 1606.280828][T23346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.288464][T23346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.307671][T23346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.314739][T23346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.322041][T23346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.329086][T23346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.339709][T23346] team0: Port device bridge0 added [ 1606.346205][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4370'. [ 1607.326522][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1609.510334][ T30] audit: type=1400 audit(1785266900.128:770): avc: denied { read } for pid=23379 comm="syz.4.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1609.925947][ T30] audit: type=1400 audit(1785266900.208:771): avc: denied { write } for pid=23379 comm="syz.4.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1611.697932][ T30] audit: type=1400 audit(1785266902.338:772): avc: denied { read } for pid=23415 comm="syz.4.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1611.746524][ T30] audit: type=1400 audit(1785266902.418:773): avc: denied { mount } for pid=23421 comm="syz.1.4393" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1611.825519][T23422] dyndbg: bad flag-op n, at start of n‰t/sF0ý¶O [ 1611.914663][T23422] dyndbg: flags parse failed [ 1612.172486][ T30] audit: type=1400 audit(1785266902.848:774): avc: denied { unmount } for pid=18251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1612.252048][T23428] capability: warning: `syz.1.4396' uses 32-bit capabilities (legacy support in use) [ 1612.864647][ T30] audit: type=1400 audit(1785266902.988:775): avc: denied { setopt } for pid=23423 comm="syz.3.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1612.935109][ T30] audit: type=1400 audit(1785266903.588:776): avc: denied { ioctl } for pid=23423 comm="syz.3.4394" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1612.996797][ T30] audit: type=1400 audit(1785266903.668:777): avc: denied { accept } for pid=23433 comm="syz.2.4397" lport=56170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1613.163988][ T30] audit: type=1400 audit(1785266903.838:778): avc: denied { read } for pid=23436 comm="syz.3.4398" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1613.793416][T23455] smpboot: CPU 1 is now offline [ 1613.855571][T23456] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1613.960897][ T30] audit: type=1400 audit(1785266904.638:779): avc: denied { ioctl } for pid=23461 comm="syz.4.4407" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1613.986015][T23462] Trying to write to read-only block-device nullb0 [ 1614.383616][T23481] tipc: Started in network mode [ 1614.388526][T23481] tipc: Node identity 6a6f84b6394c, cluster identity 4711 [ 1614.396093][T23481] tipc: Enabled bearer , priority 0 [ 1614.405200][T23481] syzkaller0: entered promiscuous mode [ 1614.409561][T23484] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 1614.410979][T23481] syzkaller0: entered allmulticast mode [ 1614.419745][T23484] overlayfs: missing 'lowerdir' [ 1614.449658][T23481] tipc: Resetting bearer [ 1614.458673][T23479] tipc: Resetting bearer [ 1614.474985][T23479] tipc: Disabling bearer [ 1614.543237][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1614.543251][ T30] audit: type=1400 audit(1785266905.228:782): avc: denied { setopt } for pid=23491 comm="syz.2.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1614.553505][T23492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.576792][T23492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.638651][T23496] bridge1: entered promiscuous mode [ 1614.646985][T23496] bridge1: entered allmulticast mode [ 1614.692832][T23500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1614.744486][ T30] audit: type=1400 audit(1785266905.418:783): avc: denied { write } for pid=23506 comm="syz.4.4427" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1615.127159][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805851ec00: rx timeout, send abort [ 1615.139683][ T30] audit: type=1400 audit(1785266905.818:784): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1615.171898][ T30] audit: type=1400 audit(1785266905.818:785): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.193710][ T30] audit: type=1400 audit(1785266905.818:786): avc: denied { write search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.217509][ T30] audit: type=1400 audit(1785266905.818:787): avc: denied { add_name } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.227141][T23520] infiniband syz2: set down [ 1615.243166][T23520] infiniband syz2: added ipvlan0 [ 1615.243402][ T30] audit: type=1400 audit(1785266905.818:788): avc: denied { create } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1615.265096][T23520] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1615.270552][ T30] audit: type=1400 audit(1785266905.818:789): avc: denied { append open } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1615.283972][T23520] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1615.325565][ T30] audit: type=1400 audit(1785266905.818:790): avc: denied { getattr } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1615.327790][T23520] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1615.371657][T23520] RDS/IB: syz2: added [ 1615.375935][T23520] smc: adding ib device syz2 with port count 1 [ 1615.382659][T23520] smc: ib device syz2 port 1 has pnetid S (user defined) [ 1615.627354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805851e400: rx timeout, send abort [ 1615.636665][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805851ec00: abort rx timeout. Force session deactivation [ 1616.129548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db42400: rx timeout, send abort [ 1616.135610][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805851e400: abort rx timeout. Force session deactivation [ 1616.138201][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db42400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 1618.218297][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1618.239063][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1618.247315][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1618.281504][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1618.290668][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1618.316615][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1618.324793][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1618.334172][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1618.342469][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1618.351668][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1618.754517][T23586] loop7: detected capacity change from 0 to 16384 [ 1619.006127][T23591] loop7: detected capacity change from 16384 to 16383 [ 1620.315644][T23560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.322923][T23560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.330251][T23560] bridge_slave_0: entered allmulticast mode [ 1620.337479][T23560] bridge_slave_0: entered promiscuous mode [ 1620.346845][T23560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.354039][T23560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.361701][T23560] bridge_slave_1: entered allmulticast mode [ 1620.369123][T23560] bridge_slave_1: entered promiscuous mode [ 1620.402522][T23560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.415527][T23560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.425613][ T5609] Bluetooth: hci4: command tx timeout [ 1620.458174][T23560] team0: Port device team_slave_0 added [ 1620.466049][T23560] team0: Port device team_slave_1 added [ 1620.493207][T23560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.500298][T23560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.527848][T23560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.581557][T23560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.615411][T23560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.655758][T23560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.771519][T23615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1620.778034][T23560] hsr_slave_0: entered promiscuous mode [ 1620.786502][T23560] hsr_slave_1: entered promiscuous mode [ 1620.792838][T23560] debugfs: 'hsr0' already exists in 'hsr' [ 1620.798625][T23560] Cannot create hsr debugfs directory [ 1621.006197][T23560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1621.018313][T23560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.037112][T23560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1621.047596][T23560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1621.056148][T23560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1621.066950][T23560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1621.076021][T23560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1621.094288][T23560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1621.126425][T23560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.133585][T23560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.190453][T23634] kvm: pic: non byte write [ 1621.199336][T23560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.217752][T19358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.254271][T23560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.267388][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.274449][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.296730][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.303864][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.704500][T23560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.926137][T23560] veth0_vlan: entered promiscuous mode [ 1621.941992][T23560] veth1_vlan: entered promiscuous mode [ 1621.992073][T23663] sctp: [Deprecated]: syz.2.4470 (pid 23663) Use of int in maxseg socket option. [ 1621.992073][T23663] Use struct sctp_assoc_value instead [ 1622.016699][T23560] veth0_macvtap: entered promiscuous mode [ 1622.029596][T23560] veth1_macvtap: entered promiscuous mode [ 1622.055950][T23560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.072711][T23560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1622.086510][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.103859][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.126130][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.162576][ T30] audit: type=1400 audit(1785266912.838:791): avc: denied { write } for pid=23668 comm="syz.1.4473" name="cluster" dev="configfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1622.186086][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.211876][ T30] audit: type=1400 audit(1785266912.888:792): avc: denied { write } for pid=23668 comm="syz.1.4473" name="node" dev="configfs" ino=117146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1622.264025][T19358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.290320][T19358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.327837][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.336287][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.499583][ T5609] Bluetooth: hci4: command tx timeout [ 1623.870572][T23698] bridge_slave_0: left allmulticast mode [ 1623.876229][T23698] bridge_slave_0: left promiscuous mode [ 1623.882022][T23698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.892767][T23698] bridge_slave_1: left allmulticast mode [ 1623.898395][T23698] bridge_slave_1: left promiscuous mode [ 1623.904388][T23698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.918621][T23698] team0: Port device team_slave_0 removed [ 1623.927225][T23698] team0: Port device team_slave_1 removed [ 1623.933459][T23698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1623.941614][T23698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1623.950578][T23698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1623.957927][T23698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1623.966730][T23698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1624.159282][ T30] audit: type=1400 audit(1785266914.838:793): avc: denied { execute } for pid=23710 comm="syz.1.4486" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=117220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1624.453868][T23723] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1624.579108][ T5609] Bluetooth: hci4: command tx timeout [ 1625.408553][ T30] audit: type=1800 audit(1785266916.078:794): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4514" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1625.871637][T23788] team0: Port device bridge0 added [ 1625.926208][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1626.007077][T23798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1626.668879][ T5609] Bluetooth: hci4: command tx timeout [ 1627.503833][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1627.839990][T23857] syzkaller0: entered promiscuous mode [ 1627.845495][T23857] syzkaller0: entered allmulticast mode [ 1628.266071][T23875] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1628.305068][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1628.327381][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1628.341949][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1628.354880][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1628.363140][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1628.371057][T23882] binder: 23881:23882 ioctl 4018620d 0 returned -22 [ 1628.688817][T16277] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1629.208521][T16277] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1629.232705][T16277] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.262575][T23900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23900 comm=syz.5.4560 [ 1629.265970][T16277] usb 3-1: config 220 has no interface number 2 [ 1629.285902][T16277] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1629.290069][T23900] overlayfs: failed to resolve './bus': -2 [ 1629.351316][T16277] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1629.358974][T16277] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1629.366213][T16277] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1629.378479][T16277] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1629.388191][T16277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.396506][T16277] usb 3-1: Product: syz [ 1629.401028][T16277] usb 3-1: Manufacturer: syz [ 1629.405722][T16277] usb 3-1: SerialNumber: syz [ 1630.369937][T23907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1630.375930][T23907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1630.419484][ T50] Bluetooth: hci6: command tx timeout [ 1630.634974][T23907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1630.741103][T23907] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1630.747075][T23907] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1630.761566][T23907] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1630.843482][T16277] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1630.863341][T16277] uvcvideo 3-1:220.0: No valid video chain found. [ 1630.866250][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1630.878788][T16277] usb 3-1: selecting invalid altsetting 0 [ 1630.881316][T23911] bridge_slave_0: entered promiscuous mode [ 1630.931528][T16277] usb 3-1: selecting invalid altsetting 0 [ 1630.937357][T16277] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1630.976389][T16277] usb 3-1: USB disconnect, device number 91 [ 1631.628521][T23926] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4567'. [ 1631.753054][T23878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.760294][T23878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.767426][T23878] bridge_slave_0: entered allmulticast mode [ 1631.777173][T23878] bridge_slave_0: entered promiscuous mode [ 1631.788676][T23878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.797092][T23878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.801615][T23937] binder: 23936:23937 ioctl 4018620d 0 returned -22 [ 1631.804410][T23878] bridge_slave_1: entered allmulticast mode [ 1631.819314][T23878] bridge_slave_1: entered promiscuous mode [ 1631.906788][T23878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.950271][ T30] audit: type=1400 audit(1785266922.618:795): avc: denied { bind } for pid=23941 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1631.969992][T23878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.018786][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1632.026352][T23878] team0: Port device team_slave_0 added [ 1632.065966][T23878] team0: Port device team_slave_1 added [ 1632.191306][T23878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.206993][T23878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.266857][T23878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.304166][T23878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.320233][T23878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.358034][T23878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.452733][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1632.471872][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1632.481114][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1632.492013][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1632.503694][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1632.507930][T23878] hsr_slave_0: entered promiscuous mode [ 1632.561144][T23878] hsr_slave_1: entered promiscuous mode [ 1632.587038][T23878] debugfs: 'hsr0' already exists in 'hsr' [ 1632.606312][T23878] Cannot create hsr debugfs directory [ 1632.818939][ T5609] Bluetooth: hci6: command 0x040f tx timeout [ 1633.309697][T23878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1633.338323][T23878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1633.363458][T23878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1633.387689][T23878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1633.405120][T23878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1633.423312][T23878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1633.449378][T23878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1633.495625][T23878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1633.836379][T23878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.868567][T23993] vxcan0: tx address claim with different name [ 1633.887584][T23878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.931435][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.938555][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.030099][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.037155][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.099802][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 1634.110266][T23993] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1634.125590][T23993] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1634.581545][ T5609] Bluetooth: hci7: command tx timeout [ 1634.834521][T23993] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1634.848166][T23993] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1634.901235][T23993] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1634.921713][T23993] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1634.933573][T23950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.949741][T23950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.973370][T23950] bridge_slave_0: entered allmulticast mode [ 1635.003396][T23950] bridge_slave_0: entered promiscuous mode [ 1635.096008][T23950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.130938][T23950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.158530][T23950] bridge_slave_1: entered allmulticast mode [ 1635.181384][T23950] bridge_slave_1: entered promiscuous mode [ 1635.219423][ T30] audit: type=1400 audit(1785266925.888:796): avc: denied { mounton } for pid=24015 comm="syz.1.4589" path="/342/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1635.264496][T23878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1635.275284][ T30] audit: type=1400 audit(1785266925.918:797): avc: denied { mount } for pid=24015 comm="syz.1.4589" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1635.297471][T23878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1635.319102][T23950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1635.346406][T23950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.486632][T23950] team0: Port device team_slave_0 added [ 1635.510534][T23950] team0: Port device team_slave_1 added [ 1635.579625][T23950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.595750][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.650333][T23950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.676293][T23950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.693723][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.746776][T23950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.896086][T23950] hsr_slave_0: entered promiscuous mode [ 1635.902428][T23950] hsr_slave_1: entered promiscuous mode [ 1635.909423][T23950] debugfs: 'hsr0' already exists in 'hsr' [ 1635.921256][T23950] Cannot create hsr debugfs directory [ 1636.525626][T23878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.640508][T23950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1636.761797][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1636.781601][T23950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1636.805106][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1636.844107][T23950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1636.891004][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.898836][ T30] audit: type=1400 audit(1785266927.538:798): avc: denied { name_bind } for pid=24042 comm="syz.2.4595" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1636.964644][T23950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1637.192288][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1637.401090][T23878] veth0_vlan: entered promiscuous mode [ 1637.418448][T23950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.433013][T23878] veth1_vlan: entered promiscuous mode [ 1637.460617][T23950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.482298][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.489425][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.512743][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.519871][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.549283][T23878] veth0_macvtap: entered promiscuous mode [ 1637.561867][T24060] binder: 24059:24060 ioctl 4018620d 0 returned -22 [ 1637.582209][T23878] veth1_macvtap: entered promiscuous mode [ 1637.643181][T23878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1637.795105][T23878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.842499][ T1113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.851877][ T1113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.820786][ T1113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.841547][ T1113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.462428][T19362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.490861][T19362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.522729][ T6647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.535063][ T6647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.679668][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 1639.761771][T23950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.788158][T24092] vxcan0: tx address claim with different name [ 1640.432855][T23950] veth0_vlan: entered promiscuous mode [ 1640.477370][T23950] veth1_vlan: entered promiscuous mode [ 1645.085928][T23950] veth0_macvtap: entered promiscuous mode [ 1645.126258][T23950] veth1_macvtap: entered promiscuous mode [ 1645.203626][T23950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.232761][T23950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.353147][ T1103] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.362629][ T1103] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.379794][ T1103] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.392884][ T1103] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.449580][T24135] vxcan0: tx address claim with different name [ 1645.670378][T24141] binder: 24140:24141 ioctl 4018620d 0 returned -22 [ 1645.731825][T19358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.767666][T19358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.918041][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.944816][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.047168][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4616'. [ 1648.108353][T24169] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1648.117485][T24169] netlink: 'syz.2.4620': attribute type 2 has an invalid length. [ 1648.125277][T24169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1648.137681][T24169] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1648.146795][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1648.503016][T24171] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1649.020077][T24183] binder: 24181:24183 ioctl 4018620d 0 returned -22 [ 1649.255013][T24191] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1649.264157][T24191] netlink: 'syz.6.4627': attribute type 2 has an invalid length. [ 1649.272207][T24191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1649.692867][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4629'. [ 1649.948927][ T30] audit: type=1400 audit(1785266940.628:799): avc: denied { map } for pid=24202 comm="syz.7.4633" path="socket:[121341]" dev="sockfs" ino=121341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1649.991235][ T5733] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1650.012072][T24206] vxcan0: tx address claim with different name [ 1650.069212][T21599] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1650.160755][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.180021][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.219987][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.263162][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.280347][T21599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.286607][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.330397][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.333289][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.353422][T21599] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.357114][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.376288][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.396105][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.421151][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.465398][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.469627][T21599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.513093][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.519927][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.552296][T21599] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.564465][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.587295][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.587429][ T5733] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.611867][T21599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1650.641770][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.643882][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1650.666778][T21599] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.695771][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.708236][T21599] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.713094][ T5733] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1650.760090][T21599] usb 6-1: string descriptor 0 read error: -22 [ 1650.766319][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1650.766346][ T5733] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1650.831945][T21599] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1650.866547][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 1650.867488][T21599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.887664][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1650.895416][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1650.900159][T21599] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1650.910833][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1650.922516][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1650.930462][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1650.938645][ T5733] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1650.965402][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.972297][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1650.993988][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1651.001471][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1651.009417][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1651.016669][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1651.075824][ T5733] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1653.051106][T24076] usb 6-1: USB disconnect, device number 2 [ 1653.058992][ T5609] Bluetooth: hci8: command tx timeout [ 1653.716500][T24076] usb 3-1: USB disconnect, device number 92 [ 1655.315299][ T5609] Bluetooth: hci8: command tx timeout [ 1655.906653][ T5733] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1656.258044][ T5733] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.302567][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.378409][ T5733] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.407249][T24214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.434217][T24214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.442148][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.467581][T24214] bridge_slave_0: entered allmulticast mode [ 1656.477563][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.508389][T24214] bridge_slave_0: entered promiscuous mode [ 1656.543988][T24214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.552190][ T5733] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.571007][T24214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.581007][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.593257][T24214] bridge_slave_1: entered allmulticast mode [ 1656.599645][ T5733] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.614302][T24291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1656.626601][T24214] bridge_slave_1: entered promiscuous mode [ 1656.663110][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.688397][T24293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24293 comm=syz.5.4655 [ 1656.732404][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.764894][T24214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.765964][T24293] overlayfs: failed to resolve './bus': -2 [ 1656.784052][ T5733] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.802955][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.832792][T24214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.844136][ T5733] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.888642][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.923311][ T5733] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.946235][T24214] team0: Port device team_slave_0 added [ 1656.955388][ T5733] usb 7-1: string descriptor 0 read error: -22 [ 1656.966785][ T5733] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1656.981823][T24214] team0: Port device team_slave_1 added [ 1656.991190][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.048457][ T5733] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1657.089818][T24214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.101477][T24214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.131042][T24297] vxcan0: tx address claim with different name [ 1657.143103][T24214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.238902][T24290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.266156][T24290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.278472][T24290] bond0 (unregistering): Released all slaves [ 1657.297168][T24214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.379136][ T5609] Bluetooth: hci8: command tx timeout [ 1657.412396][T24214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.005523][T24214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.024098][T24297] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1658.120024][T24297] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 1658.158320][T24214] hsr_slave_0: entered promiscuous mode [ 1658.166962][T24214] hsr_slave_1: entered promiscuous mode [ 1658.187432][T24214] debugfs: 'hsr0' already exists in 'hsr' [ 1658.193603][T24214] Cannot create hsr debugfs directory [ 1658.431038][T24312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4660'. [ 1658.665401][T24214] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1658.675812][T24317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24317 comm=syz.7.4662 [ 1658.699802][T24214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1658.709642][T24214] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1658.760151][T24214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1658.775887][T24214] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1658.782700][ T5733] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1658.815991][T24214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1658.842111][T24214] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1658.871510][T24214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1658.943121][T24327] overlayfs: regular lower layers cannot follow data lower layers [ 1658.960458][ T5733] usb 6-1: Using ep0 maxpacket: 8 [ 1659.101536][T16277] usb 7-1: USB disconnect, device number 2 [ 1659.111837][ T5733] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.126864][ T5733] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1659.177046][ T5733] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1659.217005][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.225834][ T30] audit: type=1400 audit(1785266949.888:800): avc: denied { set_context_mgr } for pid=24330 comm="syz.6.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1659.255378][ T5733] usb 6-1: config 0 descriptor?? [ 1659.371182][T24214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.416682][T24214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.458794][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.465875][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.488832][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.495957][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.391178][T24352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4669'. [ 1661.456351][T24354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24354 comm=syz.6.4669 [ 1661.472689][T24356] team0: Port device bridge0 removed [ 1661.496561][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4672'. [ 1661.587478][T24352] overlayfs: failed to resolve './bus': -2 [ 1661.706089][ T5733] usbhid 6-1:0.0: can't add hid device: -71 [ 1661.723483][ T5733] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1661.770550][ T5733] usb 6-1: USB disconnect, device number 3 [ 1662.700433][T24371] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1662.709597][T24371] netlink: 'syz.2.4675': attribute type 2 has an invalid length. [ 1662.717342][T24371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1663.232611][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.239029][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1666.392603][T24214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.703111][T24401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1666.712242][T24401] netlink: 'syz.2.4681': attribute type 2 has an invalid length. [ 1666.720025][T24401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1667.177213][T24408] binder: 24393:24408 ioctl c0306201 0 returned -14 [ 1667.283213][T24411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.290511][T24411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.406837][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4683'. [ 1667.412215][T24411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.422794][T24411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.430531][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.437578][T24411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.481218][T24411] team0: Port device bridge0 added [ 1667.571366][T24417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4686'. [ 1667.587165][T24417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24417 comm=syz.2.4686 [ 1668.243944][T24214] veth0_vlan: entered promiscuous mode [ 1668.272766][T24214] veth1_vlan: entered promiscuous mode [ 1668.288073][T24424] netlink: 'syz.7.4687': attribute type 1 has an invalid length. [ 1668.325162][T24214] veth0_macvtap: entered promiscuous mode [ 1668.336243][T24214] veth1_macvtap: entered promiscuous mode [ 1668.372419][T24214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.388421][T24214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1668.402371][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.485640][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.500133][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.511877][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.630333][T24429] vxcan0: tx address claim with different name [ 1670.680941][T24439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.691144][T24439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.700768][T24439] bond0 (unregistering): Released all slaves [ 1671.027974][T19358] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.114378][T19358] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.121528][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1671.141130][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1671.149843][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1671.157415][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1671.166435][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1671.184583][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1671.195188][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1671.205514][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1671.214976][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1671.223007][T19358] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.224005][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1671.334835][T19358] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.665886][T24449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.673177][T24449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.680369][T24449] bridge_slave_0: entered allmulticast mode [ 1671.686994][T24449] bridge_slave_0: entered promiscuous mode [ 1671.694188][T24449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.701504][T24449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.708588][T24449] bridge_slave_1: entered allmulticast mode [ 1671.715500][T24449] bridge_slave_1: entered promiscuous mode [ 1671.740771][T24449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.765874][T24449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.791438][T24449] team0: Port device team_slave_0 added [ 1671.813918][T24449] team0: Port device team_slave_1 added [ 1671.844488][T24449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.852268][T24449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.878595][T24449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.891579][T24449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.898531][T24449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.924924][T24449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.963867][T19358] bridge_slave_1: left allmulticast mode [ 1671.969608][T19358] bridge_slave_1: left promiscuous mode [ 1671.975323][T19358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.987158][T19358] bridge_slave_0: left allmulticast mode [ 1671.995116][T19358] bridge_slave_0: left promiscuous mode [ 1672.003895][T19358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.131865][ T30] audit: type=1400 audit(1785266962.808:801): avc: denied { write } for pid=24468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.186088][T19358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.203530][T19358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.212238][ T30] audit: type=1400 audit(1785266962.878:802): avc: denied { write } for pid=24479 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.235722][T19358] bond0 (unregistering): Released all slaves [ 1672.253221][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1672.285054][T24449] hsr_slave_0: entered promiscuous mode [ 1672.292751][T24449] hsr_slave_1: entered promiscuous mode [ 1672.299169][T24449] debugfs: 'hsr0' already exists in 'hsr' [ 1672.305111][T24449] Cannot create hsr debugfs directory [ 1672.615530][ T30] audit: type=1400 audit(1785266963.288:803): avc: denied { write } for pid=24482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.702695][T19358] hsr_slave_0: left promiscuous mode [ 1672.704739][ T30] audit: type=1400 audit(1785266963.378:804): avc: denied { write } for pid=24493 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.732516][T19358] hsr_slave_1: left promiscuous mode [ 1672.738399][T19358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.753699][T19358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.763135][T19358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.774261][T19358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.789848][T19358] veth1_macvtap: left promiscuous mode [ 1672.795317][T19358] veth0_macvtap: left promiscuous mode [ 1672.800931][T19358] veth1_vlan: left promiscuous mode [ 1672.806146][T19358] veth0_vlan: left promiscuous mode [ 1672.936047][T19358] team0 (unregistering): Port device team_slave_1 removed [ 1672.947628][T19358] team0 (unregistering): Port device team_slave_0 removed [ 1673.296695][ T30] audit: type=1400 audit(1785266963.968:805): avc: denied { write } for pid=24496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.304741][T24449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1673.320030][ T50] Bluetooth: hci8: command tx timeout [ 1673.340205][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1673.350504][T24449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1673.360299][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1673.368172][T24449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1673.377900][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1673.386977][T24449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1673.396451][T24449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1673.421751][ T30] audit: type=1400 audit(1785266964.098:806): avc: denied { write } for pid=24507 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.477571][T24449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.495171][T24449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.507419][T19358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.514507][T19358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.533019][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.540129][T19362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.756408][ T30] audit: type=1400 audit(1785266964.428:807): avc: denied { write } for pid=24515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.837943][ T30] audit: type=1400 audit(1785266964.508:808): avc: denied { write } for pid=24533 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.931909][T24449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.066299][T24449] veth0_vlan: entered promiscuous mode [ 1674.076494][T24449] veth1_vlan: entered promiscuous mode [ 1674.097846][T24449] veth0_macvtap: entered promiscuous mode [ 1674.107576][T24449] veth1_macvtap: entered promiscuous mode [ 1674.122056][T24449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.134645][T24449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.145834][T19358] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.154787][T19358] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.164285][T19358] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.173543][T19358] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.291537][T19363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.299933][T19363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.322481][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.331258][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.388975][ T50] Bluetooth: hci8: command tx timeout [ 1677.458952][ T50] Bluetooth: hci8: command tx timeout [ 1679.539300][ T50] Bluetooth: hci8: command tx timeout [ 1681.556963][T24551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.566149][T24551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.653272][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1681.889964][T24555] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.4698'. [ 1682.680820][T24585] overlayfs: regular lower layers cannot follow data lower layers [ 1683.041957][T24590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1683.054701][T24590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1683.067122][T24590] bond0 (unregistering): Released all slaves [ 1683.149274][ T24] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1683.320439][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1683.328040][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1683.328834][T24602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.346976][T24602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.354607][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1683.366973][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1683.378242][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1683.392956][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1683.406699][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1683.414133][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1683.426496][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1683.450019][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1683.463631][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1683.483503][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1683.492175][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1683.576866][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1683.590464][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1683.601647][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1683.618083][T24605] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1683.619150][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1683.639362][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1683.649313][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.678235][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1683.833657][T24616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1684.843824][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1685.068742][T16277] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1685.158808][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1685.167742][ T24] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.187189][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1685.206819][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1685.222119][T16277] usb 9-1: device descriptor read/64, error -71 [ 1685.238610][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.269758][ T24] usb 6-1: config 0 descriptor?? [ 1685.468731][T16277] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1685.819169][T16277] usb 9-1: device descriptor read/64, error -71 [ 1686.220997][T16277] usb usb9-port1: attempt power cycle [ 1686.254291][ T5733] usb 7-1: USB disconnect, device number 3 [ 1686.343219][T24646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1686.364692][T24644] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1686.464171][T24648] overlayfs: regular lower layers cannot follow data lower layers [ 1686.608950][T16277] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1686.702834][T16277] usb 9-1: device descriptor read/8, error -71 [ 1686.710598][T24653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4726'. [ 1686.731176][T24653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24653 comm=syz.7.4726 [ 1686.959963][T16277] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1686.979958][T16277] usb 9-1: device descriptor read/8, error -71 [ 1687.089376][T16277] usb usb9-port1: unable to enumerate USB device [ 1687.332429][T24664] vxcan0: tx address claim with different name [ 1687.411322][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1687.469996][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1687.613680][ T24] usb 6-1: USB disconnect, device number 4 [ 1688.082207][T24670] binder: 24668:24670 ioctl 4018620d 0 returned -22 [ 1688.253397][T24670] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4733'. [ 1688.342721][ T30] audit: type=1400 audit(1785266978.998:809): avc: denied { read } for pid=24671 comm="syz.5.4731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1688.839571][T24683] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1689.104882][T18214] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 1689.468774][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1689.490380][T18214] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1689.499003][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1689.511105][T18214] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1689.522945][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1689.534430][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1689.546707][T18214] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1689.554157][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1689.565048][T18214] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1689.576815][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1689.590002][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1689.602352][T18214] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1689.609845][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1689.620750][T18214] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1689.633050][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1689.644403][T18214] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1689.656017][ T9] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1689.667593][ T9] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1689.676931][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1689.685953][T18214] usb 9-1: string descriptor 0 read error: -22 [ 1689.692364][T18214] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1689.701732][T18214] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.711297][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1689.720383][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.728741][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1689.729712][ T9] usb 3-1: Product: syz [ 1689.742449][ T9] usb 3-1: Manufacturer: syz [ 1689.750466][ T9] usb 3-1: SerialNumber: syz [ 1689.755238][T18214] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1689.908778][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1689.921891][ T24] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.937206][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1689.949664][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1689.958961][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.976027][ T24] usb 6-1: config 0 descriptor?? [ 1690.113915][ T9] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1690.124463][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 1690.134578][ T9] usb 3-1: USB disconnect, device number 93 [ 1691.163505][T24714] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1691.172686][T24714] netlink: 'syz.6.4746': attribute type 2 has an invalid length. [ 1691.180494][T24714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1691.192497][T24714] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1691.201614][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1692.170669][ T5733] usb 9-1: USB disconnect, device number 6 [ 1693.100161][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1693.124823][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1693.231074][T24724] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4748'. [ 1693.240155][T24724] netlink: 'syz.8.4748': attribute type 2 has an invalid length. [ 1693.247864][T24724] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4748'. [ 1693.408919][ T24] usb 6-1: USB disconnect, device number 5 [ 1695.155508][T24752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1695.164968][T24752] netlink: 'syz.5.4757': attribute type 2 has an invalid length. [ 1695.172955][T24752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1695.193746][T24752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1695.202847][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1695.687445][T24757] vxcan0: tx address claim with different name [ 1696.846131][T24759] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1696.858787][T24759] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 1696.968600][T24772] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1696.977715][T24772] netlink: 'syz.6.4762': attribute type 2 has an invalid length. [ 1696.985484][T24772] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1698.742345][T24789] overlayfs: regular lower layers cannot follow data lower layers [ 1700.106825][T24809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1700.153895][T24809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24809 comm=syz.2.4773 [ 1700.414538][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1701.827558][T24844] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4781'. [ 1701.836656][T24844] netlink: 'syz.6.4781': attribute type 2 has an invalid length. [ 1701.844462][T24844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4781'. [ 1702.242977][T24852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1702.290664][T24852] netlink: 'syz.2.4783': attribute type 2 has an invalid length. [ 1702.317427][T24852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1702.781860][T24861] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4786'. [ 1702.804880][T24861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24861 comm=syz.8.4786 [ 1705.477815][T24882] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4793'. [ 1705.486951][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4793'. [ 1706.271636][T24892] binder: 24890:24892 ioctl 4018620d 0 returned -22 [ 1707.928217][T24909] vxcan0: tx address claim with different name [ 1710.116850][T24930] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1710.125984][T24930] netlink: 'syz.7.4806': attribute type 2 has an invalid length. [ 1710.133760][T24930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1710.155040][T24930] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1710.164125][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1710.467193][T24934] binder: 24933:24934 ioctl 4018620d 0 returned -22 [ 1711.133379][T24941] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1713.004419][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4815'. [ 1713.198858][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1714.500660][ T9] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.592219][ T9] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1714.602825][ T9] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1714.612929][ T9] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1714.622177][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.630425][ T9] usb 9-1: Product: syz [ 1714.634602][ T9] usb 9-1: Manufacturer: syz [ 1714.639468][ T9] usb 9-1: SerialNumber: syz [ 1714.696179][T24979] binder: 24976:24979 ioctl 4018620d 0 returned -22 [ 1714.761927][T24983] vxcan0: tx address claim with different name [ 1714.853551][ T9] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1714.861040][ T9] uvcvideo 9-1:220.0: No valid video chain found. [ 1714.871198][ T9] usb 9-1: USB disconnect, device number 7 [ 1715.039468][T24991] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4825'. [ 1717.682151][T25012] overlayfs: regular lower layers cannot follow data lower layers [ 1717.695374][T25013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4831'. [ 1717.844359][T25013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25013 comm=syz.6.4831 [ 1718.175358][T25025] binder: 25024:25025 ioctl 4018620d 0 returned -22 [ 1718.596272][T25039] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1718.808266][T25041] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4837'. [ 1718.958160][T25041] netlink: 'syz.7.4837': attribute type 2 has an invalid length. [ 1719.009750][T25041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4837'. [ 1719.114867][T25045] x_tables: duplicate underflow at hook 2 [ 1719.271152][T25050] vxcan0: tx address claim with different name [ 1719.898244][T25066] netlink: 252 bytes leftover after parsing attributes in process `syz.8.4845'. [ 1719.907618][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4845'. [ 1720.445183][T25071] binder: 25070:25071 ioctl 4018620d 0 returned -22 [ 1720.489334][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1720.510016][T25072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25072 comm=syz.2.4849 [ 1720.878765][ T5733] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1721.072055][ T5733] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.098490][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.112185][ T5733] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.124839][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.139913][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.154656][ T5733] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.162660][T25093] vxcan0: tx address claim with different name [ 1721.170256][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.184143][ T5733] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.197031][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.209775][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.228742][ T5733] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.239263][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.253673][ T5733] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.266809][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.279196][ T5733] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.306999][ T5733] usb 6-1: string descriptor 0 read error: -22 [ 1721.317293][ T5733] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1721.329809][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.553508][ T5733] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1721.854140][T25103] binder: 25102:25103 ioctl 4018620d 0 returned -22 [ 1722.614626][T25119] overlayfs: regular lower layers cannot follow data lower layers [ 1722.778451][T25124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4866'. [ 1722.803557][T25124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25124 comm=syz.6.4866 [ 1723.226885][T25137] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1723.236181][T25137] netlink: 'syz.7.4869': attribute type 2 has an invalid length. [ 1723.244375][T25137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1723.651640][T17271] usb 6-1: USB disconnect, device number 6 [ 1723.768551][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1724.079283][T25150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25150 comm=syz.6.4874 [ 1724.353856][T25150] overlayfs: failed to resolve './bus': -2 [ 1724.660735][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.671015][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1726.548634][T25175] overlayfs: regular lower layers cannot follow data lower layers [ 1728.534535][T25207] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1728.544621][T25207] netlink: 'syz.2.4888': attribute type 2 has an invalid length. [ 1728.555566][T25207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1729.353301][T25219] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4893'. [ 1729.362448][T25219] netlink: 'syz.8.4893': attribute type 2 has an invalid length. [ 1729.370244][T25219] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4893'. [ 1729.389709][T25219] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4893'. [ 1729.398813][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4893'. [ 1730.135808][T25229] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1730.144956][T25229] netlink: 'syz.7.4896': attribute type 2 has an invalid length. [ 1730.152758][T25229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1730.575276][T25232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1730.630137][T25233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1730.685531][T25234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25234 comm=syz.5.4898 [ 1730.957102][T25236] vxcan0: tx address claim with different name [ 1731.622777][T25251] vxcan0: tx address claim with different name [ 1733.635257][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1733.692328][T25279] vxcan0: tx address claim with different name [ 1733.720170][ T30] audit: type=1400 audit(1785267024.398:810): avc: denied { read append } for pid=25280 comm="syz.2.4913" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1734.024320][ T30] audit: type=1400 audit(1785267024.428:811): avc: denied { open } for pid=25280 comm="syz.2.4913" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1735.140935][T25302] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1735.150048][T25302] netlink: 'syz.5.4917': attribute type 2 has an invalid length. [ 1735.157762][T25302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1736.454581][T25324] vxcan0: tx address claim with different name [ 1737.614811][T25341] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4932'. [ 1738.168632][T25341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25341 comm=syz.6.4932 [ 1739.724056][T25357] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4935'. [ 1739.733227][T25357] netlink: 'syz.8.4935': attribute type 2 has an invalid length. [ 1739.740991][T25357] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4935'. [ 1740.113529][T25353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.610895][T25353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.660587][T25353] bond0 (unregistering): Released all slaves [ 1743.842504][T25411] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4954'. [ 1743.973115][T25411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25411 comm=syz.6.4954 [ 1744.769074][T25418] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4951'. [ 1744.778125][T25418] netlink: 'syz.7.4951': attribute type 2 has an invalid length. [ 1744.785879][T25418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4951'. [ 1746.504859][T25437] overlayfs: regular lower layers cannot follow data lower layers [ 1749.577246][ T5609] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1749.594324][ T5609] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1749.608085][ T5609] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1749.623147][ T5609] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1749.632663][ T5609] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1749.674983][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1749.682417][T25503] overlayfs: regular lower layers cannot follow data lower layers [ 1749.692593][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1749.706717][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1749.715837][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1749.725662][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1750.921791][T25525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4982'. [ 1751.026373][T25525] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25525 comm=syz.5.4982 [ 1751.779003][ T5609] Bluetooth: hci9: command tx timeout [ 1752.625280][T25496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.632553][T25496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.640070][T25496] bridge_slave_0: entered allmulticast mode [ 1752.647531][T25496] bridge_slave_0: entered promiscuous mode [ 1752.655872][T25496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.663342][T25496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.670753][T25496] bridge_slave_1: entered allmulticast mode [ 1752.678130][T25496] bridge_slave_1: entered promiscuous mode [ 1752.707609][T25496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.719489][T25496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.762209][T25496] team0: Port device team_slave_0 added [ 1752.783090][T25496] team0: Port device team_slave_1 added [ 1752.848849][T25496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1752.857305][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.920089][T25496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.226039][T25496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.239671][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1753.298723][T25496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.384692][T25496] hsr_slave_0: entered promiscuous mode [ 1753.399587][T25496] hsr_slave_1: entered promiscuous mode [ 1753.407177][T25496] debugfs: 'hsr0' already exists in 'hsr' [ 1753.428870][T25496] Cannot create hsr debugfs directory [ 1753.555192][T25554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.562686][T25554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.604767][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4989'. [ 1753.735106][T25558] overlayfs: regular lower layers cannot follow data lower layers [ 1753.868875][ T5609] Bluetooth: hci9: command tx timeout [ 1754.013457][T25496] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1754.029884][T25496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1754.043080][T25496] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1754.056039][T25496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1754.063912][T25496] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1754.072984][T25496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1754.081341][T25496] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1754.091298][T25496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1754.159439][T25496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.177687][T25496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.191340][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.198462][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.213047][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.220230][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.668622][T25496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.400916][T25496] veth0_vlan: entered promiscuous mode [ 1755.428335][T25496] veth1_vlan: entered promiscuous mode [ 1755.912118][T25496] veth0_macvtap: entered promiscuous mode [ 1755.935813][T25496] veth1_macvtap: entered promiscuous mode [ 1755.941750][ T5609] Bluetooth: hci9: command tx timeout [ 1755.966497][T25496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.982465][T25496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.246937][T19358] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.920304][T19358] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.980103][T19358] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.019290][ T5609] Bluetooth: hci9: command tx timeout [ 1758.082174][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5001'. [ 1758.236250][T19358] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.284484][T25624] overlayfs: regular lower layers cannot follow data lower layers [ 1759.811517][T19358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.831703][T19358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.387008][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.407176][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.417020][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1760.629066][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1760.641866][ T9] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.669361][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1760.685188][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1760.718583][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.742779][ T9] usb 6-1: config 0 descriptor?? [ 1761.139231][ T31] INFO: task syz.3.4398:23437 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1761.514355][ T31] Not tainted syzkaller #0 [ 1761.517907][T25655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25655 comm=syz.9.4974 [ 1761.545823][T25656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5012'. [ 1762.108076][T25658] sctp: sctp_init_sock: sk:ffff88805730c600 [ 1762.118921][T25660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25660 comm=syz.7.5012 [ 1762.139055][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.179954][ T31] task:syz.3.4398 state:D stack:27848 pid:23437 tgid:23436 ppid:17700 task_flags:0x400140 flags:0x00080002 [ 1762.204013][ T31] Call Trace: [ 1762.207324][ T31] [ 1762.211121][T25655] sctp: sctp_setsockopt: sk:ffff88805730c600, optname:130 [ 1762.218334][ T31] __schedule+0x125c/0x6730 [ 1762.242011][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1762.336960][ T31] ? __pfx___schedule+0x10/0x10 [ 1762.387410][ T31] ? find_held_lock+0x2b/0x80 [ 1762.392890][ T31] ? schedule+0x225/0x2c0 [ 1762.398822][ T31] schedule+0xdd/0x2c0 [ 1762.404012][ T31] schedule_preempt_disabled+0x13/0x30 [ 1762.417736][ T31] __mutex_lock+0xccc/0x1bd0 [ 1762.428982][ T31] ? nfsd_nrthreads+0x63/0x1d0 [ 1762.446500][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1762.458433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1762.472672][ T31] ? net_generic+0xea/0x2a0 [ 1762.479511][ T31] ? net_generic+0xea/0x2a0 [ 1762.484009][ T31] ? nfsd_nrthreads+0x63/0x1d0 [ 1762.492841][ T31] nfsd_nrthreads+0x63/0x1d0 [ 1762.510664][ T31] write_threads+0x2e4/0x570 [ 1762.517047][ T31] ? __pfx_write_threads+0x10/0x10 [ 1762.524025][ T31] ? __might_fault+0xc5/0x140 [ 1762.538608][ T31] ? __might_fault+0xc5/0x140 [ 1762.544644][ T31] ? __pfx_write_threads+0x10/0x10 [ 1762.558687][ T31] ? __pfx_write_threads+0x10/0x10 [ 1762.563878][ T31] ? _copy_from_user+0x59/0xd0 [ 1762.569013][ T31] ? __pfx_write_threads+0x10/0x10 [ 1762.574325][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 1762.581533][ T31] ? __pfx_nfsctl_transaction_read+0x10/0x10 [ 1762.588958][ T31] nfsctl_transaction_read+0x82/0xa0 [ 1762.594996][ T31] ? __pfx_nfsctl_transaction_read+0x10/0x10 [ 1762.602214][ T31] vfs_read+0x1e4/0xb40 [ 1762.607367][ T31] ? __pfx_vfs_read+0x10/0x10 [ 1762.613941][ T31] ? __fget_files+0x215/0x3d0 [ 1762.618926][ T31] ? __fget_files+0x21f/0x3d0 [ 1762.624430][ T31] ksys_read+0x12a/0x250 [ 1762.632516][ T31] ? __pfx_ksys_read+0x10/0x10 [ 1762.637377][ T31] do_syscall_64+0x115/0x870 [ 1762.642439][ T31] ? clear_bhb_loop+0x40/0x90 [ 1762.647344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.653611][ T31] RIP: 0033:0x7efdb9d9de99 [ 1762.659042][ T31] RSP: 002b:00007efdb7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1762.668533][ T31] RAX: ffffffffffffffda RBX: 00007efdba025fa0 RCX: 00007efdb9d9de99 [ 1762.678699][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1762.686790][ T31] RBP: 00007efdb9e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1762.695099][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.703329][ T31] R13: 00007efdba026038 R14: 00007efdba025fa0 R15: 00007ffeb049b118 [ 1762.718728][ T31] [ 1762.743927][ T31] INFO: task syz.4.4445:23550 blocked for more than 144 seconds. [ 1762.767491][ T31] Not tainted syzkaller #0 [ 1762.773744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1762.782748][ T31] task:syz.4.4445 state:D stack:26704 pid:23550 tgid:23549 ppid:18573 task_flags:0x400140 flags:0x00080002 [ 1762.797588][ T31] Call Trace: [ 1762.805266][ T31] [ 1762.808882][ T31] __schedule+0x125c/0x6730 [ 1762.814589][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1762.824857][ T31] ? __pfx___schedule+0x10/0x10 [ 1762.835566][ T31] ? find_held_lock+0x2b/0x80 [ 1762.841767][ T31] ? schedule+0x225/0x2c0 [ 1762.847075][ T31] schedule+0xdd/0x2c0 [ 1762.851537][ T31] schedule_preempt_disabled+0x13/0x30 [ 1762.857850][ T31] __mutex_lock+0xccc/0x1bd0 [ 1762.862875][ T31] ? write_ports+0xa5/0xcc0 [ 1762.867699][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 1762.873619][ T31] ? ksys_write+0x12a/0x250 [ 1762.878876][ T31] ? do_syscall_64+0x115/0x870 [ 1762.883713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1762.889064][ T31] ? write_ports+0xa5/0xcc0 [ 1762.899226][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1762.905480][ T31] write_ports+0xa5/0xcc0 [ 1762.910537][ T31] ? __pfx_write_ports+0x10/0x10 [ 1762.918889][ T31] ? find_held_lock+0x2b/0x80 [ 1762.923951][ T31] ? __might_fault+0xc5/0x140 [ 1762.928986][ T31] ? __might_fault+0xc5/0x140 [ 1762.936272][ T31] ? __pfx_write_ports+0x10/0x10 [ 1762.947497][ T31] ? _copy_from_user+0x59/0xd0 [ 1762.954179][ T31] ? __pfx_write_ports+0x10/0x10 [ 1762.959257][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 1762.965982][ T31] vfs_write+0x2aa/0x1050 [ 1762.979338][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1762.985502][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1762.992413][ T31] ? __fget_files+0x215/0x3d0 [ 1762.997592][ T31] ? __fget_files+0x21f/0x3d0 [ 1763.008408][ T31] ksys_write+0x12a/0x250 [ 1763.018751][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1763.025195][ T31] do_syscall_64+0x115/0x870 [ 1763.034873][ T31] ? clear_bhb_loop+0x40/0x90 [ 1763.044883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.053233][ T31] RIP: 0033:0x7fb49eb9de99 [ 1763.062444][ T31] RSP: 002b:00007fb49f9fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1763.085720][ T31] RAX: ffffffffffffffda RBX: 00007fb49ee25fa0 RCX: 00007fb49eb9de99 [ 1763.093958][ T31] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1763.108146][ T31] RBP: 00007fb49ec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1763.117782][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.131395][ T31] R13: 00007fb49ee26038 R14: 00007fb49ee25fa0 R15: 00007ffe01203ce8 [ 1763.143163][ T31] [ 1763.279366][ T31] [ 1763.279366][ T31] Showing all locks held in the system: [ 1763.302327][ T31] 1 lock held by pool_workqueue_/3: [ 1763.308386][ T31] #0: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1763.321595][ T31] 5 locks held by kworker/0:0/9: [ 1763.326618][ T31] #0: ffff888022e9dd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1763.337545][ T31] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1763.348919][ T31] #2: ffff88802a6401d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 1763.363534][ T31] #3: ffff88802965b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1763.373135][ T31] #4: ffff88808bbe31a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1763.386960][ T31] 3 locks held by kworker/1:0/24: [ 1763.395538][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1763.407295][ T31] #1: ffffc900001e7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1763.425569][ T31] #2: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1763.435728][ T31] 1 lock held by khungtaskd/31: [ 1763.441723][ T31] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1763.457326][ T31] 3 locks held by kworker/u8:7/1103: [ 1763.480095][ T31] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1763.508752][ T31] #1: ffffc900053c7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1763.519463][ T31] #2: ffffffff90a9f740 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1763.528767][ T31] 2 locks held by getty/5366: [ 1763.533451][ T31] #0: ffff888035e010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1763.543498][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1763.553673][ T31] 2 locks held by syz-executor/17973: [ 1763.559048][ T31] #0: ffff88807909e0d8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1763.569567][ T31] #1: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1763.579183][ T31] 2 locks held by syz.1.3721/21036: [ 1763.584364][ T31] #0: ffff88805bbde0d8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1763.594713][ T31] #1: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1763.604325][ T31] 3 locks held by syz.0.4353/23300: [ 1763.609570][ T31] #0: ffff888073301eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1763.618640][ T31] #1: ffff88808049c450 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1763.629399][ T31] #2: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1763.638205][ T31] 2 locks held by syz.3.4398/23437: [ 1763.643398][ T31] #0: ffff88807e104ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1763.652724][ T31] #1: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x63/0x1d0 [ 1763.661816][ T31] 3 locks held by syz.4.4445/23550: [ 1763.667146][ T31] #0: ffff88802b32f270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1763.676259][ T31] #1: ffff8880573ac450 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1763.685345][ T31] #2: ffffffff8f0727a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1763.694150][ T31] 1 lock held by syz-executor/23878: [ 1763.699572][ T31] #0: ffff88803f44cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1763.709349][ T31] 1 lock held by syz.5.5009/25659: [ 1763.714469][ T31] #0: ffff88801ff90ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1763.724052][ T31] 1 lock held by syz.8.5010/25645: [ 1763.729168][ T31] #0: ffffffff90a9f740 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1763.738156][ T31] [ 1763.740511][ T31] ============================================= [ 1763.740511][ T31] [ 1763.748969][ T31] NMI backtrace for cpu 1 [ 1763.748982][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1763.749001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1763.749011][ T31] Call Trace: [ 1763.749017][ T31] [ 1763.749023][ T31] dump_stack_lvl+0x100/0x190 [ 1763.749045][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1763.749067][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1763.749091][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1763.749118][ T31] sys_info+0x141/0x190 [ 1763.749139][ T31] watchdog+0xcb1/0x1030 [ 1763.749161][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1763.749178][ T31] ? __pfx_watchdog+0x10/0x10 [ 1763.749209][ T31] ? __kthread_parkme+0x18c/0x230 [ 1763.749235][ T31] ? kthread+0x13a/0x450 [ 1763.749250][ T31] ? __pfx_watchdog+0x10/0x10 [ 1763.749267][ T31] kthread+0x370/0x450 [ 1763.749282][ T31] ? __pfx_kthread+0x10/0x10 [ 1763.749300][ T31] ret_from_fork+0x72b/0xd50 [ 1763.749324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1763.749349][ T31] ? __switch_to+0x800/0x10f0 [ 1763.749366][ T31] ? __pfx_kthread+0x10/0x10 [ 1763.749384][ T31] ret_from_fork_asm+0x1a/0x30 [ 1763.749418][ T31] [ 1763.749424][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1763.876738][ C0] NMI backtrace for cpu 0 [ 1763.876751][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1763.876766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1763.876774][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1763.876791][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1763.876804][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1763.876815][ C0] RAX: 000000000932c101 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1763.876825][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1763.876834][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1763.876843][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1763.876851][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1763.876861][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1763.876875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1763.876884][ C0] CR2: 00007f01067eb580 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1763.876892][ C0] Call Trace: [ 1763.876897][ C0] [ 1763.876902][ C0] default_idle+0x9/0x10 [ 1763.876917][ C0] default_idle_call+0x6c/0xb0 [ 1763.876932][ C0] do_idle+0x3a7/0x5b0 [ 1763.876955][ C0] ? __pfx_do_idle+0x10/0x10 [ 1763.876976][ C0] cpu_startup_entry+0x4f/0x60 [ 1763.876994][ C0] rest_init+0x251/0x260 [ 1763.877010][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1763.877029][ C0] start_kernel+0x48e/0x490 [ 1763.877045][ C0] x86_64_start_reservations+0x24/0x30 [ 1763.877062][ C0] x86_64_start_kernel+0x12b/0x130 [ 1763.877079][ C0] common_startup_64+0x13e/0x158 [ 1763.877103][ C0] [ 1764.409149][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1764.416013][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1764.425109][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1764.435150][ T31] Call Trace: [ 1764.438402][ T31] [ 1764.441309][ T31] dump_stack_lvl+0x100/0x190 [ 1764.445977][ T31] vpanic+0x552/0x970 [ 1764.449939][ T31] ? __pfx_vpanic+0x10/0x10 [ 1764.454429][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1764.460575][ T31] panic+0xd1/0xe0 [ 1764.464274][ T31] ? __pfx_panic+0x10/0x10 [ 1764.468676][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1764.474823][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1764.480963][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1764.487107][ T31] ? watchdog.cold+0x1ec/0x234 [ 1764.491853][ T31] ? watchdog+0xcc1/0x1030 [ 1764.496256][ T31] watchdog.cold+0x1fd/0x234 [ 1764.500830][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1764.506614][ T31] ? __pfx_watchdog+0x10/0x10 [ 1764.511275][ T31] ? __kthread_parkme+0x18c/0x230 [ 1764.516286][ T31] ? kthread+0x13a/0x450 [ 1764.520506][ T31] ? __pfx_watchdog+0x10/0x10 [ 1764.525164][ T31] kthread+0x370/0x450 [ 1764.529213][ T31] ? __pfx_kthread+0x10/0x10 [ 1764.533786][ T31] ret_from_fork+0x72b/0xd50 [ 1764.538363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.543461][ T31] ? __switch_to+0x800/0x10f0 [ 1764.548120][ T31] ? __pfx_kthread+0x10/0x10 [ 1764.552688][ T31] ret_from_fork_asm+0x1a/0x30 [ 1764.557451][ T31] [ 1764.560699][ T31] Kernel Offset: disabled [ 1764.565012][ T31] Rebooting in 86400 seconds..