last executing test programs: 10m24.370751162s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000b00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "d2a2b5786aa92f521fe4dd755be92090168195b19f624519cce41f13835f66a170e56b963bdb7b135ae42fc1d23c4f6cc8acfe2f91654eaf5fdd13463db9e9b006d02c44ef1df782e0a457dad59e3721395cd5d1000000000000000000000000000000009bb4b85673b7e17096806c6421d00016d2e13e9994c17fe02b0a2e51a8bea72e706b0a639beae632147b34c35fcec35079371bc955bc876a621103cb1e8a0ea0846f9bd4"}, 0x1a8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@empty, @loopback, 0x0}, &(0x7f0000000100)=0xc) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(r3, 0x1, 0x4) (rerun: 64) fchdir(r4) (async) mkdirat(r4, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) (async) move_mount(0xffffffffffffffff, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x82, 0x1c9a00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000180)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x0, 0x800000000000007b]}}) (async) r7 = syz_genetlink_get_family_id$tipc2(0x0, r6) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2020002}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000129bd7000fbdbdf2518000000040004800c40098008000100030019bc5c85c3039edf85d342c1979d00d5effbe77a0fafec4ab0de726cf7c1df640be50bb1dbe06cd07768ed58e42920ca07481f314df3a468d33f59a47106ed5503d1903519a0ba25aa420dfbe23be3960a4e6df1af1fdd9dd6308495575ccaa95343844a73824ef0236186cdc6ed6f0a7ff05a3c4084"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0xf}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$inet6(r4, &(0x7f00000004c0), &(0x7f0000000500)=0x1c, 0x800) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000300)='xfrm0\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0xfffe, @local}, 0x10) (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x300) 10m24.370139884s ago: executing program 0 (id=73): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_clone3(&(0x7f0000000280)={0x300040000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3d}, &(0x7f0000000100)=""/250, 0xfa, &(0x7f0000000200)=""/18, &(0x7f0000000240)=[0x0], 0x1}, 0x58) migrate_pages(r1, 0x0, &(0x7f0000000300)=0x57, &(0x7f0000000340)=0x4) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket(0x23, 0x80805, 0x0) listen(r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x40000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f00001a7000/0x4000)=nil, 0x4000, 0x9) 10m24.101321799s ago: executing program 0 (id=74): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x72}}, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x2d, 0x301, 0x270bd26, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) 10m24.100543865s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, 0x10) r6 = eventfd(0x7) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r6, 0xc8, 0x1}) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0x8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 10m23.971530646s ago: executing program 0 (id=76): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000180)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x2, 0x9, 0x4}) clock_gettime(0x6, &(0x7f0000000140)) syz_emit_ethernet(0x8a, &(0x7f0000001500)={@local, @random="b9890c6f9ebb", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x40, 0x2, 0x0, 0x932, {[@generic={0x1, 0xf, "daafc5934857873e565d67f741"}, @timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x2, 0x1, 0x0]}, @generic={0x22, 0xe, "790348ff5395e18ef0931438"}, @sack={0x5, 0x12, [0x5, 0x9, 0x7f, 0x790]}]}}}}}}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r3, 0x7, 0x0, @void}, 0x10) 10m23.161084143s ago: executing program 0 (id=79): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000080)=0x4) 10m23.101013138s ago: executing program 32 (id=79): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000080)=0x4) 9m31.438456018s ago: executing program 3 (id=802): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) r2 = syz_usb_connect$uac1(0x6, 0xf6, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x2f, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xcf}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x1, 0x3, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0xaf, "cf", 'n'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x1, 0x7, 0xa, "e2ef"}, @as_header={0x7, 0x24, 0x1, 0x90, 0x6, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0xb7, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0xfff, 0x56, "241a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0xd, "1a3f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x48, 0x6, 0xc, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x2, 0x2, 0x6, "941f5d", 'S'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x44, 0x1, 0x9, 0x6}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x10, 0x23, "2ae8", "07930f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x3, 0xb6, "e29c80b4e13834b906"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x4c}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0xe, {0x7, 0x25, 0x1, 0x83, 0xbd, 0x8}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0x3, 0x3, 0x5, 0x40, 0x1}, 0x8e, &(0x7f0000000840)={0x5, 0xf, 0x8e, 0x1, [@generic={0x89, 0x10, 0x2, "85ca7668adb254511db7a093d3a3a9b3cacfc419b12b566ad8f6da8180c6fe713dd5f586c305cd01c0a731246b578c2760f30e09f7fad1c5ebe9a082fc84d41301a4ea6813ae7b0ce91b63e746fe3badc0f724088bf2272b84b8748c16ab37c8c9395ef41aa6fdcc2ef0135b56430529d9ded0494777e5d23653598dc7615537f72294ad0cde"}]}, 0x3, [{0x8e, &(0x7f0000000980)=@string={0x8e, 0x3, "23fef76f14a5bae26519caf300afa773864c7620a1b59d9e4232f1456d573b29e4bb411356dc6a621b39376f1407e7ac5bba55a48a1bc951d62a3133d3074a847b81bf0f2c0c3613ecb0f4c35a85e70ef5b292a182dd0b5d48e67b09ca04099e2677b45eb223095ce9d1aff38ec1c62ede922f5c4b07f6a1034abc5dfdf5677e568e5cc9981d4ad7698411e9"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x449}}, {0xf9, &(0x7f0000000a40)=@string={0xf9, 0x3, "f9cb5de2fb44bfce3d11c2f10f82b20477c32b9bb7a38996415b83ddd7d555a158e5675e4071eaf7080cb81a0cea7c01881004ae2d3678062556ffec58079f1014009ff9518c2bdfe36dff84213508a4adba8c9c12f5e52a24b6d09c8b4f83e98c28174e2da2df960bef8fd49899d43ab38034d2eb13e59834d1341ecebcd5d6b8a91fa145493de674238945b035249544bc30ae0e06cac3bca1f50442b6a24c512dbf6b17f99d52b0889c8d94ee0eaa242edf5a844d90999e727d12fe94067f3e297bdbc28c43509b12a71f7d3b5710514a32611f0d3bf3fd667278ee14c3f50dc549f035472eaecd3a04e6e0d02dd0c06236f0470c9c"}}]}) syz_usb_connect(0x3, 0x6c5, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x45, 0x80, 0x5e, 0x10, 0x1b3d, 0x18a, 0xf02d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b3, 0x3, 0x52, 0xf9, 0xe0, 0xb0, [{{0x9, 0x4, 0x4, 0x5, 0x4, 0x95, 0xa2, 0x2b, 0x5, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xaf, 0x1, 0x9, 0x8, "1fa7467aa34150a2"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x3, 0x7, "ca7fab728c59"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0xff, 0x6, [@generic={0x38, 0x24, "b14b540bd3f8b3cffc4c4848e07b2a217607e2fcccd4a50a1663efe92606cdb8dbec39a4ab8397e9967c0a6ea8ab39218e94a5b58cf2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2c, 0x7, 0x80, [@generic={0xcf, 0x6, "5a499a113961217adfa30fce30075690987b3169e9d48d96183d4c47dd9d07cd03913c8b0f18f380e11f6aa43273c9c2ee2f464be6dcc5d3244f3263f6df8a061d5f1ec961d6649423088c92bbc34a09e1c44ca368fdc34af252ccf58c8bc071f3b3363cba1596e476341598afff02fc241f09a53ef8f32b7637025533b31148b9cfca43f9728033f671d638c67e77d66d35e7e34c167ef96d4525b3841082bd197e966dd70337c04c582f9e6dd1d5f98caba85b3fc4413a36f7af836c889ccb316ca44270a4aac293d8c335df"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0xc, 0x3, [@generic={0x4d, 0x8, "c9de9e9b6b1c283734242b8ee45c4ebbcd1fdbf87dc5f70dbf32072aad4b2f7e777a6cbdaeb2137e168ce12e9c5c10d6a4ac45ab60d0e7b34ff3675ad95fde55db6eec2f262e74df86dd1d"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x9, 0x9, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7f}]}}]}}, {{0x9, 0x4, 0xd0, 0x3, 0x6, 0x50, 0x8d, 0x35, 0xc, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x6, "309994"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x5}]}, @hid_hid={0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x34d}}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x5, 0x0, 0xdb, [@generic={0xd2, 0x7, "35c1381baa9a037870490c2e1feef1780c47266ea274123f0703574253a53beac621443126a702c47b29f3a73f15db07307173d6c5d879dd4426bef4499a9c18d596f613d351fc375366a6625a35ab68ad09eb9c450849f73240ea61edc3dec1e7e8fdf9b56c8c4568d33f94a1c2a205d10bd624f22d176bd51363c0802a176a1ff5865c0a0171effbb6da23c3a4683bed1a7ecdc83435a1aa45cad2d2b8fb72185672860e05deac8a80a8b20fcfb120748476d4293d805f03f280f2b2d0c90d472d3be4a2ca8eaa902d4fc4bd9ce49c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0x80, 0x8, [@generic={0x2b, 0x10, "169c48ac8de19f0d1a6fe35d803ed2a75ae37b510048d1ec9a84644b4ab3380e88e081e7c586c7069b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xf, 0x1, 0x2, [@generic={0x8c, 0x2, "7cbb4de9d08087225dd1f78493ba38add8fec21a66c59f3a8977701242cae1a75da2ba071ecefdefda5f153111b72cd7366ae4033f5bbdd9f6c7315ff03372adfb3647ce9029b88ee94a7149a2d18b8878ec5cb9658c3741baf51c1cb6dbdd9ed9e2e655a69bb98507efd9732fd16564e14d99b9a6d726ee558e3d950c048c2432119b1f167374a35a00"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x7, 0x37, 0x0, [@generic={0x75, 0x10, "c6eb43f306279ca3ea68d7592fee2ab95e67ac6f20a5c4c0310e5ec33c173b11d23d31e16644a45a7072517a56e6c114e27d7220cd95c670222a112f080b8177bb3f13b569dbb1c1f4f8108a747dc421390ae5e4a20fe5844f1fd35a20ef1639520c068ce30e9aa69392309f3e543c264848ce"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x2, 0x1, 0x1, [@generic={0xe0, 0xa, "b60beb8b405d06c2dac454a6bfe0675d762288c0cb53021bbfc1e2a968fe07b9fce326960c22d1b7945f9747efd7d66ce43df1a94921d84e4799c9f4279a14baff32a3900824ffe0979d8c0e79f5de7be7f32d6f88993e5dd3f485654812449ac85f4a814edbe2aaeb8ca228ab6afdd7b4c107d2f64694f503d5d8bd176fdfac826d6f8abc50e79e21f16ed2075f49426606a6e6a2ff8df69e022940eb40e46123390a9db140d66aab26f1e708bc719635f969b7888194f4d6cbb56d871319c5a011c671af1ba9f3fe12f343058ef27ab4046b683a9adef2266772e5f047"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x9, 0xd3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x8}]}}]}}, {{0x9, 0x4, 0x2c, 0x1, 0x2, 0xef, 0x50, 0xa2, 0x9, [@hid_hid={0x9, 0x21, 0x0, 0xf8, 0x1, {0x22, 0x6f4}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'A'}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xa, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0x401, 0x11}, [@obex={0x5, 0x24, 0x15, 0x31e8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x9, 0x3, 0x1, [@generic={0xe2, 0x30, "b9410f7603dc9fb68959ab1161b9057359622dbf5b662fa2cb759a1b726fa0d65e6d49b3cbca24d85b8aca98c3d2245163512e92f0163da66c7c4437cbc1e35842c22125ea33b9a15defde6aab5ceb5fc1e391858a7d05b30f254a058ade3e0a41c4ec16e42ce79885d6a2166e398518283a67d45522dab4dfb61195e4a2b5b9cde2b276d24a44cf512f407d4bade118b1fb26118e89a76f635cb314ed5ddb77b78221edc85726f167f8dea5a402b7cacabe415318386e37de998fededcb46b6e7200fd28f30386ccf5cbe8d76be16798a1ec5039efd45503a5b16ddfbb98369"}, @generic={0x8e, 0x30, "45fe3505e5e653020f677b16dc38a8a525bcfef99ed3c66408a223302b561b238939e3d1992ea5334b53096fc1852b7b99344537b3896570703116efc62e5d7636c07970f430860fb50bf0b723558775c0f9acbc0796da839aa5b83538d6b83c33621a47610cad243ca4e55a3088e4f978c89b045b9265a8d158188bef4105874704fb16baf76552240665fd"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x2, 0x0, [@generic={0x3, 0x10, "14"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x0, 0x2, 0x1, 0x5, 0xff, 0xff}, 0x127, &(0x7f00000012c0)={0x5, 0xf, 0x127, 0x3, [@generic={0x103, 0x10, 0x2, "17b9d9d0d991bb5db96845674f5891da109a17f216a45266243a808b5039d6790a5695760cda8d56942843b6107f5a4e542381745389fdb8a9939c45225c2255cdf87f14b10afc6bcb70a8eeedcffd1797b7cb458a840a3f6e2e911b9a0d64a2dc6b9c5b2b348c99449857a47b63db1c0b710876c001bfd6a49ec8c221944c1075e3a5821266654c1be837d03e6e5323d9fcbe6105bf0afe1773f21ee3d1fde21f6e855acdc4bf6dba30c8012e368d0c1197882e03a1663935df817c64c9f2d709a93aeb23d6bea632f40406979304bd91bf8830e01f7834b18faa61b6963c9a92bfaf9c0ad1d9db67875884ee7bee9485efcc61b57fd27782524cb774f04e76"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xc5, 0x5, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "54ec92a67cb731b51fae584c40d698cf"}]}, 0x2, [{0xc7, &(0x7f0000001400)=ANY=[@ANYBLOB="c703ef18ea3c42efc72b3baa0c8a39c4d5b2f1b9e1e244b6968e3c29c16e6a6eed3f282b13f593704fae620f884c9df17e91df0c99a7c251ef5d3a9c07af20d0ff49a01fd916aa45cedbc9a3e306d0f5e3e5abce2fe10f124ab55dba6ebbdc6d634bd8a2995b8d8523d176f021eddea24f951a927653139e0b6a83d0b024de855076ef2f3ac8192d62b29d471e6e6eb63ab9972b0c1f6ab5e80f5f7aa401637ce900105c9fc2ec52edd8b17891bfa0d0b0e8fd9a38b04db615ee2fd83ed943d5338730f4c3498f"]}, {0xf3, &(0x7f0000001500)=@string={0xf3, 0x3, "22c1e3c210a92c06c32cef0392c2c1534376aece7eb426c62a63935ae4c5508bb6910fca4b78042740ea164cfd8707591fcaa0f14388bf6e26b248fb4ab0e4518595f9866d724a5355fb774b56585155456040575076f4d989d09abc158f284a99e229b4d2bd46d0023bae0c8587f300c933c3cd2841b7685916f03d395dc9ea913030f3d7e17ea4ef74fd971f9858d9814c77a315184007009b276124c455b1c886df63cb5b3348ef3a5027d210a8dbb65f4f7ff93c5df9bc6fe1ef6eca40f71c14487b8201b3520c3bacd190ee637174ebbd3730d8ce05a7a1f0c4ecc84f75ac958c3933bb585434359c804d58ace3b0"}}]}) syz_usb_disconnect(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "537fd55a7a82e30fb5c0aa0f85668b1f1cb5c75d4d512517a06e855b31386962a96b5021c7f123addab73ce2762751915c573727c60a5c7da86aad758b5df406"}) write$hidraw(r1, &(0x7f0000000140)="da57", 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x15, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x5b4, 0xee, &(0x7f0000000280)=""/238, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x5, 0x7ef, 0x8}, 0x10, 0x20e8e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x2b, 0x1, 0x9719, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x12a503, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback=r4, r5, 0x37, 0x3, r6, @void, @value=r8, @void, @void, r7}, 0x20) r9 = socket(0x10, 0x803, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='decodes '], 0xd) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9m29.712733845s ago: executing program 3 (id=817): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x800001, 0x4) 9m29.711890514s ago: executing program 3 (id=818): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200cc814) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000005700)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000005640)={0x1c, r4, 0xa01, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x8, 0x1, 0x41, {0x800000000006, 0xf}, {0x4000000000006, 0x7}, {0x1, 0xd}, {0x1000000000, 0xa00}, 0x80008005, 0xa, 0xffeffffe, 0xffffffe4}}}}) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xe}, 0x1) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 9m28.730589574s ago: executing program 3 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 9m28.717740493s ago: executing program 3 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0xfffffff8, 0x70000, 0xfffffffe, 0x5, 0x9, 0x1ef, 0x7f, 0x3, 0x7, 0x4, 0x9b1, 0xc3a8, 0x8, 0x1ab, 0xfffffffc], 0x0, 0x3}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x580, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4e8, 0x2a8, 0x2a8, 0x4e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x400, 0x0, 0x44, 0x81, 0x4, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5e0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0107cebd7000fedbdf2501"], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x24000814) r6 = socket(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x10000a0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x80) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000080)={r9}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x3100, 0x21}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000240)={0x1}) 9m28.621064012s ago: executing program 3 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setrlimit(0x6, &(0x7f0000000000)={0x4, 0x6}) syz_clone(0x2202080, 0x0, 0x0, 0x0, 0x0, 0x0) 9m20.889502804s ago: executing program 2 (id=924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x24040890) (async) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000280)={0x1, 0x100, 0x7e0}) 9m20.162817616s ago: executing program 2 (id=934): r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x16}, 0xfe49, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80a3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_generic(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000600)={0x14, 0x14, 0x10, 0x70bd25, 0x25dfdbfd, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) exit(0x0) sendmsg$nl_route(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) 9m19.202029407s ago: executing program 2 (id=947): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r3, 0x8, r6) 9m19.136010652s ago: executing program 2 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000780)="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", 0xff0}, {&(0x7f0000001780)="40f68b310a15dc6d31a73735425255a352", 0x11}], 0x2) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) setreuid(0x0, 0xee00) (async) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x4, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0xffff, 0x7, 0xfffffffffffffffa, 0x9, 0x3, 0xfffffffe, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000000)=0xe8) setfsuid(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setuid(0xee01) (async) pipe2(0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0xffffffffffffff31, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 9m18.995397261s ago: executing program 2 (id=954): kexec_load(0x200, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r1, 0x215, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x44) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400d5}, 0x48000) 9m18.30539207s ago: executing program 2 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x10, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x10, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c01a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0) 9m18.265364323s ago: executing program 33 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x10, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x10, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c01a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0) 9m12.473300131s ago: executing program 34 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setrlimit(0x6, &(0x7f0000000000)={0x4, 0x6}) syz_clone(0x2202080, 0x0, 0x0, 0x0, 0x0, 0x0) 22.787230432s ago: executing program 6 (id=4368): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0xb00, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 22.622375482s ago: executing program 6 (id=4370): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x48}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000040)=0x1) 22.541754661s ago: executing program 6 (id=4371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x114, &(0x7f0000000140)=0x5, 0x0, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x4, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x830200) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a56000000000000020000000000aafe8000000000000000000000000000aa4e234e2200"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22.488079173s ago: executing program 6 (id=4372): mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x2817, 0x7, 0x3, 0x101, 0x1, [0xffffffff, 0x356, 0x7, 0x5]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(r5, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) fstat(r3, &(0x7f0000000340)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.208329833s ago: executing program 6 (id=4373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x120b60, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffff5}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.568685499s ago: executing program 6 (id=4377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x18811, r8, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r2, 0x0) sendfile(r5, r9, 0x0, 0x8000002b) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.463495147s ago: executing program 35 (id=4377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x18811, r8, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r2, 0x0) sendfile(r5, r9, 0x0, 0x8000002b) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.728928318s ago: executing program 1 (id=4549): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000128021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "3891176fc9e002b0ed41d2aa5510075322d706909025af13bdea8e9fdece4dbe", "de86defa59178d3a2be3ae119d4501639bceef56008747b2171e78308a4ef4c1", "54962eb71667e8173c2d73209441827b8ea49cb3bc30eac05b355319b347ad7f", "e7d4fedb0f13428ee98c67a5fec40da36c526d3915c47ad972cf5d68ee5ba8fc", "cd82b1092d6ba878e820d18e2e6d6dc9f4e6d33e3829b115c117e4973295d8b7", "14c62e751930588db9f11f5c", 0x6, 0x1, 0x8, 0xea, 0x8000}}) (async) r1 = socket$netlink(0x10, 0x3, 0xf) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r2, r3+10000000}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) (async) r4 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x48, &(0x7f00000000c0)={0x0, 0x0}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="2716157f3354"}, 0x10) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x2, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r6, &(0x7f00000003c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x105, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x1cef, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x41, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x1000006, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x1, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) 3.643027668s ago: executing program 1 (id=4550): syz_io_uring_setup(0x778e, &(0x7f0000000140)={0x0, 0x8000, 0x8000, 0x3, 0x179}, &(0x7f0000000080), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x33]}}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.536164829s ago: executing program 1 (id=4552): bind$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f0000000a00)=""/4096, 0x1000, 0x10001, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x100003}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) 3.289812498s ago: executing program 1 (id=4556): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.086868015s ago: executing program 1 (id=4561): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x264b, &(0x7f0000000440)={0x0, 0x1, 0x2, 0x3, 0xdd}) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x714f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read$FUSE(r3, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x294842, &(0x7f00000000c0)={'trans=virtio,', {[{@access_any}]}}) 2.979524267s ago: executing program 1 (id=4562): ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb26b}) r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6a}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e24, @rand_addr=0x3}], 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4801c}, 0x0) 2.370441155s ago: executing program 5 (id=4563): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394598d171d994469948f431da6a5f90235fc60040011000a7401002a3582c137", 0x2e}], 0x1}, 0xd0) 2.370247908s ago: executing program 5 (id=4564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYRES16=r0], 0x15c}}, 0x2000c040) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="480100000dae4e6b479ecef5e619c6", @ANYBLOB="8aa4530c00acef1fadf83a836d9d93ec4637a9ab9a435af04aadc207a7650510d1b593ffb0985c509d23dffee32f97d2345c852b2c14904660d018b4a9417fad87713028de3322d86a1457ff011da9cedb200000000000000000", @ANYBLOB="00012dbd7000fcdbdf2517000000e40005802c000280080003000500000008000400000000000800030000040000080001001800000008000400070000003400028008000300ff0f000008000200090000000800040004000000080004007f000000080004008100000008000100050000000c000280080004000000000008000100756470005400028008000400ffff0000080003000300000008000300f50600000800040004000000080001000f0000000800020002000000080001001b00000008000400720b0000080001001d000000080001001f0000000800010065746800080001006574680008000100756470002c0007800c000300060000000000000008000200080000000c00030008000000000000000800010000040000240005800800010065746800080001007564700007000100696200000700010069620000"], 0x148}, 0x1, 0x0, 0x0, 0x10000000}, 0x4081) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f0000000000)) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000040)=0x3ff, 0x4) 2.306525386s ago: executing program 5 (id=4566): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.305170896s ago: executing program 5 (id=4568): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x8, 0xc9}}}, 0x6) (async) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 2.178343328s ago: executing program 5 (id=4569): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000340)="010001000000000000001000015b097ead8584780aed42abbad05dd5", 0x1c, r0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 2.177676441s ago: executing program 5 (id=4570): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x4, 0x1, 0x4, 0xc, 0x1, 0xfffffffffffffffd, 0x6, 0x8}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8480) fchdir(r1) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000240)={0x5, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x80, 0x5, &(0x7f0000000280)=0x5}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)=0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000002440)={0xa0, 0x0, r5, {{0x1, 0x0, 0x1, 0xffffffffffff0225, 0x2, 0x6, {0x6, 0x9, 0x0, 0x6000000000, 0x2, 0x0, 0x200, 0x2, 0x9, 0xc000, 0x0, r2, r6, 0x6, 0x2}}, {0x0, 0x13}}}, 0xa0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) mq_unlink(&(0x7f0000002600)='/dev/input/mice\x00') recvmmsg$unix(r1, &(0x7f0000006340)=[{{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f00000026c0)=""/177, 0xb1}, {&(0x7f0000002780)=""/97, 0x61}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/49, 0x31}, {&(0x7f0000003840)=""/164, 0xa4}], 0x5, &(0x7f0000003980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003b00)=""/228, 0xe4}, {&(0x7f0000003c00)=""/152, 0x98}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/178, 0xb2}, {&(0x7f0000004d80)=""/251, 0xfb}], 0x5, &(0x7f0000004f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004fc0), 0x6e, &(0x7f0000005280)=[{&(0x7f0000005040)=""/55, 0x37}, {&(0x7f0000005080)=""/20, 0x14}, {&(0x7f00000050c0)=""/85, 0x55}, {&(0x7f0000005140)=""/64, 0x40}, {&(0x7f0000005180)=""/230, 0xe6}], 0x5, &(0x7f0000005300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000005340)=@abs, 0x6e, &(0x7f00000054c0)=[{&(0x7f00000053c0)=""/244, 0xf4}], 0x1, &(0x7f0000005500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f00000055c0)=""/167, 0xa7}, {&(0x7f0000005680)=""/23, 0x17}, {&(0x7f00000056c0)=""/26, 0x1a}, {&(0x7f0000005700)}, {&(0x7f0000005740)=""/208, 0xd0}], 0x5, &(0x7f00000058c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000059c0)=@abs, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005a40)=""/78, 0x4e}, {&(0x7f0000005ac0)=""/51, 0x33}, {&(0x7f0000005b00)=""/229, 0xe5}, {&(0x7f0000005c00)=""/175, 0xaf}, {&(0x7f0000005cc0)=""/106, 0x6a}], 0x5, &(0x7f0000005dc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005e00), 0x6e, &(0x7f00000062c0)=[{&(0x7f0000005e80)=""/212, 0xd4}, {&(0x7f0000005f80)=""/206, 0xce}, {&(0x7f0000006080)=""/134, 0x86}, {&(0x7f0000006140)=""/12, 0xc}, {&(0x7f0000006180)=""/140, 0x8c}, {&(0x7f0000006240)=""/88, 0x58}], 0x6}}], 0x7, 0x2, &(0x7f0000006500)) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f0000006540)) syz_usb_connect(0x1, 0x2d0, &(0x7f0000006580)={{0x12, 0x1, 0x250, 0x43, 0x5, 0x68, 0x40, 0x10c4, 0x87ed, 0x14d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2be, 0x1, 0x80, 0xc, 0xf8, 0x2, [{{0x9, 0x4, 0x6c, 0x3, 0xe, 0x81, 0x70, 0xe6, 0xc, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2fc1c279ae"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xbb95, 0x1000, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x9, 0x22}, [@mbim_extended={0x8, 0x24, 0x1c, 0x95c5, 0x1, 0x82}]}, @generic={0xe3, 0x21, "ed077ee1dccdf05d1016054e35b986ce9674231595007eea8e8effac505c0b542feb9ccfeebcd1de3737cdd88bf69ca2afd497e1b0a4dd42bdd25d5fbf91eb99f86cabc55f9155777ef71aa85444f9bff04071350210c86120592bfe63996dfd1f2274efc5ed99eb3258d8df3b965c48a2db141169058bcd90f28ecd9feebea9d362cbf26330a20e9c0f18c3fa33b9397279f8fb7f26cee0f265b28b390fbb558d51ef0428c04b68bf4dd982ec8a095f6db8b397cddd5b995f00d2bc08c0b31d2fecace832b38f608678afac52055b4e8f9f152014f7f0b025b369a00027db0028"}], [{{0x9, 0x5, 0x7, 0xc, 0x20, 0xd, 0x8, 0x9e}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0xd, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xe}, @generic={0xa6, 0xf, "785a9d3a09a0ce38d6e8c743510f12d60762c1ef75b92046248cda645e31a5485e8556f13cce99cd52bebb75088c6ece3bd456fd744bd9423bf1a53900e5bbee26fdddebfeb0c0dde0c8da07814ca196b220f670b88c275395f2afa75b38cee81c0bd71ac2295d1a9bbd45e9d205852803c3338f7c987a5d8dc9e7503d8790009cd938a7461ffa986ea11eb1d86cdd2ba5881ae89f1d9eb6fdf0692ffcd0f323433c7079"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x7f, 0xc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xb}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4d, 0x1, 0x44}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xc, 0x0, 0x71}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x7e, 0x1c, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x0, 0xa, [@generic={0x17, 0x24, "76a6871e6989b15e4215555fbff5b0d5909a55a260"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x80, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x6, 0x24d0}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x0, 0x4, 0x0, [@generic={0x48, 0xf, "18c7bf1c0b9e9fa952284fbf58e783872d55eb1fa0d41c13c4c4aa51b5f2b601ce585a953a875e3c3a9b8711cee29de55b6de099ce38627c334f3915224cbfc31c430e447c3e"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xe, 0x3c, 0x7}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x8, 0x6, 0x80}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x0, 0x3, 0xa}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xc, 0xb, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc1, 0x7}]}}]}}]}}]}}, &(0x7f0000006bc0)={0xa, &(0x7f0000006880)={0xa, 0x6, 0x201, 0x7d, 0x83, 0x35, 0x40, 0x4}, 0x5, &(0x7f00000068c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000006900)=@lang_id={0x4, 0x3, 0x868}}, {0xf9, &(0x7f0000006940)=@string={0xf9, 0x3, "9d9cbffe08ed23377bf0db66dc0a942189eaef041ad257fabe2ae9b59112aed8db61ba7776866c7e761e51c0c5fcd9163c0f5a3d6b99d0084c0bdfa6c2f490a41431cb672377fda7e22dc78abc82ae9cf22b0804606674c90563938530cb5b5564417459973e2d00fcea3397cd5b5135d4fd97e1dc653274976a2a5a9afda5be332eef96a50e02f3aa4a91b32d414cc160b683398431aed2bad2f17bd18053bbb5110c99f76fdc8f2577c20813b1bef418c32d753bfb2790ab213e6f26c60438e89cf6d9a0d2c8684461ce751d52581276b376e4397cfe659c242e37097d4ab6686590aec97fc40180aa12caac49acd14ef1760f16fe03"}}, {0x81, &(0x7f0000006a40)=@string={0x81, 0x3, "eb29fa51046d7e390a7a305d3a8d33281657739a7e9f9836b720b4e354878f7b0f2e32e4e1e2d2738b482742195efe05c955d6592a9153707844dfc614b1a5b0fcff9860270af2f822c606b0a11b444223f544c9ba377d8a2b3fbb0cec5f6cc6ff0b609a3a23a7e5f6b43477e9ac8b2f185708eb6dd1d9549033e465f4a751"}}, {0x4, &(0x7f0000006b00)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000006b40)=@lang_id={0x4}}, {0x4, &(0x7f0000006b80)=@lang_id={0x4, 0x3, 0x21f}}]}) syz_open_dev$evdev(&(0x7f0000006c40), 0x7, 0x313000) getresuid(&(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000006d00)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r10, 0x50009417, &(0x7f0000006dc0)={{r13}, 0x0, 0x18, @inherit={0x80, &(0x7f0000006d40)={0x0, 0x7, 0x7, 0x6, {0x3, 0xab1, 0x2, 0x2, 0x100000000}, [0x9, 0x0, 0x6, 0x7, 0x0, 0xd, 0x1]}}, @subvolid=0x8}) r16 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000007dc0), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r16, 0x40445637, &(0x7f0000007e00)={0x5, "1b63e4dd7603a050a7bc1f317c75a460b816fb2b646a17f90cc8877c78f2e166", 0x10, 0x1, 0xc5b, 0xe384f2c12a483517, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f40)={&(0x7f0000007e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0xd}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x51, 0x5f, 0x30, 0x61]}}, &(0x7f0000007ec0)=""/89, 0x3a, 0x59, 0x1, 0x81, 0x10000, @value=r8}, 0x28) ioctl$IMCLEAR_L2(r14, 0x80044946, &(0x7f0000007f80)=0xf) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000008000)=@attr_other={0x0, 0x8, 0x9, &(0x7f0000007fc0)=0x9}) tee(r7, r12, 0x7f, 0x8) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x19) syz_emit_vhci(&(0x7f0000008040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x13d}, @l2cap_cid_signaling={{0x139}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0xfe00}}, @l2cap_conf_req={{0x4, 0x6, 0xb}, {0xf, 0xff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xb5a}]}}, @l2cap_disconn_rsp={{0x7, 0x3e, 0x4}, {0xff, 0x40}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x1, 0x3468, 0x3, 0x6}}, @l2cap_info_rsp={{0xb, 0x8, 0xdd}, {0x50, 0x3, "6fe66c3e51fb46f2b342ba26ea3f1772b9dc50aebf66807bcde73748866089152f43110bd076a81fa96d21c90abb42385c6fed88c87a07b27cf6c9f4622b60984eaaae202c871f9ecd5da0b34fb751e1376a20ff874c31d8d66f86ffd820f7062ae9c9053a1e661457ca1e199a974a731b1017fa02adf936e3ae6b4029e9dbb065578f2d750ccf0838edc51fcf2548b4d045630ece83efbc0dbbeba8902579d84a5f2bd39854f4290c2d35207b6fdabd5126ae15cc0b76d9847537965a136dc94827e18acead2f222cf4818661b3e418a920f462b4f47e386a"}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x7f, 0x6}}, @l2cap_conf_rsp={{0x5, 0x4, 0x23}, {0x2, 0xb, 0x3, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0xf5, 0xfd, 0x2, 0xffff, 0x3929}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x100, 0x7, 0x783b, 0x1}}]}}]}}, 0x142) 1.340299186s ago: executing program 4 (id=4571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003500010000000000000000000101"], 0x114}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000050003"], 0x7c}}, 0x0) unshare(0x20000400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1d, 0x100, &(0x7f00000000c0)="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"}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) statx(r5, &(0x7f0000000dc0)='./file1\x00', 0x100, 0x400, &(0x7f0000000e00)) 400.211675ms ago: executing program 7 (id=4574): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x964, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x8}, 0x13, 0x1, 0x100, 0xff7f, 0x14, 'syz1\x00', "bfcef41de8705cd31d24edf220161f1487447fb7b95b4a49e5c65a6fd6dae00c", "2cf3887b3a7b2a649bf52b75a848fe8f8330650c318a10cf9cb50aed6cdfbcf0", [{0x7f, 0xb, {0x2, 0x8}}, {0x1, 0x8, {0x0, 0x6}}, {0x9, 0x4, {0x2, 0xff}}, {0x8, 0x4, {0x1, 0x8}}, {0x0, 0x7ff, {0xf3a012af99db2aac, 0x5}}, {0xf, 0x6, {0x1}}, {0x6, 0x0, {0x1, 0xd0000000}}, {0x6, 0x5, {0x2, 0x7fffffff}}, {0x2, 0x2, {0x3}}, {0x8001, 0xfc00, {0x2, 0x34}}, {0x0, 0x8, {0x1, 0x6}}, {0x5589, 0x9, {0x1, 0x2}}, {0x6, 0x9, {0x3, 0x3}}, {0x0, 0x7, {0x2, 0x40}}, {0x4, 0x3649, {0x0, 0x6}}, {0x9b, 0x8, {0x0, 0x7}}, {0x7, 0x165a, {0x1, 0xb16}}, {0x0, 0xa2a1, {0x2, 0xe3}}, {0x2, 0xffe, {0x3}}, {0x1, 0x8, {0x0, 0x1000}}, {0xf, 0xff, {0x2, 0x2}}, {0xc, 0xbfa, {0x3, 0x10000}}, {0x401, 0x4, {0x1, 0x7}}, {0x9, 0xf, {0x3, 0xe6}}, {0x0, 0xd039, {0x2, 0x1}}, {0x4, 0x4, {0x2, 0x9}}, {0xa, 0x81, {0x1, 0x7ff}}, {0x4, 0xa2, {0x1, 0x80000001}}, {0x60a, 0x3, {0x3, 0x4}}, {0x200, 0x1, {0x2, 0x3}}, {0x6, 0xd186, {0x2, 0x3}}, {0x0, 0xfffd, {0x0, 0x8}}, {0x2f1, 0x4, {0x1, 0x10000}}, {0x0, 0x8, {0x0, 0x4}}, {0x2, 0x6, {0x1, 0x5}}, {0x9, 0x10, {0x1, 0x5}}, {0x4, 0x100, {0x2, 0x5}}, {0x8, 0x8000, {0x0, 0x3}}, {0x1000, 0x3ff}, {0x9, 0xf801, {0x3, 0x8000}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x7, 0x8, 0xfff7, 0x8, 0x23, 'syz0\x00', "310cd4fb5349583e3c72211e0e5439aa60ab6eae33fd4a03b1c1eb25ea6a4343", "6a7b3da6d4d75701081e8065902a1f90a07291894f46793d55f0b526c782c0e4", [{0x1, 0x2, {0x1, 0x8}}, {0x7f, 0x101, {0x1}}, {0x6, 0x8, {0x1, 0x1b}}, {0x3, 0x0, {0x1, 0x52a}}, {0x0, 0x1, {0x0, 0x721}}, {0xc, 0x1, {0x3, 0x7b6}}, {0x5, 0x8000, {0x1, 0x35a}}, {0x2, 0x8, {0x1, 0x7f}}, {0x4, 0xf54, {0x0, 0x6}}, {0x3, 0x7f, {0x2, 0x1}}, {0x7ff, 0x2, {0x2, 0x8000}}, {0x1ff, 0x7, {0x0, 0x10}}, {0x3, 0x8}, {0x400, 0x1000, {0x3, 0x9}}, {0x9, 0x0, {0x1, 0x6}}, {0x2, 0x1, {0x3, 0x5}}, {0xff, 0x1, {0x2, 0x5}}, {0x7fff, 0x7}, {0x4, 0x3, {0x3, 0x4}}, {0x1, 0x101, {0x2, 0x2}}, {0xeb, 0x988, {0x0, 0x8}}, {0x1, 0xd5, {0x0, 0x9}}, {0x1, 0x4, {0x3, 0x3}}, {0x4, 0x3, {0x3, 0xffffffff}}, {0x4, 0x60, {0x1, 0x2}}, {0x6, 0xfe01, {0x2, 0x1}}, {0x6, 0xfff7, {0x3, 0x9}}, {0x2, 0x200, {0x1, 0x2}}, {0x3, 0xfff5, {0x1, 0xfffffffc}}, {0xff27, 0x81}, {0x8, 0x7, {0x1}}, {0x756, 0x6, {0x2, 0xfffffffa}}, {0x3ff, 0xc, {0x0, 0x9}}, {0x0, 0x4, {0x1, 0x6a14926e}}, {0x3273, 0x4, {0x1, 0x141}}, {0x3, 0x2, {0x0, 0x2}}, {0xe22, 0xf, {0x0, 0x1}}, {0x8001, 0x40, {0x1, 0x97d}}, {0xfff, 0x7f, {0x1, 0x8}}, {0x800, 0xa6, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x10}, 0x5, 0x5, 0x2, 0x7f, 0x26, 'syz1\x00', "0456fd8536c161094c235f404ae7570e55e0e88b998de1d36abd6b373e104c97", "b771331256d30a90e86622648614ca5c9160fca53387d5d3ce17c975f5576d44", [{0x9, 0xe, {0x3, 0x5}}, {0x100, 0x5b1b, {0x1, 0x6}}, {0x7, 0xd, {0x0, 0x2}}, {0x1000, 0x9, {0x3, 0x45}}, {0x4, 0x5, {0x0, 0x401}}, {0x0, 0x1, {0x3, 0x8}}, {0x9, 0x9, {0x0, 0x7}}, {0x2, 0x1000, {0x2, 0x80000001}}, {0x9, 0x9, {0x0, 0x46f68c54}}, {0x80, 0x7f, {0x2, 0x5}}, {0x6, 0x7f, {0x3, 0x7}}, {0x2, 0x9, {0x2, 0x10000}}, {0xfffb, 0x6, {0x2, 0xa}}, {0xc, 0x0, {0x2, 0x6132}}, {0x6, 0x29b6, {0x3, 0x1}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x8, {0x1, 0x10}}, {0xff, 0x4, {0x3, 0x7}}, {0x1, 0x1, {0x0, 0x8001}}, {0xffc0, 0x8000, {0x2, 0x4}}, {0x5, 0x6, {0x0, 0xfffffffb}}, {0x4, 0x3, {0x1, 0xfffffff8}}, {0x3, 0xfffc, {0x0, 0x9}}, {0x4, 0x4, {0x1, 0x800}}, {0x220, 0x2, {0x1, 0x2}}, {0x2, 0x2aef, {0x2, 0x80000000}}, {0x7, 0x9, {0x2, 0x5}}, {0x7, 0x3, {0x0, 0x8000}}, {0x6, 0x8, {0xaff83bc7569d79cd, 0x8}}, {0xfff9, 0xaed0, {0x2, 0x4}}, {0x0, 0x7, {0x1, 0xb}}, {0x101, 0x101, {0x0, 0x5}}, {0x401, 0x5, {0x3, 0x7}}, {0x7, 0xaa08, {0x0, 0x3}}, {0xff, 0x4a1, {0x2, 0x96}}, {0xfff8, 0x6, {0x1, 0x200}}, {0x1000, 0x9d, {0x1, 0x7}}, {0x3, 0x7ff, {0x3, 0x7}}, {0x8, 0x0, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x6, 0xd5, 0x1, 0x29, 0x24, 'syz1\x00', "ddd26b0a975647ca070798d67d2fc20c56e444034db178e40f3b7d47842d8219", "8fb0f70df694464c9a4e4f9d4a3fa2f0d13c17b58f9448843d6c25af3c19f115", [{0x1, 0x1, {0x3, 0x7}}, {0x709, 0x7, {0x3, 0x95a8}}, {0x3, 0xfc01, {0x2, 0x2}}, {0x2, 0xbd, {0x1, 0x7fffffff}}, {0xa0, 0x6, {0x2, 0x200000}}, {0x2, 0x7, {0x1, 0xfffffffe}}, {0x4, 0x97, {0x0, 0x6}}, {0x0, 0x3, {0x0, 0x7d7f}}, {0x2, 0x0, {0x3, 0x4}}, {0xf, 0x6, {0x2, 0x6}}, {0x4, 0x5, {0x1, 0x5f8}}, {0x7ff, 0x3, {0x0, 0x1}}, {0xffff, 0x8, {0x0, 0x9}}, {0x8705, 0x7, {0x1, 0x8}}, {0x6, 0x0, {0x3, 0x3}}, {0x5, 0x7fff, {0x1, 0x8001}}, {0x3, 0x6, {0x2}}, {0x0, 0x7, {0x3, 0x8}}, {0x4, 0x9a, {0x1, 0x2}}, {0x5, 0x2, {0x3, 0x6}}, {0xd, 0x1, {0x0, 0x7}}, {0x2, 0x1, {0x0, 0xb}}, {0x8000, 0x9, {0x1, 0xb}}, {0x8000, 0x8, {0x0, 0x5}}, {0x725a, 0xff, {0x0, 0x6}}, {0x9, 0x4, {0x2, 0x8}}, {0x5, 0x4884, {0x0, 0x7}}, {0x8000, 0x8, {0x3, 0xfffffff1}}, {0x4, 0x9f7, {0x0, 0x6}}, {0x6, 0x4, {0x2, 0x80}}, {0x2, 0x1, {0x0, 0x3}}, {0x2, 0xb043, {0x2, 0xe}}, {0x5, 0x46f, {0x0, 0x2}}, {0x7, 0xfff, {0x0, 0x4}}, {0x8, 0x80, {0x0, 0x8001}}, {0x2, 0x10, {0x0, 0x7a4b}}, {0x6, 0xfff, {0x2, 0xffff}}, {0x7f, 0xbf0, {0x3, 0x7}}, {0xb3f, 0x0, {0x3, 0x2}}, {0x7, 0xa7d, {0x1, 0x1ff}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x48, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20000845) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 399.71872ms ago: executing program 4 (id=4575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb25, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x20000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r7}, 0x40) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x20, 0x10, 0x7ff, 0x9, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x68, 0x0, 0x40, 0x2f, 0x0, @empty, @empty, {[@ssrr={0x89, 0x1f, 0x4f, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x5e, [@private=0xa010100, @loopback, @rand_addr=0x64010100, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x65, [@local, @multicast2]}]}}}}}) 304.05554ms ago: executing program 4 (id=4576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000300)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c) 303.666803ms ago: executing program 4 (id=4577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r1, &(0x7f0000005dc0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfc}]}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}}, 0x800) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r6) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040885) r10 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) readv(r10, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1) 303.394936ms ago: executing program 7 (id=4578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x58, 0x7, 0x1, 0x0, "4385242db56260bea12e712ebcdba00501be551273e59a3b418e7f54da14b736d3eee7356612dd716c8a7f0c5ed6a5ce6663d64b5be4657aeee7e667b4cb6c063c960b00f7c6b0be7940337efa23c00a38a6bc95"}]}], {0x14}}, 0xec}}, 0x40880) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x58, 0x7, 0x1, 0x0, "4385242db56260bea12e712ebcdba00501be551273e59a3b418e7f54da14b736d3eee7356612dd716c8a7f0c5ed6a5ce6663d64b5be4657aeee7e667b4cb6c063c960b00f7c6b0be7940337efa23c00a38a6bc95"}]}], {0x14}}, 0xec}}, 0x40880) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 231.813838ms ago: executing program 7 (id=4579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0xb701, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 231.472222ms ago: executing program 7 (id=4580): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0x7, 0x0, &(0x7f0000000980)) r3 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r6, 0x0, &(0x7f0000001b40)) socket$netlink(0x10, 0x3, 0xf) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x2, 0x10408}}, 0xe) fsopen(&(0x7f0000000040)='exfat\x00', 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000380)="f132d0fce8c9cd7697aeda5703f31fb8f14618ed5c6d845b210506d5be2e561da8dade6a079884cdb298573a23dd668610ff6a4ea7ef653dad822b1cee582252c871fdbb1d3864dde7a01f6de056887a4fbc1ed81ab0d1", 0x57}, {&(0x7f0000000440)="f81dbaab9fce1138ad5563ce5c6a29a1a492a26ac1", 0x15}], 0x2) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0xfffffffffffffff5, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_freezer_state(r1, &(0x7f0000000180)='FREEZING\x00', 0x9) 227.707438ms ago: executing program 4 (id=4581): unshare(0x2040400) r0 = memfd_create(&(0x7f0000000080)=']\x04\x88 \xf1\xe5\xad\xa9#\xe1>a\xa2\xa2\x17\xb8\x85\xb9J%', 0x7) fallocate(r0, 0x0, 0x0, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0xffff}, 0x6}) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) 197.67872ms ago: executing program 7 (id=4582): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="6930d8697c97a65b36159a023034632628cd4474514a1368f1e71dd9b7c48436c2ea07f3bd58a6bbc0f065ddba346122dff6ad81d21cea72e7d951c5c5b21a9f0ba768cd18ddcc7de78e2ba9ac88654a1d99806fb236617ff138f15994a6259de4f933ae62cdc98b2e33514066dd1b9ae1546df8db973d467507b2ecb6a4ece57b2ba7b9df20a0d6817b9fc2ee34e709a8bdef99624ab97472db298354edf3c072c710b9ba9d9a0ae44928172ce6a0d2695a17057255ec6e0b09c684a7f808e38302eb375390ae65d665da7f176a45ed0144a762fc666931f1a4c0ed03fb42e8f7ed4439add1a96b90904330d8e3c91527b405f36e89e44599c5ba4e742f1a281f0dab5fc2dc8855a78e1812ba99ce71fbabef429e87295d941c555c0fdacfa1f3256b70c1fc84b2d0df2c589dac34698d8d108474f84dce58efcbe580b8f348c550c6ca9abe230330d05dffea89475391015c707ddc45a3958a68ea44b5f7d81a84b9064111954da3b5c832df657efd5f0849b32834a053f4a052d7fd7d4db17be80879bf6859bc9605664557eceeb74753416e41b92fb84b572b3c78b6aab6f0bdfcfd7d3a830f12d1b3046e615889ae554db34d35775c6272243d7132426dfc9027ea50d62b91f356c58093933ad75013f9470ec90bfe1d9376002dbbcba9b7e7a1e023f878bfa4d88a9421c035951fd3169c5508ecf28c3a8691605242cc858fb56af44956bb5e677d1d90f0a3b97ad30c74adfc2f22232f7f1fa022c1f0492619cf98381039f26c784ca4d4706f67013bf457fe927aad53c1aa0da90d2730155664d84e41792f3f461840e41135c5b82c87834156b9d6403b7001e5ebb1846a6ad80723387bb92f8d991fa8db1fa65ef90a5054798635c18e7ff7649c41e867fb070bcfef61445a7d0c0c5fa02da82969db96aada4095e8cb2bf7728bf95eb020594c0d3617467701d8c4dd01c750712dae33dfba7548032b48ab93ff3c82e104b08116c1a68fb3b28a1b8ccc23c2698803828d1da099a5437b248078b502f7ccd867af9f8c79bc55643414c57466a781032bdd6dea9acd5cde821480a85c308dd03af012d03cb552b3770124ac279c9427c0e1b761c525eb251598d326bc650b5f055b610688fdaf9789e60fc234f1881536016901ddb2597b47e7bc675cac3ae8c50169230af084998dd6be35dc3609c5edbc93da3fe98ebb475a0d30437017ef640b96fd48ef52f509cf57e65c73ac09603081cd980e8b9d73ef4acf4511cfbb07d5074a6561192c2b2bce29cef8ec70ff599d4751103ffec500a8657d6ef30499b9ad0b10f3e7b6b53fc61dfbbb209e3691b1cba1af62468ebcb61c4c0a776fbfc92c5d2a10350bad29915e44cc952de4226ab646e28ab008683e470ccae3486bdb4ab4a6ffea9a671237bf0943660d929667ebe4a5f9cd1bdecbb53262a4fe3eaeed7fbb4ed1ca40da9e2efdaae4da05b14c754360f3c3e5b96f203c4f87e5feeb73abb88aa57fb850702339b5ac192810597e99fefedd52558fc6aad5d2ac0eaec00dda68467a3c7c7cdc3b724990f1b2f4f65e9181e5ebd0a343c491a1fe0e4378f241bd071fabeb1487044fe5c5eb942eb92dc80ff317cabfa10c75434441716a7339115a3071e45eb2d0800627b99a4fb59e260b26d53953ff3f255dc4bf40d3cc8797287fe3d6356d1eaaf67745ef73844b4c64e89ca0f04a87659427c26f0d6bfa2f4881ef69dc5c7b4515c7c4394f621fb98f2c6f496b7ac640d3a1fcd483ae10c4ee9710a896e67175a679f2461be09c722be20df30c9670299db21bc8aeae63e57ebeab1ca61c265f10d8def8243583e6967c5e40162110025a65f0c658db29f5eb0e50b2dd318ac55209721c8c0d51fb05c9ff3106731b058e14c8c89dd33bef6333f218c9f66e2bd9fd897b985bda3747c88fbd24d90cc8428380048330abb044f9e7107ccae059b961e0c6a53d182de21cb77e12d1ed0faeeb214c9ab6b7dd5f99d9278df393958a7a46aa734726938ca2172e4cba5f0a68cc2823bd5aa622c099fd936e303549ea4a80521b12b616526fdaf00779de369a5a83dcedbb739d426eb7f3864cbe346ff458433ca67a86ccbc703939216e4a001d9ccc84b4c438e5bb583e733973b3b0d2fa9a1bd4be4fc2b497b80e1455657a3f339f512cd38428e022d311075190c8d443cd94505dc52b0c7b6138f2279dcfd0a20a564e45b8f144a6f09e5beda5303f885a7d9fbdb4a6f3778ff9e9fc6e0dbee5bdd0330c3c956ddc36f10fb6811320ab30b4817934bd7e11bdcefb58132a17ac76fb54aaab0188a32eec2284f1a24835cc79c6909f742ab35631b919673eb84d53715dc8bdac9b6d28a24b869929d7fb7bcb34b5b5bab1ee69ee38c86541982806b84db06d0dc81e940a872ca89a5a7e1c191bec2808ac6aa0d733c1d647f88df8455ccfbd35fd5bef780bc8c4fb86efb1951b8382915939779493c20279b165c2b775b7d5b63ea0ceec09a17472bab7ec8122dbcf5ebaf4ac3db25fd0776f13cd67a36ce6cfa58acd262cbf4bdcbf2fa7239c79386dc580121e986de5b78a4351388e7fa6461a7657bdb4383c659409f16c7508d5e5618d116a659bc0462c130b088d63ac4bb69c0d756b5fa2e80004019d6ca5371ea361e8cc613954332ee959de1766f8f3689ab8daf45b69ec0810d0ab7e3b402860c8b94ffc25de57920f8da7a3bc7badc4dc9088bc7f6c71b1d4d960c258cd87abcd739bbd5115aef29f994f062318e8accab85f5c64a263ca14c1629284f7369d86436d174f6f2b1a5e014dc5cc3021efbce66bb88d7b3827be33365d8ab2daed7c6dc0651b77af1dd289684df8e21b6a81c66a27294c7cbf5cd90add094477cd6dec894b140a409add754727459c695c4e63dc73fb491af8c22edf1dbabe56a9969146056259a65f9c1c62973abba625b8065fdcccddda10cd7ff7b2144c63b754af792cfe395902608da630aeed913e9f014bdd184c9341c62fe0c7dd2660e26eab22cbd0d9e21ba0552e71f1ce17407672f01ef1012877fb7da93cdc92056ecad3ab01922b3a8e13661ef1372d84ce5167153ca2551edfed8c2c6557626f2554d67a852a8d2b566fa40c6dfeee3b63e2be83523f64365922531ac93ae196fa6a98b3b8708eb90f410f150c3e8680d9cb7265f108f2b860e7d8c7dd64405bd545eea08520cb33857b3090fe1b364e47151eb847ff444fab989dbe1e03b29409d46fff338d6ae5a4c61426ba4b170d96617774b6f3ae64beb7f791334f4d48d3fd26969d4a4342a8f1088bafdbefbcb1990e9d0fc95edf96113137e619cb15df9c4d9a21de468e40d284f5af88cb8b038540b91ba070f311efe1b081000da886eaddb3aaad90bca70e2ed34dadacccebb095d8e116ac9911c2c4f2a7a95e939853950b5e04a98b6bc9340b28e323ad7cc58888e33ef8bf438080dc26c71c8e12e0bbccb1fde98231ebf61a9011a2190b33c941d927128d30570c11b2a51d919d4caf1fbca673931fb2016b81c12e4a31b3458d0f215c97c9dfec8d514d66e748931b6e8bd06085c7ee8e7b845912053766ceaa20f1917d075fdcf2e9cca3e21bbbb1dc0a5cad36ee44e7a4e136ec5e5fc233cb63d5f035f96628a7abb281b493d9cf8fc4251fc9c3c004bd5d64713c05ba68de2318826b01db27661561b6dd381e5973b887797bb21f7a7f30c9343696a60775c36e5b05eb19dc62fef3ff99f8f00e8ccd25e00bd1863609f51e6a69f7e9c650aff3c8897ed6ee4c8d0b0356627cf69a3a3abd0c352e255b2c6250834c9fb272d83bdeb959ebc1e7207546da012b3eb4861c98fa1fd126b18a14585a2e142b98e5fe902a4961ccbdf7b7728588b7559511b30a2d2e86857d0281bd5e08103dcd11becfeb8e9c5b3e4813c79c14055e46203a5cebaa30fedec57ed23538afa85711e0ef3f72541af4d3e6c938590ee053d4ad1de8ecac6c49f1d70707c4d93e031b6f930658425fb0dfc3cde7c9f775eb3cf28fff76097c35e532335a80053fc198b6de7fb09b87e2219ec04782f35bedffef4c08e6316b25824caffef257d7a072fcd6251450dd9882e25e3e0a05a63b022e53ffcbff4097ad150095fb7065c47f7b8a9fc2c8186a5942663e661d80649af235707a87619d277dc8b5ef70190663991a531d67660c74f778301f9939d4511eca1f8bdee0706fec004a6042e45954f710a9e90081a8b297bcde440bc8d54676ba38397734196aa3835d361d8f36acbe4c1bf0f2782d27611555b19d1b9bd1ba493ab4c3a884216bc143629d8d418518f9a06b2b0d25a5e10ce515f47c5a54fa63212a686eab067600d56b234fba7be63b4d40f8be1fef0e69a55373f8faaa8f02b2b85aaee0720d0dff9a0e84850d998959df6397cd824c1a7bed9b73ca92f83ba66e3f170c3b34a3f7ad509d7bdf916d5367c22454f2252ecbb9a334e2fd2032c569fbf4bfcf6f41bd003ed10911f2644d66f4a6ec4a2eca936fcaff29ea9f454d5fc68575cfcb7e6cf8cffca37d1c5d374ca1ed77ffde5a01d349e4d18ddd15cc7397e696d6a92e0ed7260efd42ac23b5396840df636f85f83b6fcfb27f3503e130200a77c61c01b3c80a5b77c90eff390e27c3c1256efae5da2cb7ca7169cb824a164da49078e461f4640ff4d7b074a32676aac9f96746c36fa151145e1d13187191dc9739fe3c3af9418d6258e525ac82f626666278fc888cc0b8616d851469d3c676c1a0ac6c71b5914009b9797a914f1498f6f439a92205f855a4bf69843489dd425c4b5482522b96f385ab8138aefa8833eaf2056cfd068da37229fc7a5900d30c152cf92cf2a4f7a7505190268b08c9acd3839d560ab5762a0dfca0f2db56e2298c1f7d894b98ae8c98dfc81ef6e8e7a8a7138f12005f54bcfb93c9244468b7c76fc3afdc4c59abea57ce6302291c5130697834e838147d62112c96acefb57900eef463048068a0344f2e09d4c5a9488b63b92c5a67d1486ef56aff7f79c06fc5eb3eed23ea56f4331a638bbde8e9b022c29c08a803fb2e386012a1cf008106e619b5fab2a60653fba60c6ec7fd19f33a8e2ff6dc8046c117d3d8131d5f23b70f900ae5d632a51bf76420b9a1055c4bf49e22b5011e0fd12c12c403b42f54f799ba61b57c0bc0933adabdb909f0609602e73e583a9747a8f0477f0ea3621669343960f2dad82056471f596449ba52bef2fb24959f80659df251df5443dfe6b6a91fe0919cf0193afb37a786f9d13eeeafacd839f876e70c791e911b6e8c35fff3e4dbb787bf50fdcf9c8d001d8c078c0cb994f17a95f08d8de87700286c251011ffd8baf2e976e587730390e412e35b664a1dbff7744b68c91eee7356348c2fbe5a2e38985337cdeceb12c836cb1bade7c4c999eff6333bc5c0f779573080d046f96cca17802a0a2b7b0d36560868c2e54a883bf3ed16d5067adb0f4ff81d246b00ab30aaa58ba139e0e2d84c2b86e77934ff04cbb05f5ce568ceeb3ceb1baaf084160617f6821fc503c238a6daa5ffc19321a878ebad11a898f8d0d27b823c2e3ce57a9333d9d40a492da5ba26593ccf97b25c7b6698d9b8b4a46dce1c81c98093a790075411a6a7abca59e592f37eac9d588ab3a2e86edfbba12bbb83af804afb015a8c240dda9124a0c9c9691569eae6e948b48d4cf470f898075a1d5f13a239b3c1e31e8d98ddde799d8c3035d1e3949c2ec5a760a0f38314f66b3bf40de785c7a60a8f22d701a9e70d6a3f1b35d6d1e94038f8a7f4c97fb5370c9f83e31daa73a6e648a21e929324faa27482b039bf2d55032bfd8d1b5712b9250c8269b0daae8dbb5c8d4a243484b0d5f941a987242d06987bedfa97a3e062510c9b4cd3b82222ef22a4927749f38bd4259c3e6c8d8cbf0a1224bb80d8a5923827e18b18778dd44e7e3fa8b8b407c0cdec6fbccb5e33c2fbd9f5f0a7e35c4a04dedd69cdda7d888f2082903dd86e45732a687568a248a9af16253db86bae7e893a8a8c380e53d596733523499c74ab1c1b1ab26888533bf2d3ccfe221033442ce0d34aa34bd9c420d4e39413c95de2c2acdc520fc6ce524149bc80e9bd32bc7d72e7def1c425391fdee15cd89a090ec7aa29a4b9c0bfc01df19b9bf692c4569a9f3e0e19b288710089f677905780d2c3132c909cb29bee3bd6d62f060a944d66c78493b01279203e7a1185001ee8f6cb0967e8b3ce9aa50106c5576912a7dae46229ff03b65cc659cf49dae6aa6b162d6dba82119c511119225d6a536fc24bbc55f6e237d957a43f351c50378d0efc9ba1eac7d6a1b280c16454452294c457b8eb10dabc768edd67877b2ed08abba8768bc6579eccde4839ee7d68f80cc4aa318fd458f97ea9609f3135ea417aa455592e394b1f5ab6ccc14385ddbb416d47279e5748ee4e02e76ecba7d7474fb6ed6a851da3e156a7542bb9ad9b48b8362bff43755ce5b657d5a752ef632bb416184e70f1937c494ed9db084cc1177ac6c491772b739fba1b4be52acc2cc0975c8dc0b00929f503fb3cfe4c7e6670295edaef2327cec950737f0cc96eb30e7fa8217d9b9968274c413ec79e1b050814145432bf164f6e7b75a43424dec600502011190097ffd1edf795be01c4135a9be178b6b050d82d8542375abb40f0fe776965bf3f0630a2652e5bcf3dc237a84a4634081d0a9ba1842e6ddd4faf787aa6449a50fa9498ffe97c2759558112d1b0ec0db512d7990fc0efce6bde80f4b1ec9799d0cdcd41e6863eb473c3edb5c2e70ddc7d3aba52c2ad2e054b01eb3d92c2023b33975b23a72211fec063bb4fbaa49abacc47efea7d5ede3675ad49eb74b7fdaa5667b9ddff2e6007eccc90a7cfda32a053d9fd2aa1d01fe54c112b955d8c26e3e0ac2994fcf3f50d1fb129ee3df3db886d93faad74cec81c11e2e0922fcd0b2187cb75369598a3b5c8c8495870403b2593647a8a2d4d86601da9fbf49f1222dcfe5b64d0102d3c9296d0c0d459c5a7bab1580fb0b25a5ef71eb579546bda6ea58be241ec8ac9737e0e30ea47fa93c4cf2d44d2b6421c856dd5e1c2c3569040113d7006be693b293074a2a6188b228129fc79f9984f5bafd6f7a32f68bd3dc7197a7094e93561d208f0c948d364743854efc6af051a3e2a7eea8f132442d1e3a87e670190f3752ef0699f470ed15719ba274371179935ff79853b928cda754d1045929f8db75ca71825f21642f738622e392bc0b35ca98eff3821b7d122732f8ccf8d251d84589ce028d2efe7d7cbd34e8137f518e2feda64d9c788713df3e1450e8a36dc031c22f3d5bf7d294a66f90b64fd285aeded6e4a07b82c740c87598a9684f8f6d47b266169696b126e66d7b4532ace038a2b7921bd62fc806bb552676abb8204b4ad975d449d1be97ec9b55dc8b2b10a3dfe4880487de3f8c6a3b4426ac6adfa03845b4d0cf1e6cbd86be473d154bf7439dee05d555268a769ab339b299379cb8546f16ed8bbb789049eb57dcaca48c26e78982cc331ba474bcdd9f893f5f6526b4999fabcadc7bc6e8805ecc68902a31522e20b3f1817c1b516f16ab5bcdc7101165d59ce074e633dc68202221d2bae4ea62a13f6a5e7c82e8fd232fc076ca7399b5d01c325d67ab82f50acc789dfe8cab35de7e2131081a9d90606e5dc5a9c3af3fc9bc895174215d8aeae8dfe75b33be25298a11eabf2e0481050731edb27894df45a17985ffb4f3f27ad6393af9ac6f461737394ffc89f9549b7607dbecbf7803899d2e6513a74473ec0fb6569f6d27cc9a83f242f4ab78aea3c293ee846a2e0b3114991d5543902c848a7e451da4789e478f707e585defb47e3ce3525cfa17571772e1526c16c1065e5f438442c25e43e1023511022647244415f0bb7d28be2f7a75dae78b5da0f9d063c66ac396ef0b66fdb7e701e4caf9a435ccc476cdf3e5356ade531a3e33640ede4af542bcdb1ec54fcfe6f0ba105e0fd72b707611020ae1adc3f794b3c66e3c1f9ab0c87e5641a4891d74a194b9cd8ce14c81ad35df9a3c7862921e2d8c3942d4a57f4f4d13a6d82d75a21f1b862e8f4402c8b2c0fe2fb788ab761a22a4377497b34d137d0184d2d7bce69826e7ecbf63a89b133f263d58945627bd79472e3cbef5595a0c9d2e512605b578f2e558d4c4b31416c12f5709f68bd4e7ab1b0954f395299d634102bbbc97506e2dc938c5ecd9fdb26566eeb4de1621954ecb5af9b0d9d39b0fb1b972fd92b959277bf78d0a1763df9d9bc4182ad3f3b8eeb19d00cf41016f4d0d4623f2541a73f588f5108cde960b0bdc93ec260c14a498931226c981b41804bc09ca8a9168d9a4e17d269815e7ada71be1fc410b38874aa5782abc7ba7976daa94d724c9687c419165e77b7effe77d07e5fd6f55993b8a151889e57166c2ff63f04e3e09eead6f8c92e49e926c8f60a2f933c8926be5fb83b650b126cdbd9d239f6f11d717f8f32fd757350e7db0bd32e191052524922b2bf2b92801a717be7504ab79d55e425b09a79c8a84af1cf94c66dada7789e6d67dc041b4ac0e57c4e658d11be13af2fc3c200086e147a2223296a4253297155210440f0f17c3aa21ab7e15fe2e12bb9e9356d1018cc68313034b469152b650adab57f73350a6c0f76a36580a7dd8af218d656fa4bdd57b9d584e5acd1fa95e14120d7f9ed1fc3a83aa24135ca45472844d115f0a1bdebe2f6bc37cabdd0d7f9aab4fdc6a2c58aa0beb0ce431620d5ede6ef98e2b77e8d0558d250aa20c54c62d4b61d9bdd63286c6887ee3a556677e0673c94e46b9f834c6e4996b1c91141cd0d39b712f93e5195a7f7838f3af8325f649938d8c319ceebfa8154d23197bcbcf616be6f1f5d6fc070ed76abe89d6b94bf8a8d3f5b9bedce758b17d1e0be38bce845c8c3209d3fc30901494408c96956d050d14548d6edf55f4add18c91fb6da723a0c7c3c3f4c4b3a7056e611bdabdfd4edfb7a79a2b02c05ef4027c15db8bf2bcd015c66ae6d3203164615c56dba94606702caa577777e05e642ce3df5573ba3ae268f4ce4b38cc9013faf21d7dd7174ce7ea498c9451a1626f02398e49a33def46d228edb6de6fe8dec11f553634fb923849e3cdfbe645cff327b8251afc107b7fb8cf3cd735ed9bb1275ecc804a4f126bfeb853e13e636a74a4efc9faf01118aa82d00ac20ce0c0af140c756ab90e5dfa238707318c353c7bc9342c36ddcb6e74400933c8fa99448f3a169b95cd6d2558d755e1dd53f3fcfc46b057c550de64829e556c8cae40e796ef76fcb953086168fb2eae89349f29d3dd26ac6282292355be3b123b0c02e553bfb8948afe8d7e8ae5d63184b20795481a9385be05e9eff807b94eb1e977d50a7dd7da582695aa496a9a7587d01f970c3ed8d63db217164824d8b8bf4c5e493f801e1ed241afda4b695a4c606d6b5344493d9922dff76b4be7021d26b60d1f785d205c39d83694b0585eff60c9e1bb2f7023c5b5d3d043897baa9a9ef3507c280d9580d43c7985db146694b8649e2bf67e37081a945c4c81fad0a48e64d8877dd149443c8f4d2267b4aeaec8f168b44d5af109f505644e2a545fefb13d673210bd2b418b054cb4fc9fb7f2041e87be5f31466b51b308deff16bd9878a3ec72d0a1ad27c5cbd497b2c9585d914392da52b3708b198a3693d2988f03c7d3a41762c78cb9c268dbbcb0d1efc800fab4183286d924604a5fe9657cebad2d8bb0ef0006a46a4ef9fe92c3fdc1682b993239421879cb5626bae2368b646e61c870342b5cbb7f7baab7142a9ca2378805310c1abc12098c796550a20f3d5f01141470c1b5550857202ec712e3813d1ff7150111f4730bd83c8516aa86b345c280fb461c7bc6ff6f0bea507033d312027f51b4a90becfb048e676bfecfe2b1cd7504a226e89bb4df31d13436db7765062fc74789b75f82e77a6e83f49092558d38da47755ca0373ee0979c880e224bd5f70d6a69d8e2463d9b70bc7dbbdc9f27e1ba38d5adfdd6a5a0c564cda76a9ed6dc0e5117b06b9817d6d47f2a82d41a5a821431fe5f38eb3417d820c769afc09ffd001fd0a6f3c3879dc74ffcba15b8b29a4f435249226ee1cd7fb8c0bb6ec9012178bd25c05e69cb1d6e7121295a4e166c80d918b915232e6e8823ed6529eda300f2541142092df194de0cc255beed438afa94cbd350acf809e7f0467830b20108b95c9b653b030e311026cecc32332697cc2f8ef9cecb227de6de7144fc4b25e2180784f55204b17612228548fc825e60c88144c72abf3cb468a2d5491c431f38d858fb5471ce84c69d1d2b38e8ae2b134f4f94aa03996b2e0f1edc538ff32f7ee409b79922660b0f3421083298b14f26733577ff59b672b7214bd0e4508503c61da0b70cb6186b01ed575f9e5bf8f3bf538c2260f4a82755094c33c931ad0bb346518cff593de0985602852749610e073f20dd0be87ec8c452c3dfb4ac19d73a489e74a8a48411faac7ecf7e53d76ced94495ec2e814259fb5114a7986fb81a936d38c99443ebd55026acc6c78e1b14728551bae0bdb86cd518eeeb22dbfd7f7a32d2b94f7b0f757f34d6d22156e4dc1e7b9533fcf7a0d0cc3e41480345ddc68c11e47f8c514f1ed601d69e5b36e03962643544064ddbf689a3cbf378074879f6cd33d56c0a728a2050ab202981d6723b99a0e505cd8fea39da000bc7608a53024614407a5ebd5e034b9a59fa952841ab4f0758e988161e56fb454db449b3090eb1c4154ea6e34ea13101bb3a62dfa1878448952b1955a3c462432d7035228caf6ed4381e3ec1295e90decc62ebed5e60acbae3d26982e7834ee00a7632f581b6198f9bf42161a4980d08fac53d40b81731e4c727f5a24e75f6a262a1d2ab37b3ebc09ca6b0ffb0a1edf942e93d17d95eb3532b57488469575d9d47c2d08eec166f8fc1f6183795e1d5e48f46ae05a173af5765e03e98e6710b408cbeb169fb67f1d79a1999a977b7df51d7ede5aca5d31e9d75d2be3838a014d8283c3566ef5ea37955d6e66628d755c927e14d40f723428a69e03c8b100924b72e2c49926208044ff49536b0a1eca6c7c42ff9c90716fa35b02d2d869bcceb60e91dacf34ac1249f5d7934a078417e4fd416da2fbf9122fd37c042712ad9ce8592806b556d26163990b11466bf759615d2b852e75681a8b87571b5f0a21a4b5617cb94e2dc9efb264c0a331a752994d10a958b245cb40d9985365c4dd3b9551c4d03157aa29222a2af29ada6c123eaf08722310da16f7611cfe729255044642a8c5cb9f94c3f778248bf35520ac980af12ddd3b001df23404e49e3a57cc11fd12e51e422a92b5bf9e2ad225d42ad5d0325ca35804340fdde061c5bf2a4c8cc86e946a60040130ce831b9be93885f4ddb9fb7584ad875b05d59128f533c40c541ec03dfccba2af6fbdae4efb10a45e0f7d9851126b1dd9d374cec36067cdf2eefcb0a0cbf5619fa7ac2027d4b5c9da389bc1ffee655aef769a5aa542b291c0d71c8dc5e54268dc5f86a4133cc917a84efaf1456de9106c6fb3f5d41ff9f9a76a1dd3243a5e99c95e933d32e13f3eeb5a550", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8}) 145.111298ms ago: executing program 4 (id=4583): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003500010000000000000000000101"], 0x114}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000050003"], 0x7c}}, 0x0) unshare(0x20000400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1d, 0x100, &(0x7f00000000c0)="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"}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) statx(r5, &(0x7f0000000dc0)='./file1\x00', 0x100, 0x400, &(0x7f0000000e00)) 0s ago: executing program 7 (id=4584): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d76697274696f2c290360837fd4795e00"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0xd37, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x200}}, 0x18) kernel console output (not intermixed with test programs): Q 0x0 after dequeue, screwing up backlog [ 606.553394][T29968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.613912][T29972] netlink: 'syz.5.3959': attribute type 21 has an invalid length. [ 606.617488][T29972] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3959'. [ 606.622462][T29972] netlink: 'syz.5.3959': attribute type 6 has an invalid length. [ 606.625713][T29972] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3959'. [ 606.631943][T29972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 606.651159][T29968] smc: removing ib device syz0 [ 606.792238][T26375] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 606.815374][T26375] usb 11-1: device descriptor read/8, error -71 [ 606.867783][ T9] usb 6-1: 0:2 : does not exist [ 606.869472][ T9] usb 6-1: unit 0 not found! [ 606.891495][ T9] usb 6-1: USB disconnect, device number 38 [ 606.932098][T26375] usb usb11-port1: unable to enumerate USB device [ 607.160263][T29996] dummy0: entered allmulticast mode [ 607.530638][ T5938] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 607.534705][ T5938] Bluetooth: hci1: Injecting HCI hardware error event [ 607.539040][ T5938] Bluetooth: hci1: hardware error 0x00 [ 607.701749][ T9] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 607.874509][ T9] usb 10-1: config 7 has an invalid interface number: 101 but max is 0 [ 607.877992][ T9] usb 10-1: config 7 has no interface number 0 [ 607.882607][ T9] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 607.886644][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.889952][ T9] usb 10-1: Product: syz [ 607.891714][ T9] usb 10-1: Manufacturer: syz [ 607.893782][ T9] usb 10-1: SerialNumber: syz [ 608.288032][T30029] tipc: Enabled bearer , priority 10 [ 608.440170][T30036] overlayfs: empty lowerdir [ 608.516577][ T9] as10x_usb: device has been detected [ 608.519507][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 608.530917][T30055] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3975'. [ 608.534827][T30055] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3975'. [ 608.541886][T30055] netlink: 'syz.5.3975': attribute type 3 has an invalid length. [ 608.582729][ T9] usb 10-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 608.603144][ T9] as10x_usb: error during firmware upload part1 [ 608.606162][ T9] Registered device Elgato EyeTV DTT Deluxe [ 608.608038][ T9] usb 10-1: USB disconnect, device number 44 [ 608.628100][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 608.629791][ T9] as10x_usb: device has been disconnected [ 608.685841][ T10] hid (null): unknown global tag 0xe [ 608.688160][ T10] hid (null): global environment stack underflow [ 608.690912][ T10] hid (null): report_id 0 is invalid [ 608.695347][ T10] hid-generic 0200:0003:0001.0011: unknown global tag 0xe [ 608.698493][ T10] hid-generic 0200:0003:0001.0011: item 0 2 1 14 parsing failed [ 608.702141][ T10] hid-generic 0200:0003:0001.0011: probe with driver hid-generic failed with error -22 [ 608.707174][ T6017] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 608.812177][T30087] fuse: Bad value for 'user_id' [ 608.813869][T30087] fuse: Bad value for 'user_id' [ 608.879525][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 608.884447][ T6017] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 608.887282][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.888517][ T29] usb 11-1: new full-speed USB device number 47 using dummy_hcd [ 608.890427][ T6017] usb 6-1: Product: syz [ 608.894390][ T6017] usb 6-1: Manufacturer: syz [ 608.895862][ T6017] usb 6-1: SerialNumber: syz [ 608.898578][ T6017] usb 6-1: config 0 descriptor?? [ 609.050852][ T29] usb 11-1: unable to get BOS descriptor or descriptor too short [ 609.054629][ T29] usb 11-1: not running at top speed; connect to a high speed hub [ 609.059243][ T29] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.063623][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.069701][ T29] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.073649][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.077032][ T29] usb 11-1: Product: syz [ 609.078931][ T29] usb 11-1: Manufacturer: syz [ 609.083433][ T29] usb 11-1: SerialNumber: syz [ 609.324046][ T5937] Bluetooth: hci3: ACL packet for unknown connection handle 456 [ 609.334121][ T9] usb 6-1: USB disconnect, device number 39 [ 609.423057][ T29] usb 11-1: 0:2 : does not exist [ 609.425309][ T29] usb 11-1: unit 0 not found! [ 609.433520][ T29] usb 11-1: USB disconnect, device number 47 [ 609.754762][ T5938] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 609.969534][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 610.039114][T30156] fuse: Bad value for 'fd' [ 610.069698][T30159] FAULT_INJECTION: forcing a failure. [ 610.069698][T30159] name failslab, interval 1, probability 0, space 0, times 0 [ 610.075670][T30159] CPU: 1 UID: 0 PID: 30159 Comm: syz.5.3991 Not tainted syzkaller #0 PREEMPT(full) [ 610.075694][T30159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 610.075704][T30159] Call Trace: [ 610.075711][T30159] [ 610.075720][T30159] dump_stack_lvl+0x16c/0x1f0 [ 610.075749][T30159] should_fail_ex+0x512/0x640 [ 610.075779][T30159] should_failslab+0xc2/0x120 [ 610.075805][T30159] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 610.075832][T30159] ? sidtab_sid2str_get+0x17a/0x680 [ 610.075866][T30159] ? kmemdup_noprof+0x29/0x60 [ 610.075888][T30159] kmemdup_noprof+0x29/0x60 [ 610.075912][T30159] sidtab_sid2str_get+0x17a/0x680 [ 610.075941][T30159] sidtab_entry_to_string+0x33/0x110 [ 610.075971][T30159] security_sid_to_context_core+0x35c/0x640 [ 610.076000][T30159] selinux_inode_getsecurity+0x2bf/0x370 [ 610.076028][T30159] ? __pfx_selinux_inode_getsecurity+0x10/0x10 [ 610.076063][T30159] security_inode_getsecurity+0x12f/0x2f0 [ 610.076094][T30159] vfs_getxattr+0x19e/0x290 [ 610.076120][T30159] ? __pfx_vfs_getxattr+0x10/0x10 [ 610.076150][T30159] ovl_other_xattr_get+0xf5/0x160 [ 610.076182][T30159] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 610.076206][T30159] ? xattr_resolve_name+0x27b/0x3f0 [ 610.076233][T30159] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 610.076256][T30159] __vfs_getxattr+0x13d/0x1a0 [ 610.076279][T30159] ? __pfx___vfs_getxattr+0x10/0x10 [ 610.076310][T30159] inode_doinit_use_xattr+0xb5/0x410 [ 610.076337][T30159] inode_doinit_with_dentry+0x51e/0x12e0 [ 610.076367][T30159] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 610.076396][T30159] ? kasan_quarantine_put+0x10a/0x240 [ 610.076424][T30159] selinux_d_instantiate+0x26/0x30 [ 610.076447][T30159] security_d_instantiate+0x142/0x1a0 [ 610.076475][T30159] d_splice_alias_ops+0x92/0x840 [ 610.076502][T30159] ovl_lookup+0xeee/0x21a0 [ 610.076536][T30159] ? __pfx_ovl_lookup+0x10/0x10 [ 610.076561][T30159] ? d_alloc_parallel+0x864/0x1510 [ 610.076602][T30159] ? lockdep_init_map_type+0x5c/0x280 [ 610.076634][T30159] __lookup_slow+0x251/0x460 [ 610.076656][T30159] ? __pfx___lookup_slow+0x10/0x10 [ 610.076693][T30159] ? lookup_fast+0x156/0x610 [ 610.076718][T30159] walk_component+0x353/0x5b0 [ 610.076743][T30159] path_lookupat+0x142/0x6d0 [ 610.076763][T30159] ? kasan_save_stack+0x33/0x60 [ 610.076790][T30159] filename_lookup+0x224/0x5f0 [ 610.076815][T30159] ? __pfx_filename_lookup+0x10/0x10 [ 610.076871][T30159] do_linkat+0x14c/0x5a0 [ 610.076901][T30159] ? __pfx_do_linkat+0x10/0x10 [ 610.076925][T30159] ? strncpy_from_user+0x203/0x2e0 [ 610.076950][T30159] ? getname_flags.part.0+0x1c5/0x550 [ 610.076974][T30159] __x64_sys_link+0x7d/0xa0 [ 610.077000][T30159] do_syscall_64+0xcd/0xfa0 [ 610.077026][T30159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.077045][T30159] RIP: 0033:0x7fb8e718efc9 [ 610.077060][T30159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.077077][T30159] RSP: 002b:00007fb8e80c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 610.077094][T30159] RAX: ffffffffffffffda RBX: 00007fb8e73e5fa0 RCX: 00007fb8e718efc9 [ 610.077108][T30159] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000000 [ 610.077119][T30159] RBP: 00007fb8e80c2090 R08: 0000000000000000 R09: 0000000000000000 [ 610.077129][T30159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.077139][T30159] R13: 00007fb8e73e6038 R14: 00007fb8e73e5fa0 R15: 00007ffeb2607f88 [ 610.077171][T30159] [ 610.077196][T30159] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=overlay ino=745 [ 610.272580][T30170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30170 comm=syz.1.3994 [ 610.278279][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3994'. [ 610.324840][T30173] netlink: 'syz.1.3995': attribute type 4 has an invalid length. [ 610.341521][T30173] netlink: 'syz.1.3995': attribute type 4 has an invalid length. [ 610.398866][T30171] sd 0:0:0:0: PR command failed: 1026 [ 610.401194][T30171] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 610.404018][T30171] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 611.082025][ T842] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 611.243290][ T842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 611.246424][ T842] usb 10-1: not running at top speed; connect to a high speed hub [ 611.250673][ T842] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.255084][ T842] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.260736][ T842] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.265616][ T842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.268945][ T842] usb 10-1: Product: syz [ 611.270737][ T842] usb 10-1: Manufacturer: syz [ 611.272892][ T842] usb 10-1: SerialNumber: syz [ 611.662068][T30205] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.765808][T30196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.771101][T30196] batadv_slave_0: entered promiscuous mode [ 611.794257][ T842] usb 10-1: 0:2 : does not exist [ 611.796115][ T842] usb 10-1: unit 0 not found! [ 611.815350][T30205] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.815525][ T842] usb 10-1: USB disconnect, device number 45 [ 611.830559][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 611.830576][ T40] audit: type=1400 audit(2000000245.063:12505): avc: denied { mount } for pid=30226 comm="syz.1.4004" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 611.851820][ T40] audit: type=1400 audit(2000000245.091:12506): avc: denied { unmount } for pid=16595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 611.882231][ T40] audit: type=1400 audit(2000000245.110:12507): avc: denied { read write } for pid=30237 comm="syz.1.4005" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 611.889948][ T40] audit: type=1400 audit(2000000245.110:12508): avc: denied { open } for pid=30237 comm="syz.1.4005" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 611.924767][T30205] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.945109][ T40] audit: type=1400 audit(2000000245.166:12509): avc: denied { read write } for pid=30237 comm="syz.1.4005" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 611.953163][ T40] audit: type=1400 audit(2000000245.166:12510): avc: denied { open } for pid=30237 comm="syz.1.4005" path="/566/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 612.016994][ T40] audit: type=1400 audit(2000000245.241:12511): avc: denied { create } for pid=30244 comm="syz.1.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 612.024641][ T40] audit: type=1400 audit(2000000245.241:12512): avc: denied { write } for pid=30244 comm="syz.1.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 612.029840][T30205] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.066132][ T40] audit: type=1400 audit(2000000245.287:12513): avc: denied { read } for pid=30248 comm="syz.1.4007" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 612.075934][ T40] audit: type=1400 audit(2000000245.287:12514): avc: denied { open } for pid=30248 comm="syz.1.4007" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 612.164956][T24863] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.185062][T17855] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.187911][T17855] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.198539][T17855] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.291366][T30275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4012'. [ 612.357450][T30277] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4013'. [ 612.385738][ T5936] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 612.450966][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 612.463576][T30289] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4014'. [ 612.468636][T30289] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4014'. [ 612.491851][T30289] netlink: 'syz.5.4014': attribute type 3 has an invalid length. [ 612.517810][T30292] FAULT_INJECTION: forcing a failure. [ 612.517810][T30292] name failslab, interval 1, probability 0, space 0, times 0 [ 612.524671][T30292] CPU: 3 UID: 0 PID: 30292 Comm: syz.4.4016 Not tainted syzkaller #0 PREEMPT(full) [ 612.524708][T30292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 612.524718][T30292] Call Trace: [ 612.524724][T30292] [ 612.524732][T30292] dump_stack_lvl+0x16c/0x1f0 [ 612.524780][T30292] should_fail_ex+0x512/0x640 [ 612.524811][T30292] ? fs_reclaim_acquire+0xae/0x150 [ 612.524839][T30292] should_failslab+0xc2/0x120 [ 612.524865][T30292] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 612.524890][T30292] ? __pfx_vfs_getxattr+0x10/0x10 [ 612.524911][T30292] ? security_context_to_sid_core+0xc1/0x860 [ 612.524940][T30292] ? kmemdup_nul+0x49/0xf0 [ 612.524961][T30292] kmemdup_nul+0x49/0xf0 [ 612.524984][T30292] security_context_to_sid_core+0xc1/0x860 [ 612.525011][T30292] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 612.525057][T30292] inode_doinit_use_xattr+0x101/0x410 [ 612.525083][T30292] inode_doinit_with_dentry+0x51e/0x12e0 [ 612.525114][T30292] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 612.525140][T30292] ? kasan_quarantine_put+0x10a/0x240 [ 612.525167][T30292] selinux_d_instantiate+0x26/0x30 [ 612.525192][T30292] security_d_instantiate+0x142/0x1a0 [ 612.525224][T30292] d_splice_alias_ops+0x92/0x840 [ 612.525250][T30292] ovl_lookup+0xeee/0x21a0 [ 612.525282][T30292] ? __pfx_ovl_lookup+0x10/0x10 [ 612.525308][T30292] ? d_alloc_parallel+0x864/0x1510 [ 612.525346][T30292] ? lockdep_init_map_type+0x5c/0x280 [ 612.525375][T30292] __lookup_slow+0x251/0x460 [ 612.525394][T30292] ? __pfx___lookup_slow+0x10/0x10 [ 612.525431][T30292] ? lookup_fast+0x156/0x610 [ 612.525455][T30292] walk_component+0x353/0x5b0 [ 612.525478][T30292] path_lookupat+0x142/0x6d0 [ 612.525500][T30292] ? kasan_save_stack+0x33/0x60 [ 612.525527][T30292] filename_lookup+0x224/0x5f0 [ 612.525551][T30292] ? __pfx_filename_lookup+0x10/0x10 [ 612.525603][T30292] do_linkat+0x14c/0x5a0 [ 612.525633][T30292] ? __pfx_do_linkat+0x10/0x10 [ 612.525657][T30292] ? strncpy_from_user+0x203/0x2e0 [ 612.525681][T30292] ? getname_flags.part.0+0x1c5/0x550 [ 612.525705][T30292] __x64_sys_link+0x7d/0xa0 [ 612.525730][T30292] do_syscall_64+0xcd/0xfa0 [ 612.525755][T30292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.525773][T30292] RIP: 0033:0x7fd58ad8efc9 [ 612.525789][T30292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.525805][T30292] RSP: 002b:00007fd58bc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 612.525822][T30292] RAX: ffffffffffffffda RBX: 00007fd58afe5fa0 RCX: 00007fd58ad8efc9 [ 612.525835][T30292] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000000 [ 612.525847][T30292] RBP: 00007fd58bc1b090 R08: 0000000000000000 R09: 0000000000000000 [ 612.525858][T30292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.525867][T30292] R13: 00007fd58afe6038 R14: 00007fd58afe5fa0 R15: 00007ffdd2fe6be8 [ 612.525893][T30292] [ 612.647742][T30292] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=1728 [ 612.676055][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.680567][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.684621][ T5936] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.690144][ T5936] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.693879][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.699827][ T5936] usb 6-1: config 0 descriptor?? [ 612.750370][T30298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4017'. [ 612.751663][T30296] fuse: Bad value for 'fd' [ 612.754313][T30298] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 612.898305][T30306] pimreg3: entered allmulticast mode [ 612.910727][T30302] EXT4-fs (nbd6): unable to read superblock [ 613.050920][T30310] syz_tun: entered promiscuous mode [ 613.054574][T30310] gretap0: entered promiscuous mode [ 613.355267][ T5936] usbhid 6-1:0.0: can't add hid device: -71 [ 613.357896][ T5936] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 613.363158][ T5936] usb 6-1: USB disconnect, device number 40 [ 613.612499][T30343] fuse: Bad value for 'fd' [ 614.000118][T30356] __nla_validate_parse: 2 callbacks suppressed [ 614.000134][T30356] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4032'. [ 614.006546][T30356] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4032'. [ 614.010843][T30356] netlink: 'syz.1.4032': attribute type 3 has an invalid length. [ 614.706060][T30363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.773887][T30363] kvm: kvm [30362]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 614.778025][T30363] kvm: kvm [30362]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 615.022255][T30372] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 615.227242][T30379] could not allocate digest TFM handle md5-generic [ 615.271546][T30383] loop8: detected capacity change from 0 to 8 [ 615.275885][T30383] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 615.277597][T30383] loop8: partition table partially beyond EOD, truncated [ 615.279951][T30383] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 615.480534][T30397] bridge2: entered promiscuous mode [ 615.482922][T30397] bridge2: entered allmulticast mode [ 615.725398][T30408] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4043'. [ 615.730412][T30408] netlink: 'syz.1.4043': attribute type 3 has an invalid length. [ 615.752832][T30409] netlink: 'syz.5.4044': attribute type 11 has an invalid length. [ 615.756231][T30409] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4044'. [ 616.075598][ T5936] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 616.248319][ T5936] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.252058][ T5936] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.255340][ T5936] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.259596][ T5936] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.262456][ T5936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.266613][ T5936] usb 10-1: config 0 descriptor?? [ 616.914582][ T5936] usbhid 10-1:0.0: can't add hid device: -71 [ 616.916751][ T5936] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 616.921209][ T5936] usb 10-1: USB disconnect, device number 46 [ 617.046717][T30442] FAULT_INJECTION: forcing a failure. [ 617.046717][T30442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.052412][T30442] CPU: 3 UID: 0 PID: 30442 Comm: syz.6.4049 Not tainted syzkaller #0 PREEMPT(full) [ 617.052437][T30442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 617.052449][T30442] Call Trace: [ 617.052455][T30442] [ 617.052463][T30442] dump_stack_lvl+0x16c/0x1f0 [ 617.052490][T30442] should_fail_ex+0x512/0x640 [ 617.052516][T30442] _copy_from_user+0x2e/0xd0 [ 617.052541][T30442] core_sys_select+0x2c8/0xc20 [ 617.052572][T30442] ? __pfx_core_sys_select+0x10/0x10 [ 617.052620][T30442] ? set_user_sigmask+0x21b/0x2b0 [ 617.052645][T30442] ? __pfx_set_user_sigmask+0x10/0x10 [ 617.052675][T30442] do_pselect.constprop.0+0x19f/0x1e0 [ 617.052699][T30442] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 617.052732][T30442] __x64_sys_pselect6+0x182/0x240 [ 617.052757][T30442] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 617.052787][T30442] do_syscall_64+0xcd/0xfa0 [ 617.052812][T30442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.052830][T30442] RIP: 0033:0x7f3d8278efc9 [ 617.052845][T30442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.052862][T30442] RSP: 002b:00007f3d836ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 617.052879][T30442] RAX: ffffffffffffffda RBX: 00007f3d829e5fa0 RCX: 00007f3d8278efc9 [ 617.052900][T30442] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 617.052912][T30442] RBP: 00007f3d836ae090 R08: 0000000000000000 R09: 0000000000000000 [ 617.052922][T30442] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 617.052932][T30442] R13: 00007f3d829e6038 R14: 00007f3d829e5fa0 R15: 00007ffc3eab7a08 [ 617.052959][T30442] [ 617.278893][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 617.278907][ T40] audit: type=1400 audit(2000000250.159:12614): avc: denied { read write } for pid=30448 comm="syz.1.4052" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 617.291548][ T40] audit: type=1400 audit(2000000250.159:12615): avc: denied { open } for pid=30448 comm="syz.1.4052" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 617.300427][ T40] audit: type=1400 audit(2000000250.159:12616): avc: denied { ioctl } for pid=30448 comm="syz.1.4052" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 617.319878][ T40] audit: type=1400 audit(2000000250.196:12617): avc: denied { write } for pid=30450 comm="syz.1.4053" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 617.351419][ T40] audit: type=1400 audit(2000000250.224:12618): avc: denied { create } for pid=30450 comm="syz.1.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.352194][T30451] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4053'. [ 617.359934][ T40] audit: type=1400 audit(2000000250.224:12619): avc: denied { write } for pid=30450 comm="syz.1.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.359980][ T40] audit: type=1400 audit(2000000250.224:12620): avc: denied { nlmsg_write } for pid=30450 comm="syz.1.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 617.398132][ T40] audit: type=1400 audit(2000000250.271:12621): avc: denied { mount } for pid=30450 comm="syz.1.4053" name="/" dev="9p" ino=71827833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 617.417817][T30458] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4054'. [ 617.424152][T30458] netlink: 'syz.4.4054': attribute type 3 has an invalid length. [ 617.434976][ T40] audit: type=1400 audit(2000000250.308:12622): avc: denied { unmount } for pid=16595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 617.539462][ T40] audit: type=1400 audit(2000000250.402:12623): avc: denied { read } for pid=30460 comm="syz.5.4056" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 617.548114][T30461] input: syz0 as /devices/virtual/input/input25 [ 617.623525][T30467] devtmpfs: Cannot change global quota limit on remount [ 617.630123][T30467] No control pipe specified [ 617.810950][T30478] fuse: Invalid rootmode [ 618.193992][T30489] fuse: Bad value for 'fd' [ 618.755533][T30480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.758204][T30480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 618.761291][T30480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 618.817413][T30503] fuse: Unknown parameter '00000000000000000000' [ 618.818495][T30504] veth1_macvtap: left promiscuous mode [ 618.822324][T30504] macsec0: entered promiscuous mode [ 618.871502][T30507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4068'. [ 618.908128][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4070'. [ 619.091117][T30524] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4071'. [ 619.101387][T30524] netlink: 'syz.1.4071': attribute type 3 has an invalid length. [ 619.597418][T30535] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 619.823218][T30548] fuse: Unknown parameter '00000000000000000000' [ 619.907078][T30553] Sensor A: ================= START STATUS ================= [ 619.910518][T30553] Sensor A: Test Pattern: 75% Colorbar [ 619.913366][T30553] Sensor A: Show Information: All [ 619.915845][T30553] Sensor A: Vertical Flip: false [ 619.917917][T30553] Sensor A: Horizontal Flip: true [ 619.920057][T30553] Sensor A: Brightness: 128 [ 619.923639][T30553] Sensor A: Contrast: 128 [ 619.925542][T30553] Sensor A: Hue: 0 [ 619.928528][T30553] Sensor A: Saturation: 128 [ 619.930105][T30553] Sensor A: ================== END STATUS ================== [ 620.107974][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 620.174306][T30571] netlink: 'syz.1.4082': attribute type 21 has an invalid length. [ 620.176917][T30571] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4082'. [ 620.182639][ T54] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 620.305752][T30585] FAULT_INJECTION: forcing a failure. [ 620.305752][T30585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.311413][T30585] CPU: 3 UID: 0 PID: 30585 Comm: syz.1.4086 Not tainted syzkaller #0 PREEMPT(full) [ 620.311437][T30585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.311449][T30585] Call Trace: [ 620.311455][T30585] [ 620.311462][T30585] dump_stack_lvl+0x16c/0x1f0 [ 620.311490][T30585] should_fail_ex+0x512/0x640 [ 620.311517][T30585] _copy_from_user+0x2e/0xd0 [ 620.311543][T30585] core_sys_select+0x35b/0xc20 [ 620.311573][T30585] ? __pfx_core_sys_select+0x10/0x10 [ 620.311622][T30585] ? set_user_sigmask+0x21b/0x2b0 [ 620.311648][T30585] ? __pfx_set_user_sigmask+0x10/0x10 [ 620.311678][T30585] do_pselect.constprop.0+0x19f/0x1e0 [ 620.311702][T30585] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 620.311736][T30585] __x64_sys_pselect6+0x182/0x240 [ 620.311760][T30585] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 620.311791][T30585] do_syscall_64+0xcd/0xfa0 [ 620.311822][T30585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.311840][T30585] RIP: 0033:0x7fc42d98efc9 [ 620.311855][T30585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.311872][T30585] RSP: 002b:00007fc42e8dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 620.311890][T30585] RAX: ffffffffffffffda RBX: 00007fc42dbe5fa0 RCX: 00007fc42d98efc9 [ 620.311902][T30585] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 620.311912][T30585] RBP: 00007fc42e8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 620.311924][T30585] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 620.311933][T30585] R13: 00007fc42dbe6038 R14: 00007fc42dbe5fa0 R15: 00007ffc8af4edc8 [ 620.311958][T30585] [ 620.345437][ T54] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 620.376033][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 620.379029][ T54] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 620.403127][ T54] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.406608][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.409697][ T54] usb 10-1: Product: 芲㧥藪澗࿔í¾ã‚¸å…Ší“‹à¯¹ã¼¹î‘™î¥ã´¦ãº…╜⭌ᴱ륛阂൑ê•íšŒîº¢ê›¼È醨㉞梫㗣ꣲ嘧਋뷹ꬵᩄ㳢軞ᄎﾱ⥆웬âšáˆµä­³ï¦î½”㙈੕겸렗饎ഭ냨ᣓ趆 [ 620.417316][ T54] usb 10-1: Manufacturer: à ¾ [ 620.419396][ T54] usb 10-1: SerialNumber: ј [ 620.529726][T30598] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4090'. [ 620.540988][T30598] netlink: 'syz.6.4090': attribute type 3 has an invalid length. [ 621.200991][ T54] cdc_ncm 10-1:1.0: bind() failure [ 621.207983][ T54] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 621.211547][ T54] cdc_ncm 10-1:1.1: bind() failure [ 621.218368][ T54] usb 10-1: USB disconnect, device number 47 [ 621.228488][T30609] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 621.339661][T30618] could not open pipe file descriptor [ 621.403281][T30623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 621.479147][T30628] binder: 30620:30628 ioctl c0306201 2000000001c0 returned -14 [ 621.712233][T30636] fuse: Unknown parameter 'user00000000000000000000' [ 621.862450][T30641] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4099'. [ 621.869399][T30641] netlink: 'syz.1.4099': attribute type 3 has an invalid length. [ 622.332479][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 622.386920][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 622.694678][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 622.694690][ T40] audit: type=1400 audit(2000000255.217:12741): avc: denied { create } for pid=30730 comm="syz.1.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 622.704245][ T40] audit: type=1400 audit(2000000255.217:12742): avc: denied { getopt } for pid=30730 comm="syz.1.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 622.717292][T26375] usb 11-1: new high-speed USB device number 48 using dummy_hcd [ 622.723004][ T40] audit: type=1400 audit(2000000255.245:12743): avc: denied { name_bind } for pid=30732 comm="syz.5.4109" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 622.730562][ T40] audit: type=1400 audit(2000000255.245:12744): avc: denied { node_bind } for pid=30732 comm="syz.5.4109" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 622.737660][ T40] audit: type=1400 audit(2000000255.255:12745): avc: denied { read write } for pid=30732 comm="syz.5.4109" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 622.745822][ T40] audit: type=1400 audit(2000000255.255:12746): avc: denied { open } for pid=30732 comm="syz.5.4109" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 622.805258][ T40] audit: type=1400 audit(2000000255.329:12747): avc: denied { prog_load } for pid=30730 comm="syz.1.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.811200][ T40] audit: type=1400 audit(2000000255.329:12748): avc: denied { bpf } for pid=30730 comm="syz.1.4108" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.819920][ T40] audit: type=1400 audit(2000000255.329:12749): avc: denied { perfmon } for pid=30730 comm="syz.1.4108" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.827780][ T40] audit: type=1400 audit(2000000255.329:12750): avc: denied { create } for pid=30730 comm="syz.1.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 622.835645][T30731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4108'. [ 622.838770][T30731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4108'. [ 622.888580][T26375] usb 11-1: Using ep0 maxpacket: 8 [ 622.890242][ T5938] Bluetooth: hci3: unexpected event for opcode 0x100c [ 622.892137][T26375] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 622.898555][T26375] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.903735][T26375] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.907302][T26375] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.914561][T26375] usbtmc 11-1:16.0: bulk endpoints not found [ 623.067211][T30761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30761 comm=syz.5.4116 [ 623.073148][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4116'. [ 623.075268][ T5937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.082681][ T5937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.087030][ T5937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.090464][ T5937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.093716][ T5937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.193560][T30870] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 623.354097][T30762] chnl_net:caif_netlink_parms(): no params data found [ 623.483949][T30762] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.486353][T30762] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.488798][T30762] bridge_slave_0: entered allmulticast mode [ 623.491452][T30762] bridge_slave_0: entered promiscuous mode [ 623.496693][T30762] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.498362][ T9] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 623.501339][T30762] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.505228][T30762] bridge_slave_1: entered allmulticast mode [ 623.507979][T30762] bridge_slave_1: entered promiscuous mode [ 623.557665][T30762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.564575][T30762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.621458][T30762] team0: Port device team_slave_0 added [ 623.624911][T30762] team0: Port device team_slave_1 added [ 623.673100][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 623.676417][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 623.678394][T30762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.680205][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.682469][T30762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.684894][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.695123][T30762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.696186][T30762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.700514][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.701544][T30762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.701560][T30762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.718649][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.721169][ T9] usb 10-1: Product: syz [ 623.722584][ T9] usb 10-1: Manufacturer: syz [ 623.724098][ T9] usb 10-1: SerialNumber: syz [ 623.793812][T30762] hsr_slave_0: entered promiscuous mode [ 623.796136][T30762] hsr_slave_1: entered promiscuous mode [ 623.799120][T30762] debugfs: 'hsr0' already exists in 'hsr' [ 623.800985][T30762] Cannot create hsr debugfs directory [ 623.932618][T30762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.936111][T30762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.043613][T30762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.047267][T30762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.062272][ T9] usb 10-1: 0:2 : does not exist [ 624.064038][ T9] usb 10-1: unit 0 not found! [ 624.070763][ T9] usb 10-1: USB disconnect, device number 48 [ 624.125557][T30762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.129393][T30762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.220036][T30762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.224504][T30762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.245471][T30979] FAULT_INJECTION: forcing a failure. [ 624.245471][T30979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.251207][T30979] CPU: 2 UID: 0 PID: 30979 Comm: syz.4.4122 Not tainted syzkaller #0 PREEMPT(full) [ 624.251232][T30979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 624.251244][T30979] Call Trace: [ 624.251251][T30979] [ 624.251259][T30979] dump_stack_lvl+0x16c/0x1f0 [ 624.251287][T30979] should_fail_ex+0x512/0x640 [ 624.251314][T30979] core_sys_select+0x94e/0xc20 [ 624.251344][T30979] ? __pfx_core_sys_select+0x10/0x10 [ 624.251407][T30979] ? set_user_sigmask+0x21b/0x2b0 [ 624.251436][T30979] ? __pfx_set_user_sigmask+0x10/0x10 [ 624.251468][T30979] do_pselect.constprop.0+0x19f/0x1e0 [ 624.251493][T30979] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 624.251527][T30979] __x64_sys_pselect6+0x182/0x240 [ 624.251551][T30979] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 624.251582][T30979] do_syscall_64+0xcd/0xfa0 [ 624.251607][T30979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.251625][T30979] RIP: 0033:0x7fd58ad8efc9 [ 624.251641][T30979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.251658][T30979] RSP: 002b:00007fd58bc1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 624.251675][T30979] RAX: ffffffffffffffda RBX: 00007fd58afe5fa0 RCX: 00007fd58ad8efc9 [ 624.251686][T30979] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 624.251697][T30979] RBP: 00007fd58bc1b090 R08: 0000000000000000 R09: 0000000000000000 [ 624.251708][T30979] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 624.251718][T30979] R13: 00007fd58afe6038 R14: 00007fd58afe5fa0 R15: 00007ffdd2fe6be8 [ 624.251744][T30979] [ 624.360493][T31893] Bluetooth: MGMT ver 1.23 [ 624.367108][T31897] overlay: filesystem on ./file1 not supported as upperdir [ 624.419249][T30762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 624.423806][T30762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 624.429756][T30762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 624.435354][T30762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 624.504266][T30762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.522908][T30762] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.528949][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.532092][T17855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.540623][T24859] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.543541][T24859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.689594][T30762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.711720][T31928] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 624.717727][T30762] veth0_vlan: entered promiscuous mode [ 624.722668][T30762] veth1_vlan: entered promiscuous mode [ 624.742142][T30762] veth0_macvtap: entered promiscuous mode [ 624.743635][T31930] fuse: Unknown parameter 'user_i00000000000000000000' [ 624.746089][T30762] veth1_macvtap: entered promiscuous mode [ 624.756836][T30762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.766121][T30762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.777214][ T7392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.784669][ T7392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.788337][ T7392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.791434][ T7392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.834202][ T7392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.842990][ T7392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.862213][T24861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.864959][T24861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.338007][ T5938] Bluetooth: hci5: command tx timeout [ 625.688645][ T5998] usb 11-1: USB disconnect, device number 48 [ 625.732726][T24863] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 625.737930][T31968] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 1 [ 625.743703][T24863] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 625.748206][T24863] Bluetooth: hci4: Frame reassembly failed (-84) [ 626.120597][T31994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=31994 comm=syz.5.4137 [ 626.167364][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4139'. [ 626.261645][T32007] trusted_key: encrypted_key: insufficient parameters specified [ 626.460735][ T6017] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 626.642409][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 626.646428][ T6017] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 626.650449][ T6017] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.655883][ T6017] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.659663][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.667005][ T6017] usbtmc 10-1:16.0: bulk endpoints not found [ 627.551675][ T5937] Bluetooth: hci5: command tx timeout [ 627.893936][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 627.897744][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 628.023165][T32025] fuse: Unknown parameter 'user_id00000000000000000000' [ 628.057949][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 628.057967][ T40] audit: type=1400 audit(2000000260.238:12849): avc: denied { create } for pid=32026 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 628.096403][ T40] audit: type=1400 audit(2000000260.266:12850): avc: denied { read } for pid=32031 comm="syz.6.4145" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 628.104676][ T40] audit: type=1400 audit(2000000260.266:12851): avc: denied { open } for pid=32031 comm="syz.6.4145" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 628.160207][T32033] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4145'. [ 628.168964][T32033] netlink: 'syz.6.4145': attribute type 3 has an invalid length. [ 629.189922][ T40] audit: type=1400 audit(2000000261.295:12852): avc: denied { ioctl } for pid=32040 comm="syz.1.4147" path="pid:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 629.419038][ T40] audit: type=1400 audit(2000000261.510:12853): avc: denied { read write } for pid=30762 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.429147][ T40] audit: type=1400 audit(2000000261.510:12854): avc: denied { open } for pid=30762 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.432925][T13248] usb 10-1: USB disconnect, device number 49 [ 629.439633][ T40] audit: type=1400 audit(2000000261.510:12855): avc: denied { ioctl } for pid=30762 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.452552][ T40] audit: type=1400 audit(2000000261.528:12856): avc: denied { allowed } for pid=32062 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 629.460767][ T40] audit: type=1400 audit(2000000261.547:12857): avc: denied { create } for pid=32062 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 629.468992][ T40] audit: type=1400 audit(2000000261.556:12858): avc: denied { sys_admin } for pid=32062 comm="syz.1.4149" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 629.544283][T32071] orangefs_devreq_open: device cannot be opened in blocking mode [ 629.548185][T32069] netlink: 'syz.5.4150': attribute type 8 has an invalid length. [ 629.624082][T32080] fuse: Unknown parameter 'user_id00000000000000000000' [ 629.776171][ T5938] Bluetooth: hci5: command tx timeout [ 629.790738][T32091] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4154'. [ 629.801722][T32091] netlink: 'syz.4.4154': attribute type 3 has an invalid length. [ 630.610436][ T6017] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 630.626630][T32112] netlink: 'syz.4.4159': attribute type 5 has an invalid length. [ 630.630650][T32112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32112 comm=syz.4.4159 [ 630.670450][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 630.725429][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 630.759175][T32119] binder: 32118:32119 ioctl c0306201 0 returned -14 [ 630.782343][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 630.787341][ T6017] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 630.791649][ T6017] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.797743][ T6017] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 630.801470][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.809377][ T6017] usbtmc 10-1:16.0: bulk endpoints not found [ 631.185949][T32137] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4167'. [ 631.244236][T32137] netlink: 'syz.6.4167': attribute type 3 has an invalid length. [ 631.400492][T32105] netlink: 'syz.1.4157': attribute type 10 has an invalid length. [ 631.407006][T32105] hsr_slave_0: left promiscuous mode [ 631.410713][T32105] hsr_slave_1: left promiscuous mode [ 631.493422][T32144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 631.970487][T32151] No control pipe specified [ 632.000718][ T5938] Bluetooth: hci5: command tx timeout [ 632.033347][T32153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.524812][ T5994] usb 11-1: new high-speed USB device number 49 using dummy_hcd [ 632.685625][ T5994] usb 11-1: Using ep0 maxpacket: 32 [ 632.691858][ T5994] usb 11-1: config 14 has an invalid interface number: 141 but max is 0 [ 632.694727][ T5994] usb 11-1: config 14 has no interface number 0 [ 632.706632][ T5994] usb 11-1: config 14 interface 141 has no altsetting 0 [ 632.728493][ T5994] usb 11-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=e7.85 [ 632.732273][ T5994] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.735651][ T5994] usb 11-1: Product: syz [ 632.737487][ T5994] usb 11-1: Manufacturer: syz [ 632.739783][ T5994] usb 11-1: SerialNumber: syz [ 632.979077][ T5994] iuu_phoenix 11-1:14.141: required endpoints missing [ 632.984436][ T5994] usb 11-1: USB disconnect, device number 49 [ 633.019789][T32179] binder: 32178:32179 ioctl 5514 0 returned -22 [ 633.117199][T32182] SELinux: policydb magic number 0x2e7cff8c does not match expected magic number 0xf97cff8c [ 633.121218][T32182] SELinux: failed to load policy [ 633.132471][T32182] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.4176'. [ 633.251564][T32190] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4178'. [ 633.260074][T32190] netlink: 'syz.4.4178': attribute type 3 has an invalid length. [ 633.366439][T32192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.371137][T32192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.375778][T32192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.378936][T32192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.528053][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 633.528068][ T40] audit: type=1400 audit(2000000265.343:12947): avc: denied { unmount } for pid=25197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 633.559706][ T40] audit: type=1400 audit(2000000265.381:12948): avc: denied { sqpoll } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 633.582403][ T5936] usb 10-1: USB disconnect, device number 50 [ 633.596665][ T40] audit: type=1400 audit(2000000265.418:12949): avc: denied { create } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 633.605891][ T40] audit: type=1400 audit(2000000265.418:12950): avc: denied { bind } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 633.616066][ T40] audit: type=1400 audit(2000000265.437:12951): avc: denied { setopt } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 633.624311][ T40] audit: type=1400 audit(2000000265.437:12952): avc: denied { accept } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 633.633796][ T40] audit: type=1400 audit(2000000265.437:12953): avc: denied { read write } for pid=32207 comm="syz.5.4180" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 633.648040][ T40] audit: type=1400 audit(2000000265.437:12954): avc: denied { open } for pid=32207 comm="syz.5.4180" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 633.657978][ T40] audit: type=1400 audit(2000000265.437:12955): avc: denied { read } for pid=32196 comm="syz.6.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 633.925952][ T40] audit: type=1400 audit(2000000265.717:12956): avc: denied { create } for pid=32209 comm="syz.6.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 634.158955][T32244] ubi0: attaching mtd0 [ 634.161959][T32244] ubi0: scanning is finished [ 634.271488][T32244] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 634.274544][T32244] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 634.276868][T32244] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 634.279965][T32244] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 634.283036][T32244] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 634.285388][T32244] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 634.287858][T32244] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2523896984 [ 634.291553][T32244] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 634.300212][T32253] ubi0: background thread "ubi_bgt0d" started, PID 32253 [ 634.327164][T32255] binder: 32254:32255 ioctl c004743e 200000000180 returned -22 [ 634.407108][ T6017] usb 11-1: new high-speed USB device number 50 using dummy_hcd [ 634.481979][ T5998] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 634.530002][T32261] fuse: Unknown parameter '0x0000000000000003' [ 634.567594][ T6017] usb 11-1: Using ep0 maxpacket: 8 [ 634.571025][ T6017] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 634.575162][ T6017] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.579564][ T6017] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.583367][ T6017] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.587552][ T6017] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.590534][ T6017] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.595484][ T6017] usbtmc 11-1:16.0: bulk endpoints not found [ 634.669636][ T5998] usb 10-1: Using ep0 maxpacket: 16 [ 634.687821][ T5998] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 634.691091][ T5998] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 634.694073][ T5998] usb 10-1: Product: syz [ 634.695490][ T5998] usb 10-1: Manufacturer: syz [ 634.697282][ T5998] usb 10-1: SerialNumber: syz [ 634.702509][ T5998] usb 10-1: config 0 descriptor?? [ 634.850702][T32298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 634.868744][T32298] bridge0: entered promiscuous mode [ 634.870525][T32298] macsec1: entered allmulticast mode [ 634.872182][T32298] bridge0: entered allmulticast mode [ 634.874769][T32298] bridge0: port 3(macsec1) entered blocking state [ 634.876941][T32298] bridge0: port 3(macsec1) entered disabled state [ 634.881377][T32298] bridge0: left allmulticast mode [ 634.883026][T32298] bridge0: left promiscuous mode [ 634.925635][ T5994] usb 10-1: USB disconnect, device number 51 [ 634.999716][T32333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4201'. [ 635.032216][T32333] binder: 32322:32333 unknown command 0 [ 635.034573][T32333] binder: 32322:32333 ioctl c0306201 200000000300 returned -22 [ 635.706190][T32372] vlan0: entered promiscuous mode [ 635.708619][T32372] vlan0: entered allmulticast mode [ 635.710877][T32372] hsr_slave_1: entered allmulticast mode [ 635.950639][T32385] pipefs: Unknown parameter 'ùÂIÀl#¼}<äþ÷ñ±®ï|z¡š$)eÓµ)TÒé鯘L9ô~×óל±Ôc°ïjƒ‡<%‰Z~C-»' [ 636.632154][ T10] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 636.824629][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 636.835165][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 636.900878][T32407] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4217'. [ 636.907493][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.913084][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.914713][T32407] netlink: 'syz.4.4217': attribute type 3 has an invalid length. [ 636.946740][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.946853][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.946948][ T10] usb 10-1: Product: syz [ 636.947112][ T10] usb 10-1: Manufacturer: syz [ 636.947212][ T10] usb 10-1: SerialNumber: syz [ 636.950093][T32409] FAULT_INJECTION: forcing a failure. [ 636.950093][T32409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.950122][T32409] CPU: 2 UID: 0 PID: 32409 Comm: syz.1.4218 Not tainted syzkaller #0 PREEMPT(full) [ 636.950143][T32409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 636.950155][T32409] Call Trace: [ 636.950161][T32409] [ 636.950168][T32409] dump_stack_lvl+0x16c/0x1f0 [ 636.950219][T32409] should_fail_ex+0x512/0x640 [ 636.950253][T32409] _copy_from_user+0x2e/0xd0 [ 636.950279][T32409] core_sys_select+0x2c8/0xc20 [ 636.950325][T32409] ? __pfx_core_sys_select+0x10/0x10 [ 636.950376][T32409] ? set_user_sigmask+0x21b/0x2b0 [ 636.950403][T32409] ? __pfx_set_user_sigmask+0x10/0x10 [ 636.950435][T32409] do_pselect.constprop.0+0x19f/0x1e0 [ 636.950461][T32409] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 636.950495][T32409] __x64_sys_pselect6+0x182/0x240 [ 636.950519][T32409] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 636.950550][T32409] do_syscall_64+0xcd/0xfa0 [ 636.950575][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.950593][T32409] RIP: 0033:0x7f0d7dd8efc9 [ 636.950607][T32409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.950623][T32409] RSP: 002b:00007f0d7ed07038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 636.950640][T32409] RAX: ffffffffffffffda RBX: 00007f0d7dfe5fa0 RCX: 00007f0d7dd8efc9 [ 636.950658][T32409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 636.950669][T32409] RBP: 00007f0d7ed07090 R08: 0000000000000000 R09: 0000000000000000 [ 636.950679][T32409] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 636.950690][T32409] R13: 00007f0d7dfe6038 R14: 00007f0d7dfe5fa0 R15: 00007ffcaaaed958 [ 636.950716][T32409] [ 637.098080][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.148941][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.152185][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.155497][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.158908][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.162213][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.165479][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.168814][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.172213][T32415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 637.384004][ T10] usb 10-1: 0:2 : does not exist [ 637.386847][T13248] usb 11-1: USB disconnect, device number 50 [ 637.387267][ T10] usb 10-1: unit 0 not found! [ 637.462276][ T10] usb 10-1: USB disconnect, device number 52 [ 637.931866][T32470] fuse: Unknown parameter 'fd0x0000000000000003' [ 638.062700][T32484] binder: 32480:32484 ioctl c0306201 0 returned -14 [ 638.139872][ T6017] usb 11-1: new high-speed USB device number 51 using dummy_hcd [ 638.302441][ T6017] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.307073][ T6017] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.311325][ T6017] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.316770][ T6017] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.320650][ T6017] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.326028][ T6017] usb 11-1: config 0 descriptor?? [ 638.767723][ T6017] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 638.939961][T32510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4234'. [ 638.943971][T32510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4234'. [ 638.948635][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 638.948649][ T40] audit: type=1400 audit(2000000270.420:13075): avc: denied { create } for pid=32509 comm="syz.1.4234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.084076][ T40] audit: type=1400 audit(2000000270.551:13076): avc: denied { create } for pid=32511 comm="syz.1.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 639.091693][ T40] audit: type=1400 audit(2000000270.551:13077): avc: denied { bind } for pid=32511 comm="syz.1.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 639.099128][ T40] audit: type=1400 audit(2000000270.551:13078): avc: denied { setopt } for pid=32511 comm="syz.1.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.146964][T32517] fuse: Unknown parameter 'fd0x0000000000000003' [ 639.147327][ T40] audit: type=1400 audit(2000000270.607:13079): avc: denied { mounton } for pid=32516 comm="syz.4.4236" path="/385/file0" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 639.169449][ T40] audit: type=1400 audit(2000000270.626:13080): avc: denied { ioctl } for pid=32518 comm="syz.1.4237" path="socket:[109337]" dev="sockfs" ino=109337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 639.170413][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'. [ 639.201820][ T40] audit: type=1400 audit(2000000270.654:13081): avc: denied { read write } for pid=32524 comm="syz.5.4239" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 639.208917][ T40] audit: type=1400 audit(2000000270.654:13082): avc: denied { open } for pid=32524 comm="syz.5.4239" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 639.216964][ T40] audit: type=1400 audit(2000000270.654:13083): avc: denied { ioctl } for pid=32524 comm="syz.5.4239" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 639.224384][ T40] audit: type=1400 audit(2000000270.654:13084): avc: denied { create } for pid=32524 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 639.293348][T32539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4244'. [ 639.297796][T32544] tipc: Enabling of bearer rejected, media not registered [ 639.495186][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.500585][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.504200][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.508100][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.509562][T32560] fuse: Unknown parameter 'fd0x0000000000000003' [ 639.514724][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.519253][T32558] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4246'. [ 639.643208][T32566] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 639.647415][T32567] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 640.383786][T32600] netlink: 'syz.4.4256': attribute type 10 has an invalid length. [ 640.389560][T32600] net_ratelimit: 45 callbacks suppressed [ 640.389576][T32600] openvswitch: netlink: Message has 512 unknown bytes. [ 640.407640][T24863] veth0_to_bridge: left allmulticast mode [ 640.410183][T24863] veth0_to_bridge: left promiscuous mode [ 640.412710][T24863] bridge0: port 3(veth0_to_bridge) entered disabled state [ 640.419418][T24863] bridge_slave_1: left allmulticast mode [ 640.421204][T24863] bridge_slave_1: left promiscuous mode [ 640.423046][T24863] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.426559][T24863] bridge_slave_0: left allmulticast mode [ 640.428708][T24863] bridge_slave_0: left promiscuous mode [ 640.431211][T24863] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.771755][T32615] netlink: 'syz.5.4260': attribute type 3 has an invalid length. [ 640.845039][T24863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.850116][T24863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.858354][T24863] bond0 (unregistering): Released all slaves [ 640.939552][T24863] : left promiscuous mode [ 641.005105][T24863] tipc: Disabling bearer [ 641.007963][T24863] tipc: Left network mode [ 641.023851][T32619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.076443][T13248] usb 11-1: USB disconnect, device number 51 [ 641.241610][T24863] veth1_macvtap: left promiscuous mode [ 641.243416][T24863] veth0_macvtap: left promiscuous mode [ 641.245172][T24863] veth1_vlan: left promiscuous mode [ 641.246810][T24863] veth0_vlan: left promiscuous mode [ 641.986805][T24863] team0 (unregistering): Port device team_slave_1 removed [ 642.092265][T24863] team0 (unregistering): Port device team_slave_0 removed [ 642.198163][T32661] binder: 32659:32661 ioctl c0306201 0 returned -14 [ 642.796330][T32646] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 642.797263][T32648] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 642.834568][T32669] xt_hashlimit: size too large, truncated to 1048576 [ 643.098092][T32694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.455379][ T5998] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 643.594439][ T5998] usb 10-1: device descriptor read/64, error -71 [ 643.823142][T32719] netlink: 'syz.6.4281': attribute type 3 has an invalid length. [ 643.852178][ T5998] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 644.001097][ T5998] usb 10-1: device descriptor read/64, error -71 [ 644.124244][ T5998] usb usb10-port1: attempt power cycle [ 644.267603][T32758] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 644.503955][ T5998] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 644.526679][ T5998] usb 10-1: device descriptor read/8, error -71 [ 644.577778][ T307] fuse: Bad value for 'fd' [ 644.615330][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 644.615345][ T40] audit: type=1400 audit(2000000275.722:13205): avc: denied { create } for pid=309 comm="syz.4.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.623510][ T311] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 644.625103][ T40] audit: type=1400 audit(2000000275.731:13206): avc: denied { bind } for pid=309 comm="syz.4.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.625211][ T310] __nla_validate_parse: 65 callbacks suppressed [ 644.625224][ T310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4287'. [ 644.626588][ T310] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 644.645209][ T40] audit: type=1400 audit(2000000275.731:13207): avc: denied { setopt } for pid=309 comm="syz.4.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.651371][ T40] audit: type=1400 audit(2000000275.731:13208): avc: denied { accept } for pid=309 comm="syz.4.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.657376][ T40] audit: type=1400 audit(2000000275.731:13209): avc: denied { write } for pid=309 comm="syz.4.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.782012][ T5998] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 644.815987][ T5998] usb 10-1: device descriptor read/8, error -71 [ 644.829546][ T40] audit: type=1400 audit(2000000275.918:13210): avc: denied { setopt } for pid=319 comm="syz.1.4289" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.839268][ T40] audit: type=1400 audit(2000000275.918:13211): avc: denied { bind } for pid=319 comm="syz.1.4289" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.850739][ T40] audit: type=1400 audit(2000000275.918:13212): avc: denied { node_bind } for pid=319 comm="syz.1.4289" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 644.906541][ T40] audit: type=1400 audit(2000000275.984:13213): avc: denied { write } for pid=319 comm="syz.1.4289" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.943009][ T5998] usb usb10-port1: unable to enumerate USB device [ 645.073889][ T40] audit: type=1400 audit(2000000276.152:13214): avc: denied { read } for pid=322 comm="syz.6.4290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 646.171349][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4299'. [ 646.492423][ T439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4305'. [ 646.540084][ T7392] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.652044][ T451] IPv6: NLM_F_CREATE should be specified when creating new route [ 646.670860][ T7392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.674195][ T7392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.681437][ T445] vivid-003: disconnect [ 646.683761][ T444] vivid-003: reconnect [ 647.054595][ T477] sctp: [Deprecated]: syz.1.4313 (pid 477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.054595][ T477] Use struct sctp_sack_info instead [ 647.391386][ T5998] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 647.552015][ T5998] usb 10-1: Using ep0 maxpacket: 32 [ 647.556323][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.560628][ T5998] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.565443][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.569813][ T5998] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.574864][ T5998] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 647.580236][ T5998] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 647.584524][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.589829][ T5998] usb 10-1: config 0 descriptor?? [ 647.810510][ T5998] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 647.881466][ T501] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 272 [ 647.902278][ T503] overlay: filesystem on ./bus not supported as upperdir [ 647.962186][ T509] vfat: Unknown parameter 'nÓ©×' [ 648.003313][ T513] sctp: [Deprecated]: syz.6.4323 (pid 513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.003313][ T513] Use struct sctp_sack_info instead [ 648.045015][ T517] lo speed is unknown, defaulting to 1000 [ 648.047997][ T517] lo speed is unknown, defaulting to 1000 [ 648.051950][ T517] lo speed is unknown, defaulting to 1000 [ 648.062803][ T517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 648.081937][ T517] lo speed is unknown, defaulting to 1000 [ 648.085686][ T517] lo speed is unknown, defaulting to 1000 [ 648.089352][ T517] lo speed is unknown, defaulting to 1000 [ 648.091948][ T517] lo speed is unknown, defaulting to 1000 [ 648.094727][ T517] lo speed is unknown, defaulting to 1000 [ 648.097450][ T517] lo speed is unknown, defaulting to 1000 [ 648.100060][ T517] lo speed is unknown, defaulting to 1000 [ 648.204534][ T525] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4326'. [ 648.225768][ T525] bond1: option primary_reselect: invalid value (133) [ 648.230742][ T525] bond1 (unregistering): Released all slaves [ 649.074300][ T602] xt_connbytes: Forcing CT accounting to be enabled [ 649.199194][ T613] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 649.199194][ T613] program syz.1.4332 not setting count and/or reply_len properly [ 649.273665][ T619] fuse: root generation should be zero [ 649.327459][ T622] vlan1: entered promiscuous mode [ 649.329364][ T622] vlan1: entered allmulticast mode [ 649.331557][ T622] veth0_vlan: entered allmulticast mode [ 649.335918][ T622] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.346805][ T622] nfs4: Unknown parameter '' [ 649.349819][ T622] Bluetooth: hci4: Frame reassembly failed (-84) [ 649.352807][T24863] Bluetooth: hci4: Frame reassembly failed (-84) [ 649.445135][ T6105] usb 11-1: new high-speed USB device number 52 using dummy_hcd [ 649.604959][ T6105] usb 11-1: Using ep0 maxpacket: 8 [ 649.608431][ T6105] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 649.611918][ T6105] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 649.615082][ T6105] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.618352][ T6105] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.622409][ T6105] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.625226][ T6105] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.846439][ T6105] usb 11-1: GET_CAPABILITIES returned 0 [ 649.848245][ T6105] usbtmc 11-1:16.0: can't read capabilities [ 650.070942][ T614] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4333'. [ 650.077976][ T6105] usb 11-1: USB disconnect, device number 52 [ 650.365222][ T6105] usb 10-1: USB disconnect, device number 57 [ 650.371046][ T6105] usblp0: removed [ 650.404735][ T651] netlink: 'syz.5.4335': attribute type 12 has an invalid length. [ 650.408820][ T651] netlink: 'syz.5.4335': attribute type 29 has an invalid length. [ 650.412111][ T651] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4335'. [ 650.422143][ T653] No control pipe specified [ 650.462399][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 650.462417][ T40] audit: type=1400 audit(2000000281.191:13290): avc: denied { create } for pid=655 comm="syz.5.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 650.473569][ T40] audit: type=1400 audit(2000000281.191:13291): avc: denied { bind } for pid=655 comm="syz.5.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 650.482334][ T40] audit: type=1400 audit(2000000281.210:13292): avc: denied { create } for pid=657 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.490594][ T40] audit: type=1400 audit(2000000281.210:13293): avc: denied { bind } for pid=657 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.498672][ T40] audit: type=1400 audit(2000000281.210:13294): avc: denied { setopt } for pid=657 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.506749][ T40] audit: type=1400 audit(2000000281.210:13295): avc: denied { name_connect } for pid=657 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 650.515309][ T40] audit: type=1400 audit(2000000281.210:13296): avc: denied { listen } for pid=657 comm="syz.4.4338" lport=51368 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 650.524764][ T40] audit: type=1400 audit(2000000281.210:13297): avc: denied { accept } for pid=657 comm="syz.4.4338" lport=51368 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 650.534129][ T40] audit: type=1400 audit(2000000281.210:13298): avc: denied { getopt } for pid=657 comm="syz.4.4338" lport=51368 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 650.544048][ T40] audit: type=1400 audit(2000000281.220:13299): avc: denied { write } for pid=657 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 651.048824][ T6105] usb 11-1: new high-speed USB device number 53 using dummy_hcd [ 651.211670][ T6105] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.215605][ T6105] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.218715][ T6105] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.222831][ T6105] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.226138][ T6105] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.229798][ T6105] usb 11-1: config 0 descriptor?? [ 651.433161][ T687] cgroup: No subsys list or none specified [ 651.475518][ T689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=689 comm=syz.5.4346 [ 651.508718][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 651.508797][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 651.527466][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4347'. [ 651.578134][ T697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 651.665590][ T6105] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 651.672791][ T6105] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 651.702626][ T715] overlayfs: missing 'lowerdir' [ 651.796492][ T726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=726 comm=syz.1.4356 [ 651.816789][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 651.821027][ T724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=724 comm=syz.5.4355 [ 651.825982][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 651.845498][ T728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.880460][ T29] usb 11-1: USB disconnect, device number 53 [ 651.964394][ T743] nfs4: Unknown parameter '[' [ 652.351377][ T756] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 652.982975][ T791] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 653.042790][ T794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 653.350486][T25197] syz_tun (unregistering): left promiscuous mode [ 653.585096][T17855] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.729554][T17855] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.947829][T17855] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.048108][T17855] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.191434][T17855] bridge_slave_1: left allmulticast mode [ 654.194358][T17855] bridge_slave_1: left promiscuous mode [ 654.196946][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.202516][T17855] bridge_slave_0: left allmulticast mode [ 654.206133][T17855] bridge_slave_0: left promiscuous mode [ 654.208724][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.235763][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.241936][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.245139][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.248801][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.252239][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.393780][T17855] gretap0 (unregistering): left promiscuous mode [ 654.434016][T26375] hid (null): invalid report_count -1080442991 [ 654.438534][T26375] hid_parser_main: 5 callbacks suppressed [ 654.438552][T26375] hid-generic 01FF:0006:0002.0014: unknown main item tag 0x0 [ 654.444200][T26375] hid-generic 01FF:0006:0002.0014: invalid report_count -1080442991 [ 654.446743][T26375] hid-generic 01FF:0006:0002.0014: item 0 4 1 9 parsing failed [ 654.449682][T26375] hid-generic 01FF:0006:0002.0014: probe with driver hid-generic failed with error -22 [ 654.616908][T17855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.624022][T17855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.629518][T17855] bond0 (unregistering): Released all slaves [ 654.678803][ T838] lo speed is unknown, defaulting to 1000 [ 654.831167][ T838] chnl_net:caif_netlink_parms(): no params data found [ 654.918671][ T1070] FAULT_INJECTION: forcing a failure. [ 654.918671][ T1070] name failslab, interval 1, probability 0, space 0, times 0 [ 654.924625][ T1070] CPU: 0 UID: 0 PID: 1070 Comm: syz.1.4385 Not tainted syzkaller #0 PREEMPT(full) [ 654.924647][ T1070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.924658][ T1070] Call Trace: [ 654.924666][ T1070] [ 654.924673][ T1070] dump_stack_lvl+0x16c/0x1f0 [ 654.924701][ T1070] should_fail_ex+0x512/0x640 [ 654.924723][ T1070] ? fs_reclaim_acquire+0xae/0x150 [ 654.924751][ T1070] should_failslab+0xc2/0x120 [ 654.924778][ T1070] __kmalloc_noprof+0xdd/0x880 [ 654.924802][ T1070] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 654.924834][ T1070] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 654.924858][ T1070] tomoyo_realpath_from_path+0xc2/0x6e0 [ 654.924885][ T1070] ? tomoyo_profile+0x47/0x60 [ 654.924905][ T1070] tomoyo_path_number_perm+0x245/0x580 [ 654.924926][ T1070] ? tomoyo_path_number_perm+0x237/0x580 [ 654.924950][ T1070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.924974][ T1070] ? find_held_lock+0x2b/0x80 [ 654.925012][ T1070] ? find_held_lock+0x2b/0x80 [ 654.925028][ T1070] ? hook_file_ioctl_common+0x145/0x410 [ 654.925056][ T1070] ? __fget_files+0x20e/0x3c0 [ 654.925083][ T1070] security_file_ioctl+0x9b/0x240 [ 654.925109][ T1070] __x64_sys_ioctl+0xb7/0x210 [ 654.925132][ T1070] do_syscall_64+0xcd/0xfa0 [ 654.925157][ T1070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.925175][ T1070] RIP: 0033:0x7f0d7dd8efc9 [ 654.925189][ T1070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.925206][ T1070] RSP: 002b:00007f0d7ece6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.925224][ T1070] RAX: ffffffffffffffda RBX: 00007f0d7dfe6090 RCX: 00007f0d7dd8efc9 [ 654.925236][ T1070] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000005 [ 654.925248][ T1070] RBP: 00007f0d7ece6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.925259][ T1070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.925270][ T1070] R13: 00007f0d7dfe6128 R14: 00007f0d7dfe6090 R15: 00007ffcaaaed958 [ 654.925297][ T1070] [ 654.925305][ T1070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.101599][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.105520][ T838] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.108290][ T838] bridge_slave_0: entered allmulticast mode [ 655.111573][ T838] bridge_slave_0: entered promiscuous mode [ 655.117520][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.120553][ T838] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.123831][ T838] bridge_slave_1: entered allmulticast mode [ 655.127682][ T838] bridge_slave_1: entered promiscuous mode [ 655.200679][T17855] hsr_slave_0: left promiscuous mode [ 655.203899][T17855] hsr_slave_1: left promiscuous mode [ 655.207403][T17855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.211645][T17855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.214581][T17855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.256497][T17855] veth1_macvtap: left promiscuous mode [ 655.258796][T17855] veth0_macvtap: left promiscuous mode [ 655.261293][T17855] veth1_vlan: left promiscuous mode [ 655.263835][T17855] veth0_vlan: left promiscuous mode [ 656.202680][T17855] team0 (unregistering): Port device team_slave_1 removed [ 656.318396][T17855] team0 (unregistering): Port device team_slave_0 removed [ 656.484835][ T5938] Bluetooth: hci1: command tx timeout [ 656.757226][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 656.757243][ T40] audit: type=1400 audit(2000000287.063:13388): avc: denied { read } for pid=1362 comm="syz.4.4391" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 656.763776][ T1363] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 656.768900][ T40] audit: type=1400 audit(2000000287.063:13389): avc: denied { open } for pid=1362 comm="syz.4.4391" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 656.784680][ T40] audit: type=1400 audit(2000000287.082:13390): avc: denied { write } for pid=1362 comm="syz.4.4391" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 656.794281][ T40] audit: type=1400 audit(2000000287.082:13391): avc: denied { open } for pid=1362 comm="syz.4.4391" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 656.803792][ T40] audit: type=1400 audit(2000000287.082:13392): avc: denied { ioctl } for pid=1362 comm="syz.4.4391" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 656.813979][ T40] audit: type=1400 audit(2000000287.082:13393): avc: denied { read } for pid=1362 comm="syz.4.4391" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 656.823279][ T40] audit: type=1400 audit(2000000287.082:13394): avc: denied { open } for pid=1362 comm="syz.4.4391" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 657.105315][ T838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.108668][ T9] lo speed is unknown, defaulting to 1000 [ 657.110885][ T9] syz2: Port: 1 Link DOWN [ 657.111447][ T838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.191130][ T838] team0: Port device team_slave_0 added [ 657.193409][ T40] audit: type=1400 audit(2000000287.475:13395): avc: denied { map_read map_write } for pid=1479 comm="syz.1.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.196403][ T838] team0: Port device team_slave_1 added [ 657.265321][ T838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.268260][ T838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.281776][ T838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.289616][ T838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.292181][ T838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.301315][ T838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.371953][ T838] hsr_slave_0: entered promiscuous mode [ 657.375133][ T838] hsr_slave_1: entered promiscuous mode [ 657.378069][ T838] debugfs: 'hsr0' already exists in 'hsr' [ 657.381629][ T838] Cannot create hsr debugfs directory [ 657.568857][T17855] IPVS: stop unused estimator thread 0... [ 657.590548][ T838] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 657.596129][ T838] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 657.603512][ T838] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 657.608294][ T838] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 657.655152][ T838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.673754][ T838] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.684582][T24875] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.686936][T24875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.695994][T24875] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.698976][T24875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.731565][ T40] audit: type=1400 audit(2000000287.980:13396): avc: denied { module_request } for pid=838 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 657.739906][ T1962] FAULT_INJECTION: forcing a failure. [ 657.739906][ T1962] name failslab, interval 1, probability 0, space 0, times 0 [ 657.745917][ T1962] CPU: 1 UID: 0 PID: 1962 Comm: syz.4.4394 Not tainted syzkaller #0 PREEMPT(full) [ 657.745940][ T1962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 657.745950][ T1962] Call Trace: [ 657.745956][ T1962] [ 657.745964][ T1962] dump_stack_lvl+0x16c/0x1f0 [ 657.745990][ T1962] should_fail_ex+0x512/0x640 [ 657.746012][ T1962] ? fs_reclaim_acquire+0xae/0x150 [ 657.746039][ T1962] should_failslab+0xc2/0x120 [ 657.746064][ T1962] __kmalloc_noprof+0xdd/0x880 [ 657.746083][ T1962] ? tomoyo_encode2+0x100/0x3e0 [ 657.746111][ T1962] ? tomoyo_encode2+0x100/0x3e0 [ 657.746134][ T1962] tomoyo_encode2+0x100/0x3e0 [ 657.746160][ T1962] tomoyo_encode+0x29/0x50 [ 657.746181][ T1962] tomoyo_realpath_from_path+0x18f/0x6e0 [ 657.746212][ T1962] tomoyo_path_number_perm+0x245/0x580 [ 657.746232][ T1962] ? tomoyo_path_number_perm+0x237/0x580 [ 657.746256][ T1962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.746278][ T1962] ? find_held_lock+0x2b/0x80 [ 657.746317][ T1962] ? find_held_lock+0x2b/0x80 [ 657.746332][ T1962] ? hook_file_ioctl_common+0x145/0x410 [ 657.746354][ T1962] ? __fget_files+0x20e/0x3c0 [ 657.746381][ T1962] security_file_ioctl+0x9b/0x240 [ 657.746408][ T1962] __x64_sys_ioctl+0xb7/0x210 [ 657.746428][ T1962] do_syscall_64+0xcd/0xfa0 [ 657.746451][ T1962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.746467][ T1962] RIP: 0033:0x7fd58ad8efc9 [ 657.746481][ T1962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.746496][ T1962] RSP: 002b:00007fd58bc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.746511][ T1962] RAX: ffffffffffffffda RBX: 00007fd58afe5fa0 RCX: 00007fd58ad8efc9 [ 657.746522][ T1962] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000005 [ 657.746532][ T1962] RBP: 00007fd58bc1b090 R08: 0000000000000000 R09: 0000000000000000 [ 657.746541][ T1962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.746550][ T1962] R13: 00007fd58afe6038 R14: 00007fd58afe5fa0 R15: 00007ffdd2fe6be8 [ 657.746576][ T1962] [ 657.746591][ T1962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 657.812538][ T838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.850648][ T40] audit: type=1400 audit(2000000288.092:13397): avc: denied { read } for pid=1970 comm="syz.4.4395" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 657.919089][ T1974] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4395'. [ 657.926881][ T1974] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4395'. [ 657.943801][ T1974] netlink: 'syz.4.4395': attribute type 3 has an invalid length. [ 658.016544][ T838] veth0_vlan: entered promiscuous mode [ 658.025719][ T838] veth1_vlan: entered promiscuous mode [ 658.043161][ T838] veth0_macvtap: entered promiscuous mode [ 658.049430][ T838] veth1_macvtap: entered promiscuous mode [ 658.063440][ T838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.080011][ T838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.088306][T24863] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.091828][T24863] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.096567][T24863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.100651][T24863] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.158810][T17855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.167999][T17855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.189277][T17855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.193012][T17855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.695932][ T5938] Bluetooth: hci1: command tx timeout [ 658.718577][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.727533][ T2009] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.755339][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.777988][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.810495][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.842939][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.871332][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.916561][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 658.946460][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 659.237463][ T2031] FAULT_INJECTION: forcing a failure. [ 659.237463][ T2031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.242381][ T2031] CPU: 3 UID: 0 PID: 2031 Comm: syz.4.4402 Not tainted syzkaller #0 PREEMPT(full) [ 659.242403][ T2031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 659.242414][ T2031] Call Trace: [ 659.242420][ T2031] [ 659.242427][ T2031] dump_stack_lvl+0x16c/0x1f0 [ 659.242453][ T2031] should_fail_ex+0x512/0x640 [ 659.242478][ T2031] _copy_to_user+0x32/0xd0 [ 659.242507][ T2031] simple_read_from_buffer+0xcb/0x170 [ 659.242530][ T2031] proc_fail_nth_read+0x197/0x240 [ 659.242555][ T2031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.242580][ T2031] ? rw_verify_area+0xcf/0x6c0 [ 659.242598][ T2031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.242622][ T2031] vfs_read+0x1e4/0xcf0 [ 659.242645][ T2031] ? __pfx___mutex_lock+0x10/0x10 [ 659.242667][ T2031] ? __pfx_vfs_read+0x10/0x10 [ 659.242693][ T2031] ? __fget_files+0x20e/0x3c0 [ 659.242722][ T2031] ksys_read+0x12a/0x250 [ 659.242741][ T2031] ? __pfx_ksys_read+0x10/0x10 [ 659.242760][ T2031] ? fput+0x9b/0xd0 [ 659.242779][ T2031] do_syscall_64+0xcd/0xfa0 [ 659.242801][ T2031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.242818][ T2031] RIP: 0033:0x7fd58ad8d9dc [ 659.242831][ T2031] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 659.242846][ T2031] RSP: 002b:00007fd58bc1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.242863][ T2031] RAX: ffffffffffffffda RBX: 00007fd58afe5fa0 RCX: 00007fd58ad8d9dc [ 659.242874][ T2031] RDX: 000000000000000f RSI: 00007fd58bc1b0a0 RDI: 0000000000000006 [ 659.242884][ T2031] RBP: 00007fd58bc1b090 R08: 0000000000000000 R09: 0000000000000000 [ 659.242893][ T2031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.242903][ T2031] R13: 00007fd58afe6038 R14: 00007fd58afe5fa0 R15: 00007ffdd2fe6be8 [ 659.242928][ T2031] [ 659.360636][ T2042] uprobe: syz.4.4403:2042 failed to unregister, leaking uprobe [ 659.593516][ T2058] openvswitch: netlink: Message has 19 unknown bytes. [ 659.765628][ T2068] netlink: 'syz.1.4410': attribute type 3 has an invalid length. [ 659.911118][ T2071] binder: 2070:2071 ioctl c0306201 0 returned -14 [ 660.636072][ T2109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.786886][ T2125] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 660.789710][ T2125] PKCS7: Only support pkcs7_signedData type [ 660.920633][ T5938] Bluetooth: hci1: command tx timeout [ 661.138184][ T2146] XFS (nullb0): Invalid superblock magic number [ 661.408715][ T2169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 662.304828][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.355932][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 662.355943][ T40] audit: type=1400 audit(2000000292.309:13521): avc: denied { read write } for pid=2212 comm="syz.1.4447" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 662.357881][ T2213] PM: Enabling pm_trace changes system date and time during resume. [ 662.357881][ T2213] PM: Correct system time has to be restored manually after resume. [ 662.358106][ T40] audit: type=1400 audit(2000000292.309:13522): avc: denied { open } for pid=2212 comm="syz.1.4447" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 662.386438][ T40] audit: type=1400 audit(2000000292.337:13523): avc: denied { ioctl } for pid=2212 comm="syz.1.4447" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 662.399404][ T40] audit: type=1400 audit(2000000292.346:13524): avc: denied { unlink } for pid=2212 comm="syz.1.4447" name="#79" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 662.400021][ T2213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 662.407648][ T40] audit: type=1400 audit(2000000292.346:13525): avc: denied { getattr } for pid=2212 comm="syz.1.4447" name="/" dev="9p" ino=71827833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.420019][ T40] audit: type=1400 audit(2000000292.355:13526): avc: denied { mount } for pid=2212 comm="syz.1.4447" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 662.433583][ T40] audit: type=1400 audit(2000000292.374:13527): avc: denied { unmount } for pid=30762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 662.442621][ T40] audit: type=1400 audit(2000000292.383:13528): avc: denied { unmount } for pid=30762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.620174][ T40] audit: type=1400 audit(2000000292.552:13529): avc: denied { read } for pid=2218 comm="syz.1.4449" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 662.622885][ T2219] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.627901][ T40] audit: type=1400 audit(2000000292.552:13530): avc: denied { open } for pid=2218 comm="syz.1.4449" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 662.631292][ T2219] Buffer I/O error on dev nbd1, logical block 0, async page read [ 662.642046][ T2219] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.646625][ T2219] Buffer I/O error on dev nbd1, logical block 1, async page read [ 662.649923][ T2219] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.653249][ T2219] Buffer I/O error on dev nbd1, logical block 2, async page read [ 662.656615][ T2219] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.660334][ T2219] Buffer I/O error on dev nbd1, logical block 3, async page read [ 662.663716][ T2219] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.667378][ T2219] Buffer I/O error on dev nbd1, logical block 0, async page read [ 662.670648][ T2219] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.674305][ T2219] Buffer I/O error on dev nbd1, logical block 1, async page read [ 662.677814][ T2219] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.681519][ T2219] Buffer I/O error on dev nbd1, logical block 2, async page read [ 662.684810][ T2219] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.688551][ T2219] Buffer I/O error on dev nbd1, logical block 3, async page read [ 662.691825][ T2219] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.695066][ T2219] Buffer I/O error on dev nbd1, logical block 0, async page read [ 662.699178][ T2219] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.702341][ T2219] Buffer I/O error on dev nbd1, logical block 1, async page read [ 662.707320][ T2219] ldm_validate_partition_table(): Disk read failed. [ 662.711207][ T2219] Dev nbd1: unable to read RDB block 0 [ 662.714951][ T2219] nbd1: unable to read partition table [ 663.031687][ T2247] 9pnet_fd: p9_fd_create_unix (2247): problem connecting socket: ./file1/file0: -111 [ 663.145245][ T5938] Bluetooth: hci1: command tx timeout [ 663.217346][ T2257] fuse: Unknown parameter '' [ 663.327637][ T1987] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 663.444616][ T857] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 663.500248][ T1987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.504883][ T1987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.508923][ T1987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.514141][ T1987] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.517857][ T1987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.523559][ T1987] usb 6-1: config 0 descriptor?? [ 663.606831][ T857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.610338][ T857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.613856][ T857] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.618438][ T857] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.622290][ T857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.627767][ T857] usb 10-1: config 0 descriptor?? [ 663.960892][ T1987] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 663.969345][ T1987] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 664.068808][ T857] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 664.078967][ T857] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 664.174472][ T2251] FAULT_INJECTION: forcing a failure. [ 664.174472][ T2251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.179968][ T2251] CPU: 1 UID: 0 PID: 2251 Comm: syz.1.4460 Not tainted syzkaller #0 PREEMPT(full) [ 664.179992][ T2251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 664.180003][ T2251] Call Trace: [ 664.180010][ T2251] [ 664.180018][ T2251] dump_stack_lvl+0x16c/0x1f0 [ 664.180048][ T2251] should_fail_ex+0x512/0x640 [ 664.180076][ T2251] _copy_to_user+0x32/0xd0 [ 664.180103][ T2251] simple_read_from_buffer+0xcb/0x170 [ 664.180128][ T2251] proc_fail_nth_read+0x197/0x240 [ 664.180155][ T2251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.180183][ T2251] ? rw_verify_area+0xcf/0x6c0 [ 664.180205][ T2251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.180233][ T2251] vfs_read+0x1e4/0xcf0 [ 664.180259][ T2251] ? __pfx___mutex_lock+0x10/0x10 [ 664.180283][ T2251] ? __pfx_vfs_read+0x10/0x10 [ 664.180313][ T2251] ? __fget_files+0x20e/0x3c0 [ 664.180345][ T2251] ksys_read+0x12a/0x250 [ 664.180368][ T2251] ? __pfx_ksys_read+0x10/0x10 [ 664.180392][ T2251] ? fdget+0x187/0x210 [ 664.180421][ T2251] do_syscall_64+0xcd/0xfa0 [ 664.180446][ T2251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.180464][ T2251] RIP: 0033:0x7f0d7dd8d9dc [ 664.180478][ T2251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 664.180493][ T2251] RSP: 002b:00007f0d7ed07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.180513][ T2251] RAX: ffffffffffffffda RBX: 00007f0d7dfe5fa0 RCX: 00007f0d7dd8d9dc [ 664.180525][ T2251] RDX: 000000000000000f RSI: 00007f0d7ed070a0 RDI: 0000000000000004 [ 664.180537][ T2251] RBP: 00007f0d7ed07090 R08: 0000000000000000 R09: 0000000000000000 [ 664.180548][ T2251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.180558][ T2251] R13: 00007f0d7dfe6038 R14: 00007f0d7dfe5fa0 R15: 00007ffcaaaed958 [ 664.180586][ T2251] [ 664.195868][ T1987] usb 6-1: USB disconnect, device number 42 [ 664.283377][ T5998] usb 10-1: USB disconnect, device number 58 [ 664.455484][ T2331] __nla_validate_parse: 34 callbacks suppressed [ 664.455500][ T2331] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4470'. [ 664.500804][ T2333] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 664.659732][ T2341] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4474'. [ 664.668303][ T2341] netlink: 'syz.7.4474': attribute type 3 has an invalid length. [ 664.716268][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4476'. [ 664.721399][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 665.782497][ T1987] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 665.876671][ T2407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 665.882066][ T2407] macsec0: entered promiscuous mode [ 665.884295][ T2407] macsec0: entered allmulticast mode [ 665.886110][ T2407] veth1_macvtap: entered allmulticast mode [ 665.950441][ T1987] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.954909][ T1987] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.958999][ T1987] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.963088][ T1987] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.966596][ T1987] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.970777][ T1987] usb 12-1: config 0 descriptor?? [ 666.090457][ T2414] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4492'. [ 666.160361][ T2415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4492'. [ 666.199633][ T2414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.206266][ T2414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.212007][ T2414] bond0 (unregistering): Released all slaves [ 666.474485][ T2452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4493'. [ 666.518106][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'. [ 666.571909][ T1987] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 666.588993][ T1987] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 666.786565][ T1987] usb 12-1: USB disconnect, device number 2 [ 666.851583][ T2486] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4497'. [ 666.864193][ T2486] netlink: 'syz.1.4497': attribute type 3 has an invalid length. [ 666.889908][ T2485] comedi comedi3: bad chanlist[0]=0x00000008 chan=8 range length=4 [ 667.539641][ T2491] openvswitch: netlink: ct_state flags 0f000038 unsupported [ 667.779056][ T2514] overlayfs: missing 'lowerdir' [ 667.785195][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 667.785206][ T40] audit: type=1400 audit(2000000297.376:13655): avc: denied { append } for pid=2513 comm="syz.5.4503" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 668.558439][ T2553] can0: slcan on ttyS3. [ 668.561170][ T40] audit: type=1400 audit(2000000298.106:13656): avc: denied { read } for pid=2552 comm="syz.1.4505" name="cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.568258][ T40] audit: type=1400 audit(2000000298.106:13657): avc: denied { open } for pid=2552 comm="syz.1.4505" path="/dev/cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.576317][ T40] audit: type=1400 audit(2000000298.115:13658): avc: denied { ioctl } for pid=2552 comm="syz.1.4505" path="/dev/cec1" dev="devtmpfs" ino=975 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.614401][ T40] audit: type=1400 audit(2000000298.162:13659): avc: denied { read write } for pid=2567 comm="syz.4.4506" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 668.622349][ T40] audit: type=1400 audit(2000000298.162:13660): avc: denied { open } for pid=2567 comm="syz.4.4506" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 668.632812][ T2568] bond2: option downdelay: invalid value (18446744073709551615) [ 668.635905][ T2568] bond2: option downdelay: allowed values 0 - 2147483647 [ 668.641714][ T2568] bond2 (unregistering): Released all slaves [ 668.643836][ T2553] can0 (unregistered): slcan off ttyS3. [ 668.722826][ T2659] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4508'. [ 668.734429][ T2659] netlink: 'syz.7.4508': attribute type 3 has an invalid length. [ 668.772182][ T40] audit: type=1400 audit(2000000298.302:13661): avc: denied { ioctl } for pid=2662 comm="syz.4.4509" path="socket:[116853]" dev="sockfs" ino=116853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.821421][ T40] audit: type=1400 audit(2000000298.349:13662): avc: denied { create } for pid=2664 comm="syz.1.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 668.831380][ T40] audit: type=1400 audit(2000000298.358:13663): avc: denied { write } for pid=2664 comm="syz.1.4511" path="socket:[116043]" dev="sockfs" ino=116043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 668.893736][ T40] audit: type=1400 audit(2000000298.414:13664): avc: denied { write } for pid=2674 comm="syz.5.4512" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 669.737601][ T2693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2693 comm=syz.7.4517 [ 669.794779][ T2704] netlink: 'syz.7.4519': attribute type 29 has an invalid length. [ 669.798394][ T2704] netlink: 'syz.7.4519': attribute type 3 has an invalid length. [ 669.848950][ T2712] netlink: 'syz.7.4522': attribute type 1 has an invalid length. [ 669.851826][ T2712] __nla_validate_parse: 7 callbacks suppressed [ 669.851835][ T2712] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4522'. [ 669.986294][ T2728] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4524'. [ 670.001223][ T2728] netlink: 'syz.4.4524': attribute type 3 has an invalid length. [ 670.118336][ T857] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 670.303347][ T857] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.307464][ T857] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.311756][ T857] usb 12-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 670.315249][ T857] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 670.317936][ T857] usb 12-1: SerialNumber: syz [ 670.552718][ T2712] netlink: 'syz.7.4522': attribute type 1 has an invalid length. [ 670.556198][ T2712] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4522'. [ 670.573467][ T2712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.581689][ T2712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.593815][ T857] usb 12-1: 0:2 : does not exist [ 670.595961][ T857] usb 12-1: unit 5 not found! [ 670.615603][ T857] usb 12-1: USB disconnect, device number 3 [ 670.865729][ T2773] input: syz0 as /devices/virtual/input/input33 [ 670.932302][ T2782] "syz.4.4532" (2782) uses obsolete ecb(arc4) skcipher [ 670.941392][ T2782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4532'. [ 670.994809][ T2805] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4535'. [ 671.005157][ T2805] netlink: 'syz.5.4535': attribute type 3 has an invalid length. [ 671.249765][T13248] IPVS: starting estimator thread 0... [ 671.337831][ T2840] IPVS: using max 49 ests per chain, 117600 per kthread [ 671.407150][ T2857] SELinux: policydb table sizes (8,8) do not match mine (8,7) [ 671.410247][ T2857] SELinux: failed to load policy [ 671.447762][ T2862] netlink: zone id is out of range [ 671.819396][ T2880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.851778][ T5936] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 671.916486][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 671.974486][ T2888] netlink: 'syz.5.4551': attribute type 4 has an invalid length. [ 671.991455][ T2894] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 671.994535][ T2894] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4552'. [ 671.997452][ T2894] netlink: 'syz.1.4552': attribute type 2 has an invalid length. [ 671.999941][ T2894] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 672.015174][ T5936] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.019198][ T5936] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.022558][ T5936] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.027426][ T5936] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.030408][ T5936] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.035159][ T5936] usb 12-1: config 0 descriptor?? [ 672.160009][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4555'. [ 672.408067][ T2927] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4559'. [ 672.416038][ T2927] netlink: 'syz.5.4559': attribute type 3 has an invalid length. [ 672.468758][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.473112][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.475748][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.478163][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.480509][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.482916][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.485303][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.487603][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.489915][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.494536][ T5936] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 672.498698][ T5936] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 673.224737][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 673.224749][ T40] audit: type=1400 audit(2000000302.472:13756): avc: denied { read } for pid=2966 comm="syz.4.4567" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 673.235946][ T40] audit: type=1400 audit(2000000302.472:13757): avc: denied { open } for pid=2966 comm="syz.4.4567" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 673.244209][ T40] audit: type=1400 audit(2000000302.472:13758): avc: denied { ioctl } for pid=2966 comm="syz.4.4567" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 673.245825][ T2971] netlink: 'syz.5.4568': attribute type 83 has an invalid length. [ 673.253631][ T40] audit: type=1400 audit(2000000302.472:13759): avc: denied { map } for pid=2966 comm="syz.4.4567" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 673.315036][ T2975] fuse: Bad value for 'fd' [ 673.326931][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.327084][ T53] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 673.337526][ T53] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 673.358500][ T40] audit: type=1400 audit(2000000302.584:13760): avc: denied { read append } for pid=2977 comm="syz.5.4570" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 673.366612][ T40] audit: type=1400 audit(2000000302.584:13761): avc: denied { open } for pid=2977 comm="syz.5.4570" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 673.414283][ T40] audit: type=1400 audit(2000000302.650:13762): avc: denied { map } for pid=2977 comm="syz.5.4570" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 673.754820][ T9] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 673.936496][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 674.086365][ T9] usb 10-1: new low-speed USB device number 60 using dummy_hcd [ 674.208245][ T40] audit: type=1400 audit(2000000303.388:13763): avc: denied { read } for pid=2991 comm="syz.4.4571" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 674.208984][ T2993] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4571'. [ 674.217674][ T40] audit: type=1400 audit(2000000303.388:13764): avc: denied { open } for pid=2991 comm="syz.4.4571" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 674.242511][ T2993] netlink: 'syz.4.4571': attribute type 3 has an invalid length. [ 674.268322][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 674.268566][ T9] usb usb10-port1: attempt power cycle [ 674.728002][ T9] usb 10-1: new low-speed USB device number 61 using dummy_hcd [ 674.793539][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 674.811532][T13248] usb 12-1: USB disconnect, device number 4 [ 674.941884][ T9] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 675.073272][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 675.076026][ T9] usb usb10-port1: unable to enumerate USB device [ 675.132988][ T3030] netlink: 'syz.4.4575': attribute type 20 has an invalid length. [ 675.140970][ T40] audit: type=1400 audit(2000000304.258:13765): avc: denied { ioctl } for pid=3029 comm="syz.4.4575" path="socket:[116352]" dev="sockfs" ino=116352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 675.415393][ T3061] __nla_validate_parse: 1 callbacks suppressed [ 675.415409][ T3061] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4583'. [ 675.551517][ T5938] Bluetooth: hci5: command 0x0c1a tx timeout [ 675.551608][ T53] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 675.556893][ T53] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 675.592950][ T778] ------------[ cut here ]------------ [ 675.595212][ T778] refcount_t: underflow; use-after-free. [ 675.597170][ T778] WARNING: CPU: 3 PID: 778 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 675.600877][ T778] Modules linked in: [ 675.602954][ T778] CPU: 3 UID: 0 PID: 778 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 675.608357][ T778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.612490][ T778] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 675.614908][ T778] Code: ff 89 de e8 68 f0 10 fd 84 db 0f 85 66 ff ff ff e8 7b f5 10 fd c6 05 6a 4b bf 0b 01 90 48 c7 c7 a0 2c f1 8b e8 97 28 cf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 58 f5 10 fd 0f b6 1d 45 4b bf 0b 31 [ 675.621955][ T778] RSP: 0018:ffffc900060df988 EFLAGS: 00010286 [ 675.624228][ T778] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b7ee8 [ 675.627148][ T778] RDX: ffff8880638b0000 RSI: ffffffff817b7ef5 RDI: 0000000000000001 [ 675.630159][ T778] RBP: ffff88804a3e8878 R08: 0000000000000001 R09: 0000000000000000 [ 675.633568][ T778] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880350cc800 [ 675.637545][ T778] R13: ffff88804a3e8878 R14: ffffffff85e24890 R15: 0000000000000000 [ 675.640797][ T778] FS: 0000000000000000(0000) GS:ffff8880d6cd8000(0000) knlGS:0000000000000000 [ 675.643977][ T778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.646295][ T778] CR2: 000020000000022c CR3: 000000006519d000 CR4: 0000000000352ef0 [ 675.649354][ T778] Call Trace: [ 675.650411][ T778] [ 675.651323][ T778] klist_put+0x11b/0x1b0 [ 675.652649][ T778] device_del+0x1d8/0x9f0 [ 675.654020][ T778] ? __pfx_device_del+0x10/0x10 [ 675.655547][ T778] ? netdev_unregister_kobject+0x2da/0x540 [ 675.657355][ T778] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 675.660183][ T778] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 675.663025][ T778] ? __pfx___mutex_lock+0x10/0x10 [ 675.664855][ T778] unregister_netdevice_queue+0x305/0x3f0 [ 675.666852][ T778] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 675.669459][ T778] ? rtnl_net_dev_lock+0x28/0x360 [ 675.671632][ T778] ? rtnl_net_dev_lock+0x146/0x360 [ 675.673792][ T778] ? rtnl_lock+0x9/0x20 [ 675.675539][ T778] ? rtnl_net_dev_lock+0x146/0x360 [ 675.677708][ T778] unregister_netdev+0x1f/0x60 [ 675.679674][ T778] bnep_session+0x224e/0x2d80 [ 675.681483][ T778] ? __pfx_bnep_session+0x10/0x10 [ 675.683198][ T778] ? do_raw_spin_lock+0x12c/0x2b0 [ 675.685348][ T778] ? __pfx_woken_wake_function+0x10/0x10 [ 675.687716][ T778] ? rcu_is_watching+0x12/0xc0 [ 675.689752][ T778] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 675.692022][ T778] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.693621][ T778] ? __kthread_parkme+0x19e/0x250 [ 675.695140][ T778] ? __pfx_bnep_session+0x10/0x10 [ 675.696676][ T778] kthread+0x3c5/0x780 [ 675.697953][ T778] ? __pfx_kthread+0x10/0x10 [ 675.699415][ T778] ? rcu_is_watching+0x12/0xc0 [ 675.701530][ T778] ? __pfx_kthread+0x10/0x10 [ 675.703036][ T778] ret_from_fork+0x675/0x7d0 [ 675.704498][ T778] ? __pfx_kthread+0x10/0x10 [ 675.705975][ T778] ret_from_fork_asm+0x1a/0x30 [ 675.707476][ T778] [ 675.708504][ T778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 675.710765][ T778] CPU: 3 UID: 0 PID: 778 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 675.713689][ T778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.716972][ T778] Call Trace: [ 675.718112][ T778] [ 675.719051][ T778] dump_stack_lvl+0x3d/0x1f0 [ 675.720628][ T778] vpanic+0x640/0x6f0 [ 675.722231][ T778] ? refcount_warn_saturate+0x14a/0x210 [ 675.724530][ T778] panic+0xca/0xd0 [ 675.726124][ T778] ? __pfx_panic+0x10/0x10 [ 675.727807][ T778] ? check_panic_on_warn+0x1f/0xb0 [ 675.729456][ T778] check_panic_on_warn+0xab/0xb0 [ 675.731067][ T778] __warn+0xf6/0x3c0 [ 675.732723][ T778] ? refcount_warn_saturate+0x14a/0x210 [ 675.735026][ T778] report_bug+0x3c3/0x580 [ 675.736844][ T778] ? refcount_warn_saturate+0x14a/0x210 [ 675.739119][ T778] handle_bug+0x184/0x210 [ 675.740925][ T778] exc_invalid_op+0x17/0x50 [ 675.742931][ T778] asm_exc_invalid_op+0x1a/0x20 [ 675.745001][ T778] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 675.747489][ T778] Code: ff 89 de e8 68 f0 10 fd 84 db 0f 85 66 ff ff ff e8 7b f5 10 fd c6 05 6a 4b bf 0b 01 90 48 c7 c7 a0 2c f1 8b e8 97 28 cf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 58 f5 10 fd 0f b6 1d 45 4b bf 0b 31 [ 675.755114][ T778] RSP: 0018:ffffc900060df988 EFLAGS: 00010286 [ 675.757633][ T778] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b7ee8 [ 675.760962][ T778] RDX: ffff8880638b0000 RSI: ffffffff817b7ef5 RDI: 0000000000000001 [ 675.764204][ T778] RBP: ffff88804a3e8878 R08: 0000000000000001 R09: 0000000000000000 [ 675.767916][ T778] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880350cc800 [ 675.771226][ T778] R13: ffff88804a3e8878 R14: ffffffff85e24890 R15: 0000000000000000 [ 675.774223][ T778] ? __pfx_klist_children_put+0x10/0x10 [ 675.775964][ T778] ? __warn_printk+0x198/0x350 [ 675.777539][ T778] ? __warn_printk+0x1a5/0x350 [ 675.779479][ T778] ? refcount_warn_saturate+0x149/0x210 [ 675.781812][ T778] klist_put+0x11b/0x1b0 [ 675.783662][ T778] device_del+0x1d8/0x9f0 [ 675.785491][ T778] ? __pfx_device_del+0x10/0x10 [ 675.787550][ T778] ? netdev_unregister_kobject+0x2da/0x540 [ 675.790009][ T778] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 675.792658][ T778] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 675.795454][ T778] ? __pfx___mutex_lock+0x10/0x10 [ 675.797587][ T778] unregister_netdevice_queue+0x305/0x3f0 [ 675.799991][ T778] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 675.802104][ T778] ? rtnl_net_dev_lock+0x28/0x360 [ 675.803754][ T778] ? rtnl_net_dev_lock+0x146/0x360 [ 675.805315][ T778] ? rtnl_lock+0x9/0x20 [ 675.806611][ T778] ? rtnl_net_dev_lock+0x146/0x360 [ 675.808576][ T778] unregister_netdev+0x1f/0x60 [ 675.810643][ T778] bnep_session+0x224e/0x2d80 [ 675.812602][ T778] ? __pfx_bnep_session+0x10/0x10 [ 675.814646][ T778] ? do_raw_spin_lock+0x12c/0x2b0 [ 675.816434][ T778] ? __pfx_woken_wake_function+0x10/0x10 [ 675.818623][ T778] ? rcu_is_watching+0x12/0xc0 [ 675.820499][ T778] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 675.822630][ T778] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.824618][ T778] ? __kthread_parkme+0x19e/0x250 [ 675.826516][ T778] ? __pfx_bnep_session+0x10/0x10 [ 675.828294][ T778] kthread+0x3c5/0x780 [ 675.829900][ T778] ? __pfx_kthread+0x10/0x10 [ 675.832021][ T778] ? rcu_is_watching+0x12/0xc0 [ 675.833757][ T778] ? __pfx_kthread+0x10/0x10 [ 675.835389][ T778] ret_from_fork+0x675/0x7d0 [ 675.837106][ T778] ? __pfx_kthread+0x10/0x10 [ 675.838983][ T778] ret_from_fork_asm+0x1a/0x30 [ 675.840926][ T778] [ 676.940804][ T778] Shutting down cpus with NMI [ 676.942987][ T778] Kernel Offset: disabled [ 676.944496][ T778] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:21:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=ffff88806a424030 RCX=ffffffff81ae5f88 RDX=ffffffff8e097a00 RSI=ffffffff81614ccb RDI=0000000000000000 RBP=0000000000010000 RSP=ffffc90000007ee8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=1ffff92000000fe6 R13=ffffffff8e097a00 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b669d20 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fec251b12f8 CR3=000000004e9ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006f666e69636f6c 6c616d762f636f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd58ae1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f941e1bd412b78ba 888633e1d02d479d b664223e51751ccb 33eda6bdb3fae916 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8a9b77ee070f706 81f20b49b24ac069 31d9c977eb220004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c30cdf78027693f4 6731978180eea964 9213901ab1fccbc4 988b919f9271de7d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2464dba5f3e41529 c4dd5bc820639cff 95219dcad63ae662 9a8d946ff8e8e94b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006d3511a823 eb17a764db5505ae ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8194bf776522f815 8ae6d18d211f0942 c5314781ce752be3 e0c2ca5271c79a28 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d89625934736c84 d2b61aed8fbd14b8 298ec013c3d1ecc9 044ed6a39521bc47 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2464dba5f3e41529 c4dd5bc820639cff 95219dcad63ae662 9a8d946ff8e8e94b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff816b80c6 RDX=ffff888021a28000 RSI=ffffffff816bb0fc RDI=0000000000000000 RBP=ffff8880350cc800 RSP=ffffc90000a6f700 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a53b2c0 R15=ffffed1006a19900 RIP=ffffffff816bb0fd RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000001e000 CR3=000000004e9ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaaaedce0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d7de1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea000143be00 RCX=ffffffff823175e4 RDX=ffff88804b78c900 RSI=ffffffff823175ff RDI=0000000000000007 RBP=ffffffff8dda7540 RSP=ffffc90003967750 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea000143be00 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bd4a61 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000090 CR3=000000002c496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8530f565 RDI=ffffffff9ae08860 RBP=ffffffff9ae08820 RSP=ffffc900060df2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae08820 R15=ffffffff8530f500 RIP=ffffffff8530f58f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000022c CR3=000000006519d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e847f29e4abb466b 8876a9dc86084a8e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1bc3198d8679786 d8270a06551a3d14 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62368ce35840fba5 20fa8556c0449f20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c829dfd273ca7dcd 440ff47ecafea4b8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000002b300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84e1760000000000 000000003b4e1876 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d0132001d3a5600 3ca7f4002dbccac6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 265b120000019a25 00019a2500019a24 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92e65de00019a2a 029554f300019a23 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ad0e55fb40c16fd ee1263aba6da3c99 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c02256e3c616cea c702aaf7e20bcfa5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000