last executing test programs: 2m3.510170047s ago: executing program 0 (id=494): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async, rerun: 64) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 64) setpgid(r6, r6) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) (async, rerun: 64) setpgid(0x0, r6) creat(&(0x7f00000002c0)='./file0\x00', 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x24004800) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f00000000c0)={0xa, 0x62, 0x3, 0xb2}) (async) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@msf={0xc, 0x6, 0x62}, 0x2, 0x22, &(0x7f0000000040)=""/34}) (async, rerun: 32) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000180)) (rerun: 32) 2m3.376017805s ago: executing program 0 (id=496): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) 2m3.375808216s ago: executing program 0 (id=497): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x5, 0x0, 0x400000, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000, 0x100002}) r1 = io_uring_setup(0x30db, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) fchdir(r1) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @value64}}) 2m3.375562425s ago: executing program 0 (id=498): modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4d6cba98f70778ff33448118c58eef8f00"]) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad4, 0x10, 0x1, 0x7}, &(0x7f00000000c0)=0x0, &(0x7f0000000480)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r1], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0x10001}, {0x2, 0x7fff}, {0x0, 0xffff}, {0x6}, {0x0, 0x1}, {0xffff, 0x9}, {0x0, 0x9}, {}, {0x0, 0x2}, {0x0, 0x89}, {0x0, 0x10200000}], 0x10}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000340)=0x3, 0x0, 0x4) close(r4) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sync() syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@llc={0x1a, 0x6, 0x5, 0x9, 0x0, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000041c0)}, 0x0, 0x804, 0x1}) modify_ldt$read(0x0, &(0x7f0000000300)=""/43, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4000007fffffff}) io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020}, 0x2020) 2m3.167882895s ago: executing program 0 (id=507): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x6}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r6, 0x8b32, &(0x7f0000000040)) fstat(r5, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r2, r3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb5) 2m2.089921009s ago: executing program 0 (id=521): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x7ff, 0x1, 0x0, 0x2, 0xfffe}, 0x20) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @buffer={0x0, 0x56, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0cd8e3e4052abbbf4d755ef653e8f4a6151d2e4d974c", 0x0, 0x1, 0x10039, 0x0, 0x0}) 1m46.103844764s ago: executing program 32 (id=521): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x7ff, 0x1, 0x0, 0x2, 0xfffe}, 0x20) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @buffer={0x0, 0x56, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0cd8e3e4052abbbf4d755ef653e8f4a6151d2e4d974c", 0x0, 0x1, 0x10039, 0x0, 0x0}) 1m7.834083092s ago: executing program 4 (id=1303): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r6, 0x1, 0x0, 0x2000000, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd700008001acc551d6a83dd67ffbb82600100000000052c77990000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone3(&(0x7f0000000140)={0x142140200, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_open_procfs(r8, &(0x7f0000000240)='environ\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000100), 0x2, 0x0) 1m7.833173365s ago: executing program 4 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) 1m7.770609627s ago: executing program 4 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, &(0x7f0000000180)="560147b0cabda17700f05a5d4a231aa28443a5768ad1e7b98e6a1475702210b0c2de6f20dd5689da41e29f7d179e9354ec7faf6d6bdb19cbd94ac65c559b4b309ec59b035be677dc21fed2d67e1fd585081356eec2c0ee76ebf78f5935e737c529ac4d30d35bff0ddac49654c0c8cee2300f276ed17c9a6763b9a4b21b001152caede10ace796c670ee0e38da32a48234577322311c88dfb4b3121978a6f6c78439e4949d26e83a3271ae72854272681c27fba97ce50e9de354d79587e91080172fa97a7f749c0d48dd1738ac5212c26c5620925db7b1bebf9a1f98f0d627d572a205d36947c0d2c"}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0) 1m7.632674369s ago: executing program 4 (id=1311): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) io_setup(0x30, 0x0) (async) io_setup(0x30, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x500, 0x400) fcntl$dupfd(r1, 0x406, r1) (async) r3 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) (async) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000a14020025bd7000fddbdf2508001500030000000800010001000000080015000400000008000100020000000100000004000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00'}, 0x48) read$FUSE(r3, &(0x7f000003e800)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f000003e800)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="200027bd7000ffdbdf2500000080000000000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000084) 1m7.364971548s ago: executing program 4 (id=1318): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x208408, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', '', [{}, {0x20, '@}.'}, {0x20, 'blkio.bfq.io_service_bytes_recursive\x00'}, {0x20, 'tmpfs\x00'}]}, 0x36) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap$fb(&(0x7f00002db000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0x6a000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="30e37c7cf174ac5cca4272549d7d85633697f4bbeff5903b7434d618077c969441eeafd8c1dde72b777a3946c6bab4d9c41cb80700000000000000987b18c2830ea7d5be77888d35301b3fd82da109466075e496297823ff37f54d952dfc9b2cb22a466c0339685e5a095521aebd26df7e93d3f4ad41893987fc04e07fc902144e2bd8728461e0be2a7f492dd92b520b30f8aa81", @ANYRES16=r2, @ANYBLOB="080029bd7000fedbdf250900000008000500b507000014000180060002000200000008000b0073697000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44810) 1m6.947866997s ago: executing program 4 (id=1328): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x3, ']'}, {0x2, 0x9, "d72f422e44e811"}, {0x2, 0x6, "afc13f81"}, {0x2, 0xa, "eac5f4117454fb09"}, {0x2, 0x3, '/'}, {0x1, 0xd, "bc816b6ff459f001ac25f4"}, {0x7, 0x7, "f15f078e73"}]}]}}}}}}}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x3, ']'}, {0x2, 0x9, "d72f422e44e811"}, {0x2, 0x6, "afc13f81"}, {0x2, 0xa, "eac5f4117454fb09"}, {0x2, 0x3, '/'}, {0x1, 0xd, "bc816b6ff459f001ac25f4"}, {0x7, 0x7, "f15f078e73"}]}]}}}}}}}, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) (async) 1m6.870392469s ago: executing program 33 (id=1328): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x3, ']'}, {0x2, 0x9, "d72f422e44e811"}, {0x2, 0x6, "afc13f81"}, {0x2, 0xa, "eac5f4117454fb09"}, {0x2, 0x3, '/'}, {0x1, 0xd, "bc816b6ff459f001ac25f4"}, {0x7, 0x7, "f15f078e73"}]}]}}}}}}}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x3, ']'}, {0x2, 0x9, "d72f422e44e811"}, {0x2, 0x6, "afc13f81"}, {0x2, 0xa, "eac5f4117454fb09"}, {0x2, 0x3, '/'}, {0x1, 0xd, "bc816b6ff459f001ac25f4"}, {0x7, 0x7, "f15f078e73"}]}]}}}}}}}, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) (async) 24.934880361s ago: executing program 1 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0xc0}, 0x1, 0x0, 0x0, 0x40408d0}, 0xc0) 24.932814477s ago: executing program 1 (id=2133): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) 24.861880658s ago: executing program 1 (id=2135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3}}, 0x0, 0x800, 0x0, 0xfffffffd, 0x5f}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) (async) recvmmsg(r2, &(0x7f000000b240)=[{{0x0, 0x0, 0x0}, 0xfffffe01}], 0x1, 0x40010060, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000000)='./file0\x00') r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) (async) io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 24.689139643s ago: executing program 1 (id=2139): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x288003, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xb05}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x21, {0x2, 0xfffffffffffffffd}, 0x9}, 0x1) io_uring_setup(0x48cb, &(0x7f00000000c0)={0x0, 0x52d3, 0x2000, 0x1, 0x6f}) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 24.551888703s ago: executing program 1 (id=2143): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000080)="a2439df84558991099024f230a0517e4c725f34fd6d9a3b624b615a36080b11d045f334725a99bac") newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r1}], {0x10, 0x2}}, 0x2c, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20004800}, 0x44) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) 24.176463076s ago: executing program 1 (id=2151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x8c, 0x5}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40000) 24.077178493s ago: executing program 34 (id=2151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x8c, 0x5}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40000) 19.933088245s ago: executing program 2 (id=2172): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @common=@inet=@socket2={{0x28}, 0x48}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x6, 0x1, 0x0, 0x4bfaf9e5a515ec67, 0x7, 0x1ff}, 0x20) 19.845163914s ago: executing program 2 (id=2174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x8b, "21b61a25bd731b831da6c8cd7acb10d65cc948222eb8b5242554406eec9c5f3434c58f73ee2e1b30863ed5319da179b20b8b899a068822e8a26dfd977238307a8e1635f7f46b69f6524b6274a6489b08e428f807fa4726cc57af1159c64e592159efe4fa9ad0ea6a2005da89e7ad8c25101cbeef0707a159b596b04d5ff42c5e201fbb111b1b27e60593bb"}, &(0x7f0000000200)=0x93) 19.842317493s ago: executing program 2 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000002c0)=0xffffffffffffff01, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000bee14557f1a663cf52e73ffe3b39501c2858a60e0000009110a0b50bbcb6a2c3910bd554a30f28ef0f49542be98ea623602fbe5d6bb3d41ec668fd747b4b04164bd91b6fa48b0acfc2f3c6647ad141d1cccd3b7eef9a513c2b9d19b3037da0fe125ef6db7a38f46bebe5d490065cb3dd73e0e728bee9ef855071706447f3f8cd1a8983b375b84c837558aef53c00c0fa82338de08399c74e1683369e679b95691492ee0c205634e771fc2125f3808fb1b0c93854937a3ebb1b85", @ANYRES16=r2, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000180), 0x1004) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r5}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) (async, rerun: 32) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r11}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f00000004c0)={r15, 0x81, 0x0, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2, 0x20], [0x0, 0x0, 0x8, 0x4]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32) r18 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) getsockopt$bt_hci(r18, 0x0, 0x1, 0x0, &(0x7f0000001600)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={r5, 0x1, 0x5, 0x42eeaeed, 0x0, [r6, r11, r16, r17], [0x6, 0xbea9, 0x9], [0x8fe, 0x0, 0x1, 0x3], [0x4, 0x6, 0x5]}) 19.749820908s ago: executing program 2 (id=2179): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd24, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x13}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 19.686958547s ago: executing program 2 (id=2180): r0 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x1, 0x0, @pic={0x21, 0x7, 0x3, 0x9, 0x26, 0xa, 0x0, 0x8, 0x2, 0xff, 0x17, 0xd, 0x0, 0x9f, 0x4, 0x6}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000100)={0x20, 0x2, 0x97}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2008002, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r6) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x30) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000980)='norecovery') recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 19.44105613s ago: executing program 2 (id=2186): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c008100050001"], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0xc486) 3.734190016s ago: executing program 3 (id=2373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) 3.733935787s ago: executing program 3 (id=2374): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x4000040) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x7f, 0x7, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x20003, 0x0, {[0x1, 0xfffffffffffffff7, 0x0, 0xa, 0x2, 0x9, 0xfffffffffffffdf7, 0x7]}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xd3315f97c96df601, 0x1, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.616127135s ago: executing program 3 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8864, 0x0, 0x0, 0x1}}, {@mpls_mc}}, 0x0) 3.508293335s ago: executing program 3 (id=2378): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) syz_usb_disconnect(r0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) 3.433131155s ago: executing program 35 (id=2186): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c008100050001"], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0xc486) 1.658153075s ago: executing program 6 (id=2398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket(0x10, 0x2, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r1, &(0x7f0000000080)={0x10000000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000200)=0x200000000000000a, 0x5, 0x3) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x34, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000000080101000000ea437c8df90f5700000000000a00000005f101edc8a20003002f0000000600024000000000240004800800024000000000080001400000fcff070001408000000108000140"], 0x54}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) mmap$usbfs(&(0x7f00000e9000/0x2000)=nil, 0x2000, 0x2000002, 0x2010, 0xffffffffffffffff, 0xffffffff) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r5, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00003de000/0x3000)=nil, 0x3000}}) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x0, 0x0, @pic={0xff, 0x8, 0x43, 0x2, 0x1, 0x2, 0xdf, 0x6, 0xb6, 0x8, 0x93, 0x4, 0xa, 0x8e, 0xaa, 0x4f}}) (async, rerun: 64) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 1.348727273s ago: executing program 7 (id=2402): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1.135169237s ago: executing program 7 (id=2403): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) (rerun: 64) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/92, 0x5c}], 0x6, &(0x7f0000000500)=""/95, 0x5f}, 0x2160) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) ioctl(r0, 0x7fffffff, &(0x7f00000005c0)="16df8f7627b154780729fd50172265") (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000600)={0x1, 0x0, 0x100, 0x6498, 0x0}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000680)={r3, 0x7}, &(0x7f00000006c0)=0xc) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000700)=""/189, &(0x7f00000007c0)=0xbd) setxattr$security_selinux(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x1) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1b8, 0x14, 0x100, 0x70bd2c, 0x25dfdbfc, {0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "6ab6545aa0af95d166016ab9bf6bd11694c0b061e45649ea625410601489f9122fece7cad89191b67fc739a446cbdf35784bde26d7aaaee87a2f2780a74237185b8a46c6f5895684753390ddbbcb1a28d731b6e59fdfe6a85afa97192e04dae3b4b71e335d9387b0ada8a4907a71d37e7eb12b66949b6ef0073c364fff71260de51845de7ef162cb89b0ce32e0f5d2f2d8e47ab6477568bd6903a6ece41e201e2813584df3de70bae462ad675d26f5fc98fda367cdac403f192c19fd30a92406a26fd111d7298046fcd9806e007a1d9e44494e98ecfdbb0fb70434a0768181c315b4"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "235f57c5b93ec2f84027dc926fb42f2dab17da4f0c2f1724f7d84a59d4c546d3f8a9d921d0626e72a8fdab501cb165e097cf8b599df7ffc2a405361a1e4bf9d2ebf88080f34f0591b2ac5131749854a5c919668070685c7abf1acf92812487534ef992045d950c6bd3467523dd71a794f76b7d5f38c9fbbcc8821cc470bf0f6b51973c9b00e647606ea9665a4009210d1fdaf0ff6fbd497c74dafaf12bf51ec301aeff91cd9568d8d47768bd837a7cbe6a1caf2da9"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) (async) r7 = socket(0x8, 0x1, 0x3) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000b40)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000005b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@assoc={0x18, 0x117, 0x4, 0x1a}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "1090d41990017c1aee07f6c3e20c41f1bc2d88e9dc723745610c316efe0e74197dbf2c3f28b3506f63bc4b59de2590e1bc28beaf466ec68936f6002e6e20854f5e767470abc36defa20cd6c71fd5a0863f1c904e33e87d020105abf86dd0e2ad82038a5412fa95c187636abc55f7dcddaddbdce077772127a016d373430d9661253dca09df907c78e4011bb9aa72bf61f85125faf9774d56743febd2bfa1d5597f37ca4ff3c1c75301d29bdadd98f3282fa7d404aec3621a3e5d47d9fef2f1fbfa6bf8c3eccbc8ed20191462ab9429c077358430fa3d40d6545dd1d2be58f4eb53f72e50bb351d4fafe6b7dde6b1cd8e8c91b9f4b637e5c884fe0b239209db6bd30b7f868eee53c261eea9ba0a05d9f326f4aef438b915d567e2e5667ec76eef5919537ee67470daad2eb972ad173b8e17ad685145ca2222813ae6cc9fdbfe114fbca2dc4d8ab7142223f3bc3e2624b9efd5f8f633c0773dfecefc587c4235f84bf85a5247740f599471b9db2519e8bcfd8f32a17809d2df1b5b29b0904ea0b5fe7d3e4a532074cd78bdc73854dbdd21bbc335cacc8396b393024c148c956a40e2eba02a8cac249e87e8d8407788ba3bd9f09f27cab3dc97e583f6232d2b91852d8d3ce06f8209d83e1bcfef6ef65e6f5b3234f480b44de4b290d924cdfc2c655c771ccb9068e7a6309567f2e0dd32e4eac3b577cd30101841dbdbd6a0e760cd20592621cd8aaf4e86087888e1fd268b997dcf731cc429cdf8dcf0e3e93463df737d0a377df0da1512b1ef90b2c48aecacd6560ae90abec2f71c2463020453cdd6e656ba1ec871a23b420166f73c7c299c0357b74b95345e4873708f928a603549c4ef88f7b0da6644f492df64bd34f125d3e136c57eba7066c6dfb7e99a33657b2ace5b54c979359b67b407d6202f5cdebc2c84b819a9aac379eb3559d92a3b982f33e08d397238bf6aca6bea2d1ba95c7239d41209af25a332e145105a363d3e6444b1215f7464fa503f4c1a0a093f61096db35790aaaaee118f12fc045883ac263c1384fd2d32e5cd4a83968d5d24b681711543debe5be61c672694b537b21bb412a939958311eadcb6b86e94109074f45dd5e530a5edabcde1777ad2f920f69241bb3ee4b24ae70d3e9b7812f5da14f7ad0474bdc62e73e384ade9a6b0dee3da271240075a6ea8aff90a15d092df5e8fda0df10490f6a147659470d3a850341b89e6a69f58964cf22e7b956b7d8729f8b928420d8541482a5b10a6d3ac8d0b7951c7aa3559679f1f388ccf25284b13e47c142577ebfa70823354e2d4327e1981997a0e702ecbceb736295b7e921a11902567a105777007bbc246ae1f2667a2b6c48048226343975d0e065ef81633cc7105bcbbf43f90bf2301cf9abac007bd9f53c0d3cb5e2267b64ae3edd9251347e1f008971ab0c03432e1d71901cd400f57abfdc2677c4544be5cdfaf4ef110a2bbdcdc5c162c6995e1ffe3e400193e1eb0d4cd57ef08e3097bbc4f6dd94154532b86c16f8cc964dbc1310b98a578515130c33e6d5c64f6c4dad6648b1c8b9aa19952f442501f9b4983859af2769db23885b1a897a05216fe1acf4791975e41ce038fa6aacf6d50723dd617aff94bf004342f36181c2398f338bb0ed531bf596461843bd169f75084c3833b9122f2ff31699e9adc971a273d72e92b915ffdce817039e51043cf773f3f47c8b4bcb3dcde00191d187c6bbb65999a2704e2114b3a84ed89ff0293ca097715f8a1925e925e9bcc5a86352adbf7742bd7f0ca179fc4ea240cda7d76219b53eca3bc1715be437ac27e420a536f2bff9dcc0535ab29b2492bbe07718c207825036c39e68c3074e66cfd3cd17a27b9d52d1aeeed3f7b478c642c5e0199f7f5988db953c55dee7b8f3f0abf9dbeaf312544c898f6c92fd3c346061c2bb84b122b016a19c2cea64fb4438c8ac5610a77ff3cf32e020711a6965a96d83c8dfee4df924a198bb755d30fbece8a5d1a555db1d94e2aa5d360e8b239a4f4df4b977c78e6a5b48510a3338b73c4432cd79fff7dce980b2301508f0c76909f6d8dbb6ea30659fe39af31ea0b57df8468d91b696ebadc343143dcd497295b2b9ebeb4e6c1a941fab1701cc58c4c98bf586a32ea4204e41dcadd7176daaff2d2712f9a5d2bc80dab234930205d64327d094945d9d27d47214f32274e68e26483b97b5a2aed454beb2b9c4de077ca73e16ab5247e862c6265501a58a17aa328f17b613a4bbaa4c7d4aff5fc1a9b4d38f8bc2401ad3f7b7b9279d9a4d06c98d6256f5df3e113fd5ec96536d9867fc0096d9971fc096e0bb1b90bd370612b919fa2b62ef7eb77e320f4484025c17b63b285e1209679a12fff245be00b805ad12e5b54c1f5168fbd71f3a3f72591abf0a60059d60f7152dc72c1401fb23d8680b61463c720238418c00fa8d63ad540b40e30f2848bd63eea98f15d7b7d357ab101aef2b94c593f856ad57f22481104ce41774e36b1eda2cf7f72ba0ad47e49c81e01b6a9eef66d7d95070fc90fdb15758c89ec986d0c46565a6ca8f2cba1594375764c818884209a3104d42c10286886fae0ef75e1f4c5144a2efd77d7d1cd01ca767535bf9b947fcef5c4e278f46ed5295d1c5659af76919592ec4ebae63ea828b56eddc05499e23893a8381c1e92eadae179df89f27fdf0293748fe823b23ec77bfabaea220ddb4597453b4857ce28cd711ddee8cc1891d10e33c388b126a7c1b31fd8152f075b83c581495b9bbf6590cb1a04f31b5b575667bdd3cae8d8b20dd2b8a4e83b73bdf63590e66e6780120a7b766d3e205f7847c316ba7dd030d68d4abef1696b68880423a9b24f8df4483c5ec94817fd328eb00fa9df0afa4aa8c221c3e5b22ad4478404835e3e5ff20e0b4ad856a96cc40689b90960591b52a515f917a8061013a054941cdaddd6f838c8de4f68eaf63efcce6348b101a851c3b1989fa35ca29e060ffb9f193c641d65c023e1a81f019f799c98d2355952a361a79b8db6b38477843db9db1c6e184b712531ffb3b692d2e10488c5cf878501f76e945cd40a7638cbcb2d30c26f5fed261f32301e39714f704195b19eddc3fbf71a49d3582aa271e066810430de24ff5e9f7ed8208554aa82edfc9f2519c733968aff290ee60618b921bc9d965a4aa8e11fa744b5ad57472476010801489af820b5c1aa6d58b603806c8f043c7cf834e35c6e6b556a0a9b68ad5f03b433a95e22a49020be5ea6baa3825406ce71b6eaf0a81bf7d25705064609c424359bc4dfa8226e11f97a2e848515328f433699d060d6077ea37e45fbab91b10f9a105787fae7ba979cc12a7ca9d24e8690c20576923b00cf5190fe721d79c9057398862c3b6777cccf9e8d7f3480ab62e2106fc830eb9433fac3fadad2f1e5aba6bec85bc1e871b28738d62c04e6d9b4d5f7ef0cfcd75d093dc8cf8a82fac8a507943c61b89c9467efbacdf01d6505772a924c982454379f2c07a034077252cfbe171dcc27140e5b98751f37e3159634bb44acb20e7703deb20065e61b4d964b86b90c88705c1a612ed7ba338cbcbc3d515817c3c692d39f92397147d58fa0538deea2a0f6977b46808472651e2e2ea95f4ff30fefeebe9513dabafe100b3f27d1b74968f8c260bfe00ecac2fd7b99ab939c1cd7ea2399dc4f19d9a6cb492cec0d1466705dab95f8e70fe7ce00cf3a645f2804a0c359b002ae99f3b92db87b2e918b0cad38b4fee5827b6546f722fd2844d38a94388640cd753c639308ee890bbbfd6215dd2a023c3a0bd79a2f660ec0887cb700239f38d99d7e76d3fb672e8bb67e48b2bd95760165e066d69a7e99e2e16bb2a221db7d3c87f159478cb6383ad17d36ad40c0e2ed53b07f2571c04d6f3ed7638ff15813c2122a47013c6bdb65bb4145a320a2d4d8e8283930b2497d58bae6a732a7a28c399b9f272b75216e5b1a14530ede0f652bca35aa52ae5693d131b1ed013f746f9cccd42ff4531bcd53c327838999ef17cc7b1af2741fcca9d6811b602a889f06156d3856ef38ff849af42d953c8dabce0634061d5a135b4d6869054949cccc16ea63f2aa507b5fd3ef980987274454796f615554973b81bf4a9f4775fd5554abd13c8781ab4fbc4633c309b332b7a7973947a3c0e9a93b7ecd4155cec2ebe5a8a6bb7f07822ce075a8d1e004b1e8de36d49ac8fb20a649edbe4dbbf4dbeebd64c7926453844f64840c7a6898ee0a98a74ddb14718ec738191a4b40456799d4f3ddb14d8b5116576cf32e06332477630b9afae9564be71520b15dab4d427b7eac11a0b8b3bb2b7bee85edf7475fcf3c0a7cf3699045907a9998ee66ad786315af91336a6ab1c4012652e84f7e14154ed00711ec0c120aea5089986fd991019dcec9cde0010ec1b5182f908da3d087a30035ed286be2acf53cd6f30bf05bce614b6040a64ef3e9b4aedb560ba53fe14812966fd558c87ea909323e8b18761503e98d491b5465a27ba99001e8b06ec0b6148be007497f27e868dacfe0e19d555183e753214a8c32d6278be2a8c52b6e81dd90b5a24d07526645d5d0d580c70b99e1e56e8e8128d821787f495a682c8feca3e643f7aa4aa64d8cc8e004fdd1744a661d893fa87a7c5144d417ad5522919b102ee989e8bab72418f570e50756c3af3da91971bd51b315a1d62fa55e0bd7f27f12f2078e4e3ac45ed0f19f9a683a4d79926e4cb01cfcc8b56a152413ed3945030242b290db721271652a4bde706d2810e23159ed487de64f0ccbde13fa33d575b7f20611b3583f0ed21637c04b7314dc9cd51453e0041a5056ea4619cf6b348d1596ebf8fc4a7d85e08c440ce5b450e4df6b9ecaabe34cfdcc5ac114b2652dcf64a83c9073324c522aab6113390dc6cb81c336f7827eac825c08651d6e492358b8ed707b5ee7803e91902bf291f7846c41825ff3c8672555ddde57fdc41c8409423bc225bcaa976c17c6bf57be813abedf6dc5a2f907ed804fd19337b5780b83aec14a2852b5fa1f862ae67041073a42ccadf00c149b2dcde9d57497f035fa83d7711491639ba1d4ef9223814cc93bba1176458cdeb2bed1d938898ea401e29a55a6dfda785515e201aa5a8cacc22c22b550cd03a733de069f6b5d7055d379c30acc87a5d55e9e97acb718208e78e0e7166fa6c23c2f46c4fcca5d968f887e90cf05655ae35b9db23ebc97bf7ce41bc5c080009dbdfd70cf6d2f0b5822338457f5cb77b1d49633d6953b3353164f33f69c45a94b51294a7be2b84f329adc0efcb8aa2f19a377ba827567f9c1ebcf9484985e3b646512965b959d366ad3d90a1bdb16da28727270589469f7ce12c70612525e8f27c83854286e00772d177495c69ee7b644cae26fc85030b2308c06fbf2d7cf0cd65a28dd85012eef12dfc2e5cbf76efbf85e7ae1029ebf563ca28916e0f166f23d6a8513201e49fa5010396c22fd082190322b3e86b1dd355b02ee67ff24944f5957c999eafaaf007d1e48d25a0b3e3888bbcc4bd4768573b334041122dc7c8ad958eaff75c6521524f781f7f2d91dfef4fc008d16b59b64c6d1dc0110fe1cb58256ac1108c763d085f8c1e71e087210dc0fd06ed6fab90e7bc64a4367884fb9c02ebae640a1744e2e87ebc5ebe9a3575da391381d9219799ba5aeb9aad1cdfd101dbdc8116dbc81c82d205caa1b845738aee29777e8d9aa1c1f23beea867ae1860bbf6f3cb2567da93440976bba8fee0359148a7ed4cf13b13bde3f178ad5df39c27665cbd0b54d2179b05eb4e0474b6abeda676e162c21"}, @assoc={0x18, 0x117, 0x4, 0xa}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x30, 0x117, 0x2, 0x1a, "582793581cb48bafe802f12be7dea1b9d24bf74c90c2ab1a9720"}], 0x10a8, 0x8d0}, {0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001c40)="204185598b9e08fb4a4c23e89934a9eb1c64e82e88e893f10ded75fabfee07ead361ed333c09681fa9dca6bad2664f3f2908c7b37756b6def72dd76b8f12b322f07d4725e49c6ed676b710eed70e41572a634f3f0d4e3410f48e1ecd5293f7ba94dda667d2dc5a9065938cea5534e7efb00823233f88af3727e16bbb7007cd057cfdac48e51d2a1c2115351fb205a7f331cc4fa37ab3b5fe2bb61c3f950578e6a994f9683734b163da402da4906c372402ad8e49dbf8c2b9ee82b07df9db33c97739f10e35f7131bacb17d5536fc0b4d97f55b147f0a3e287fd436cfdb6427d8", 0xe0}, {&(0x7f0000001d40)="5f39e5b7abdb53e73c2a5f2b5f0bb92d67119634470775fc07e8fcbe0a75a1f1cf0149e5cd4517caebd7ea4e03f2ff036a24820d03f3a8c704ea38f4ff27beeefe0f7a4e862f7773881add38013ae49b5955391189afdc08e5408344859a2cf72fb39beb06374ef7715589c1b3a00ec61a80efdaa75e31835bc24d93b50a5e686061eacabee94d791e4218e50cdf8c5f9e59abf95985629419010bd04cb681e525333ea565b97d8e7cc3386b9e8a75bf9366ee8f3bf831e5a4f5acbfb56ef816930a03036fbe5a70027f3779c714307fbe5320d808c07dd166c12286b0bfa75b47f3acc6c0c90b40798e6697b491a4594eb8507c6a545a9415cc1ed5b569b61819fe06841fae8b93a50c8ebaa581f90f7acaf375a5af356872bbfe2f3e1047986d7f9b6c1380caeb62d3b8b10b2bef525083e191303804f2315aed176f84fc63329171da70c7532c97c3cc2eb01a80e581572b2eda35177a64b302bbd9ba0c2f93a6e5fcbca447fdb47398c859706e3a6a44750aa7a8469fe0906a6ae1f4256751b988eb25f482191d906c38af19f38df049f5dbd8ab5e48380c4903b96eccc09ba7c2cba3352c1c677f504afa557e355c7cea1c9c9290e91d8f775b5b1cd29aa430d5c406f3081fbcb33703e918be3723e13e13f8fddd27c39577f20ea5bb97519aadb13e9c4c67269ba91236b9e3cb9bd0a3e3eda235c7b1805c6b14b23dec3f6be36c9d7f8a7a461a73110781b85a93ccb404b0d5cbcb29ab857463397a6146ae7b574fe6dddaf8dff32231ec9f90736641545a953148e43d068228441cfd884796fd3de1b55a282e653aaf64e011e33ccf9a5944fd2308fceba4f37ffddf1e660ed70a2e1d54a4c4df61c793e874402ada2d0432a14fe5b031a33dfb613d3bb3294250bf723277cbde6e5de0f8908bd4c78cdfcebb860455846c606e07f29c6b987c0b501ee76316454b3e9d0a2616d5b94c7a803e115deac4d5e5264cade9f867f054ea8a013ea7502bfb69e2ed1b930b7c22377764e20a46ed0e47801e990eacfcfc4677fb6adc7b84d19b0459f0fd940636a0316668326bf5c8b89e09ffd975089d6b30b18be9ebfbf68a72d1532dfb1f65ce652e70f3d92880ff984b6596d023c30b46ce4b60244d8894b939b467868418cdb7439c1a65a3e2d948e684202c011e66d6aad64bd5ba13cd9d6bb6d8c401519875cb2646031ba4667df910e9c1ef48e4d8a32f96b79126ed8f77aa12dbb48640969010a3f41d720e2b55f4dc96edadce1e03229e623dce2d4db1c01d455a7b55b1a48c64e24ef359442a21fdae385432fa534ad0843586e053884ac89972b123ca839b65d11f064acc9dccfcd276f0c27ef284f6b31d455361b6f25e030f989a8a6b92a911312020d034a7a47e3071a45194f54e43f60602d571688fe985a85b8eaf08b3df34f39e5b9f01b3c8383c62bd98e6b97c664a47eefa86eaf5119b2e544e4002454617c925160228f101126eee22e2a7f7c3413e37bc2da3aac821a0320964c25333f2432b0ad46218c5206435dede452c9c5dc6a5e3b727041aa3532d872a33b6e96d51b9dcd69a456181db12bce599580b9d5dc011c6c4ee72c414b0014eb50a1bcba04ed626256a2b9a631a8e6f03c6260a119e9fbb3531f183de16024028208b81eb2bd6f9571b823c31afd9d2f19f92b3d36b2767f197077c51550350357478b584bf72ef589fa4a0cf776f487ac799b2eebf0dc7a729d6a8921163a3b699f019a7909d6a1ba154ce0bcc013771176e1218b05c086f305dff2c2b55ea79baa3650ef571dc000bf4d5c742f1c54dff1dd2fdc57175baff43b97b731b83aa8f628c97f5d7f3eedb49fc263093f5912d40b0fab640a90da5143889d2d02d2995060ac15dd0cadaa0a60e989b9de5e04624cff79d1c0869694e6552cb9e104a3af554fbcfa5bc2d30a186d405b871162eac73df230d09d1b9aa30e60a83b0bfc2d90b35a825a896e8b17d0ae3fb62730293af84da023dada982f852a7b6a9d5a7a80052f823bfe7374f575988ed4e16e334581f56e1aebd586c1bb2fcd620d60d44f830cc7b1029e0e0ec55f5859907c69a6544fc6985cb0c26e4375f87123c9839a7de43b3e95e94d6a5c695330205f4681e675951bbaf751ca97faf58661abf0ac85643d259b7a78490f98075266fae4184b9973f3a7672bc18a04bde57976d05689e9a926d4730ef06376df81136c8d5b5ee4de736f6fd73e48691c23c07c24d61812e5ee4283e16b9891ec71e70209c08df33c55fb45f49029c48a451c41439c32b979ecfd1a1a5b122eab1578db0853d42f6558fb23fcccfda2246bbb65d467699f62535fbd2cc191e09ec2aa782031743f1d6c9525e0951b01448bdb5a7f5d6db8faf645672cae72e3085fcd671046fa535b04ac302dba285e1b32104ff508612fb2c7cf41fda482e6ee27079e1aaa1b842923fff9ba5f49c56433aa423913bb31a228feff7a78affc5cf8ad863a24b467dffe91a4f17b4bcc9d65c23907553493d53a9d631b14d5959814a05ac73dd337eabc4f0be24d6e5fdd0ab9ae863c6442b8797d91a138c8f0f93581e301ff328ac6239961dd981179b11afaa27e17c468cb702d74acc7fb087c9335476d56611dd37cd14863d43e5df0941d91485aafd5110c56ba93511458e0ef250e2e736889c0c59ce145b20253d6d5ce6ef3d1c321ae9436afb3bf2ff6e18d7e9f60d412cd9a033db100b56ebee3616bfad8dc57513bcb169f96da2ed4df92803da76ec73f79718cda5d81cb2cc41d036ccc5ff3e4af2dd7b6588b0a83e52ca50b17330a91f05fe359f4fc153b11ea13252eddf4adeea2828b018afd897b8b63d37d21516b658d03971f0f931b66fa4328163f443693de7216aa6713daa17ec3f58e895aa2aeb1002434d644a2f7a57574aa4a4a9ae8fd4a5d0ab79cb6a96d871354da8c2adb152a4ffff4aec1722d0f057d8fe37db95c0cd6dc39f174b9e16a3124548d598476778f4f44c2e09ede3f35e3e2caae436ee75991637c35a0578ef1b983e423c8b863828c1d55c23e5a55f554a85d11a0a538abe1b928e1d4fa424bca52b691950e041dee0c184c2ab1f9a37578e6f8bbec872f2c99474b30da7365cb66df83b737010b3fb0aea929ebe3d3d9da18312c769ba7356fb076324ce80bc0908f694daa41c473563d2eef9092796270d26cf5501d002b86eca40dcc624366a30d120a73c873202c8c420556e5e320eada5c51aae4304591e29b7b2451536f1082af4b401e9fd0d2c52f0cb1cec8fdefa91d7a6e030dc8b7bd22c9ff33901eb5de63bee8e6f4ac548d00fa53bfb037101c2e53da0494b89fe10bba2fa3393a31f7c36c5b010e5217f68eda7c1a619668e8528411d992a414ea6b053f38f663b72aa55a827ad9970fb349406a06053e1dc6ac9d465a04cb450e5f07b03d67f4972313454a1716340332e9fcdf9cb0538ebb8211c282a0d5d90494df6ff966f9d696ca759d24fb035af747df4e7bcbb06b3be0801de1946c44098f884efa02474263e906b957e15947b3975bf0bbebdd83b23dfd844a0583935d1ebc5e30035d754e6c6033011dc58a35d01569b73b2fbdf448ed21135f4d4f016be485948d41f82a53cdde8531b200bea6b87e911db3630531cd1306671adb56aa5ba1bcd60c0881997d5dc7f809ddf2cf1ced24627e1353bd064163f88fa9ee088c6e273cd1988b81bb576123945bbb4805fd47c9788e789b91ee71ab6565e2980dae71a8faf10b971394361e68e8c7e2008ab3d340ae5213a294df859133b66cb6c77d6aefba48a1b1c7964a097a06807c16c5baf7d814ec7f5220e3403577eccb6710c114e0e83ff89951c1f5a8c993730ea5ed59c484da396ce6c65e8f90979f6e40355f949f04a8f3907db1b21637e9ee345ebaa454149e3f55499a823998819e4c763e9425573bf1a22801abef77d0b601a58c447e0a48f7623db71cc576ba98cf8291ff41ab8fee2c431ffbf82b57c8696e676a3946ca5985ba916276f0e3a08a51ae32cc42dc1ee779cd57fa364aee2b2f56de6586f98a6de37ee681f08b7f208b058b356e20deb494151bebe35f72415817bbe4dd2c9f87b6b576f7266c5750b6da0b2db3ebb07e428e3a94ff49cc677f98940e760516920ed6161b81e1442ad2891f1200fc89998bda2e34b0b07677b47b0be89c8bc65c5ee9ea85b0a02f500fecffab8147705082fb36b45268e5d8b729fd337c51d22c05e6e003ced2bc0509a47469df6ca4468dc611d8d0f195637e4326312c5af3086bb2c0112df8175628e5ddb7996eb555994ccd6c36682e5eaff4fa164719cea288011640bed7da1cfb8c130ef3977de26598ae54a4c526547fedddefd1b971829897197b806a41daa0a0db533ff0123adef254f9d2f1af8c57d56060c9d726147b1d1a76b6947ae18894a53ac5ba0aa8236db4b6975a42ba5048f9c4128f343e01d31677c078f40f9340320fa2bbb1c149b7742dafa4fd750419df3cfad6e227991dd4d4e0a106a263781a3d7bc3cd0eabdcc8d5386f05a698e5ecdc184260722925b826c11ee7a3594cf68d93f3fce9f0aaa5228bbdf7e8c88e558b4d6fb92bc5e8eddeb1f0da8ec3a83594571097e084eeaec20449869f45b7f6880c744c29e7b18c8e8fa87ef053388bd7f2e3f14d01e5c9408d34cdd25e010aca36fb8f9895ceb4ba279d88ef6380ed3a0ed07b80a820cab9b3cd7db766c000fd48608e4430f52945e403055ba4148ce298c559ef345abd51656e9e90854504eff17f556bd5613bed8b613e15cafbfab7accb894e26170c82476ca6206dcd12af83bd1c386f30332b612019c55c4f8aa54400bb874dfdcb31df98d252670d7978ca0c316c62ac3e6511402f4f2346e6221909ce6be4e1181b2fdecc25f941dd91370631b08d826eb960b79f90ac142b4afcf706f4873501ab8633504fbb1521d3ba238ba3af7791cb9ee30eaec2c3ac1966fdde0ba9f08ddd288e585a1767a6ab997db296b6ab0a20a35864592854da0784960dc80405e63d4ef620237b5f212853b9404036ec6b89f0ac94cdcf4dac8c01b74c0293dc7307130d66301960c4599be0fc71678824898c7fc2875beb29e069eca71c0a52ce0a47897683aeda55a93d8bcdc592046bdb597cc4c786630cae5ea6c4eea892cd6255a9cfde1ac50241d17b6e014f3c57bb6a1179a1ac80dc064701af81c11d94e7e0978499b33a3f5c6eb583442e67794b9c116383034250b978ec47106eb7a60156b0dc872483b7a0093f1e3988ff57cebfaac044baae7ca34b31ae652e32490613a361efd9a5e84dca312508d7adbcd2247a32e39ffd14d48f6bf4c56b13a541709c5812c8a20096e0591577198ed57e7e2f20cbc221a5127f667c5e738f80329fa90f0d4f0520f259f50826edbc2ca74c26a9896071dcb51c40a330eadc1ef737e8955d4c24d8e9ebcae301fb81bb34f7fd9c39d84ef51b7a23c18150164a38c3130f084f52633654a6168edd96d15db2c689c9cc3aa2488d2ed8cfab5b44e910175f12d8813d4399de3f6aad5d4cf4ffde99236ef80f11124cfc163219e61b88e7d8e061bd8e1466d545d076fa6388faf5f338be301cc811c8a4c79edbc8deba3aa1f8c808324228ce481c719aa5217294d6a7732f4b546b828d34508581af3b55cb2e11dd4e0060676a1da5616daa362d78ce3f545b2c4e75c872f6a2df8c6af6cca9f10975eee0c0d867719988b6819feb8b59aed41990aec4fa683199f54d4a452a0dafc2dc18b11", 0x1000}, {&(0x7f0000002d40)="238e0ea3f49ab117a402de950f", 0xd}, {&(0x7f0000002d80)="f67b2eaac76549e924596e897e442a88ca7bdda46975820f83e4fe7c9c68cf2795ed3c35047a3917efa8e892cba882c5a46fd91376c276d1959f7cc526e1a94c3c41043d2f9f528ed52f5f1dd7f1fbc06d53595a4e51e60851d4efad5d0d34720646ff2660ea28423519af21ebe639e5693628b4b7f34cb8b9de8011de1403344f4ab026189920303d95a53ef8e36cbfab7225b8f02386bd4a680f8fdbce0bf4efcfacb3272e17c75611cdfd993dc60b830ebc0a4f767befdd395020ff93b2", 0xbf}, {&(0x7f0000002e40)="e41bac72bf86eb0b9e1d1b9e6ea6ffe7badde79cfec41c2fedb27d1371f27aaef776e17000f015eed58bee84de9b00059900d9f0fc88a531e0dc716454c19d84c945c1f1350f9b80a6f1e59c13d28c18c2d1d900651b366c4f2ed6d4f665dce184a3259500a218f2e98fd40e01bd7f7dd02e42c19d5369169e5057b3e07ac9cd6a69034bb2c9e0ba3ecd4894bd6c16b1046fd6c6a6", 0x95}, {&(0x7f0000002f00)="f36950e69fbdb0e1d2e2af22133397ef909dde7dc54f2655c6d9e9fe6e1794ecbbec3901e89e", 0x26}, {&(0x7f0000002f40)="59a53be973ec1e28e17acbee70492a7719c3b45cca54c66892cbf299210e3c739aaa1dab9a918305f38685a4dfc33fcc95465d1d97b967359cbefc5e656d3c9d3a99559253d024a6a47e070258eb3345434e3755c1526d27286a948b2a33eb8a64fd741d81e93e", 0x67}, {&(0x7f0000002fc0)="452d1c4492d744e058a2f4a65ca7fe5e338c36b6f3baf5b3bb0dd169ab38577d4bba6b9c40e7a0d1a4e77ac25f670278150741cb", 0x34}], 0x8, &(0x7f0000003080)=[@iv={0x28, 0x117, 0x2, 0x11, "fc7924785cb44dee8ef045fb825bdb30ee"}, @op={0x18}, @assoc={0x18}], 0x58, 0x800}, {0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003100)="b0c1f5c00409d7705e04b56256ccbf504e673f54b3e7455ccbd41fafcbc9c8b072ae7b6e69388e863b5831319617956c2d06aea55b3d628bcb5322155ec07c7e8795bbc78c0d620ade1b1c0d7e1269e44ec223172ab14e68a6b9164232f9b4e33f84c7b307756796c2eb9025fc6e80316300baf8aa25c3652d806e9f52b069882183f8e2c89b95f0542de50e4b31503585b9813b51a39c5a5ddc6e689356f7ac20", 0xa1}, {&(0x7f00000031c0)="369c58a37b88833267e9f8ce97a03f391debf145fe72f720f8057359403c253e104572fe0a6c2faaeb0ab9cc37ea30fe5e01805c9413912ad386617d83a0e7bc06288530b0cc9a3d2d2b66d7f670263f693ce8bb", 0x54}, {&(0x7f0000003240)="cb45dcba3deb59bd169220f6d42c657c6c40cb6107131415b65e89d21c324f3ac5fed772b035eb7a11e1cca91635cb3a3be53719f68647a5e04b4bbc31abd159d44a890124403c076b24d90d90ce8cf1767f745fcdd63a7636905a77", 0x5c}, {&(0x7f00000032c0)="cee6ee3951362de37f8f2edcb6bd3f6c5f879c59ed1e3425238464e8474946e5ffc4bdecff1e0fe0c50a", 0x2a}, {&(0x7f0000003300)="9c4e2bef86343f6c56c2226b966bbe03ef96901658fa6a5a31af51a7f1857c1ab61e113939bd5abe8a7712a5f8627310f34e98331ec3ebeeeb541c451ffd5db7878b5b908fd95f3b10183d9b8bab4ce2ac975fff827b0fb15d4a3fec89ea9246c3abcb68527c40ad89e7172c12f0f1b3ea2e24e91b276ce7380c3b9e4284fb142d9c35955072a183b89c1ee5f4cc85dbec88e7734ed5ec03b8855ece80539f7173eed637b4885d3f75294bf2bcdd3494d9b2aedc37b40ab076aad33634d191463f8d870147b8fc85d603bace22c8f82b8311b1288bf7aa160f8ecbfb7b3f68cbd5d0c38d25b2ad899f9e6c37", 0xec}, {&(0x7f0000003400)="3881925e1b2b50640960cdb0948cbcf26f83a2781696db52592d24bd852048808cb7f071414d47b0bef3eb7ee9f7a4cec8e20bb39e956a644fa8f4d369d2a3d3e5c06f35546c32713efe0e3ec6ad6dca0ad2dfdfbe308c441c52ec0e14ef45c0c2e508fafbe33f42e85d93111f6326413d37da7c", 0x74}, {&(0x7f0000003480)="cc443617cb7a3e2c87eda3a01933fca873eccd96bd6c63af49952e72b25651051f3a7fd84b75bb2d7641129f94568d56e6fbc4f5c25df6393e84e559b7925e588eb83ba2b65d2d81d3fc05867f010a3be9dbc2161007f8e4626544a54deb09631be1a7e6d113a071ba4c2332ea524623733a7130c0d06043becd57e88e1e695659b22923a38259041284fd250a898bfc255ebf8a187e18ff208b6e4ccc9901626a5b90a77291e0d779241a55fb4d611fdc769a69", 0xb4}, {&(0x7f0000003540)="fa55105a43e1e7c0c2a67e942d62b47a511c9bd60cd9998ccfbc9a7c8c736298ae5a91242dcfbcf0c52090732431c22a96b51350b8dea37b1d8c622c33b11933f0315d1110f7812f22ab98aa7ffea88b222a31d3c7f1d469b50efdf488bfbd00bb473d0cb5da52f15667fe64e03cb5ced7bf3ce3c7a6d01a3cf40b8e9c1e6b7218e5fecd6e30232fed92f61301904d09421ceb1b44583a0d6e0aec037a8f3f47c0c897a7d1eed17e4be9", 0xaa}], 0x8, 0x0, 0x0, 0x44004}, {0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003680)="e7e958c73bc5e8a72cd68f16b49de61eaa553f5cdcf3555a123787f224d5f9768572d45dbf11e93c9a870b7dd55b4d93f93e1c29044e0c13e00663dea762711eb8b1a15642055ea5b37955374ef0a225d8210c6c6ddf6bd8b50d6028ddf4e21df26b9999ff4c3a595c38e9c4a7d90ce7db238348fa0d55cf805d23b9be7f1c0538b5c9cf75", 0x85}, {&(0x7f0000003740)="b987e9b9d261b37ce84d835144c8e0e09e842869f64c5aea0d3c8766873fcd04b7f2c7f19161d3a108ac410946856295660ca2a7e92398e1921bc285d65d5e5946f89db10db033dbca06c769136372d5ef892521f4744b7f54c697b3a3efd9b34004cef5cd6ccfae6c38c105eb7af238b7098046a6d140", 0x77}, {&(0x7f00000037c0)="45c0e06d32b0ca2c395841410edd98877dae5492abe36c2198ed0ceedc6a03030dd1bb35810e95b5eee520a6a9f57b0bf2d668fafac4feb0971276b9beb2d89f8b0833676aeebac7d7777e181cbe41ea9bf49d66789816e43a269791af707dc1af2ad5c4381d02d9b1e282e207671a17762325fc719918e75167dda6fa975528f01d4a5d77b05f28d0b49996f840208eb01630945b451122b31263cdb7c4d72c2f6a11076e5f75cce6dde44868f5c1191620f256fb688043662a8940bb64c5357cfdf90ca5f3088a3d65d180d8ac324afa6501f4e9c18579aab6e4fde191eddbfd4899350e0b806f88cdad169e7c531cb76c1c58fed7a7c8c38cf589b30dba211314f642e1f09c974635157e917c638d6515da1c613e3e664aa4cb5a270caa06b7a1de4224a1f76eb2e5f64f0bc785485c48de2a3f6e110f442d2ce16e419c4cfac354b3e36e86d7f3ba0a60510b45412ef31ba8b2bddc9d4cea0f1a9e03a79ab2d7ba850da46ea6faeec37eb05ac6bc1e8c1d2a1e4a558accd5b87c588ddaef7536340e380c20236427c32a3af3d57251f46c567057b7c30677160bb4b1f2c2e4f31c8e390fbf6659020306f290e6e3989d4a7ce0236cd5f5c4d2c6655a615bb3156c2daf57a169080d0396289788497e760a4fdb26502b43fbe4ee851162fb196fe4d06ba2486f327d18977acadf702c42107a16ad8fa9d97f190701acb8da823face95db5c96fba55eec92abbb9fb2b5a9959d748fc3f3f2f59ae5f249826133c723975a836dc175855fe35f1127170ca045118142b1c8fa65941ce5f8d1dfbff38b8dd8072e0051299fc8fda7a5d52e63e46eb9a77061e9a8b4ae018cb8b020e614e597dea15f58e2c1df7368b2549076965697ac6069307dc9fe8b35ed38ed9c19f38b4ff436fed7b6271d498ccc5dd302fd236bdb836dae182dd1292617a845cd6442b1f8e3a858f33c9f69c8eb68259952650f3f98cf194b3767051950e6e61839ae2fd1db877a7d92d8072d77ed811dec7c83ff3d1e5b3fd2d7dbf7866c8d382003a4e20e0dd92dd2fa59f13124a0340157cc4fb82954acf5b51f60edb3d497fd98b7a7686bdc782fdc2c5cefb7595a851def92f9a4395aa2df0f135f924663f4cdfd23aa411af315a916f928c15305bfafb21e093fb56379022cc10ba0a00125c9884b4e93cbdf8be227b458a1758368f8549356cfa9b4d0949fc8d72482820378832be3c33181cc743a630a0dc2bc38c98e335bac1e8532aa13d42c628498d0760e878ec8a56e8676efbba1c6d04000e4ac444719cceeaa40e20938f1991149d590eb172403a338d2354c155962d0e9420c96c794a9f2e3771914e657107673a94f7ede74f70440d3c2d70222c987fcdef6cc9f271f3ff66076fe70eb2e749eae7eca31a950fedf103f0116dd31e44dab7fe5597f7e8468f216784062ed83d4fd4e31efd869c3c5f41358fac25ba29a245616f3b58842ddd5e1e79e468a34500f247013c9ddabd41b5396fac047442659c0b163689ff3542bd8d880270e59cfe426a545dab93d0016f92f952cb8416c0ec415d330344bea476fdfd853600b5ec58f5038a5bc3c509c34527e70ba1006833c771ed95e178406069b96d1315a16cc374fb8e0fc01d453c13ae0cca7961a2327d771f46cc2447f58cf6b95425e180802ac9560a985dc51e6c727ace607daf15602c4cfe8b1b4b59ae56d0b6e4868c7e35bffaa5689664c296da55ced671e1009b8af4c4ef58f76b10bb4ae3ccd133cd33dcb66ed465d3ffd434c53ee1ba80a8a0227dfb17ed0084646b96c9a96270f94538da272ab23d2bb01e0660c3ff8e42cd6f10913913adb1d743fd0da8540ca0621ae6e231b2ad4f369c52f5466a0e3fe519e7f09b073b002ea0377f86747cb4bdebf3c8672fdbe2d09fd306b1fa18c23deceaa77aef22f87e6e379c4a5da13a63c81bfb8541816a45f8731bdf5293e6888f472005f1b5faf93e4c4e4bede03a6e6c839dc73b09b0f3f6ce9e6f0f9c8ea307f7e4465040124cceb80cddd5fa27e667b4dc3e8a47c33a160e118bb466c9b697c4f158a1a7c1acdebba2ee9705e2d39c5f651b535ff18a4f33fb7a701f6fb4f080e2f99238a2055c039f5cddd2c97988154bad56c7f3262d284ee4da1bf811a47885597874f493644e56537e138e591363b82ea5105446b901c3d83d823965bf8379556223ce7a158f0ec7fe948530b5bf80d5464fda21fa70968d76447969558bdae298b91c37444f393f3152fae2ffaef7dd8d0b2b129b7356c4602b7b0955e2dc0ff6514266d7ceac4401cefbe13b7286e4d93157872a93f1c6eda203a99e209f2862a09fe429601660df44dbe7c42d21de46a7ee6aa542c090b18aeb51a4f582d30af99738f566b43a6d5207e201b28ab448bfd30b9f993d239dc13c841a6af89ae30144c1c04d0fc7770d5ccc41f287b66165ece894ea5ca356cbcc54c13240dd5cb3c9abf762489de634936b420040003ecf4c5111277c00ff0f4f4198cee270f44b53eadf824d2f645a46c168af11e31e97e0670d32aed3039474baa512eed379febeab1670e54a64bcb8f86064eb10ba25baa9d0e4667fa8fe3010257aaed9cdb260956cdd3c68c143775520c45f40b6978e51fc8330f4c0d9f21d60fbc6e4de117097a8641db8345971b3e47d0d8e4c2201616d3791abd2449b6bf1cdac99918b099b85373c46d28d051d90805251d6b2d63b361fa7806f1e2af5cfb4c8291a47d58fa125c8340d6548d7446d5cb2aeecca360cfb18ae533090f3cca92d7ad7403e41423ce49ac5d825049f15f03a1c4d473c34db2c615a5d95eb1462f7796c5c5e2b35e2364a83903939d75ef97ce70ca6bf7995d1583974d89b6226479040501c1a0a1e0452fb26f6b7f5740d6db7b7866af8f10d02962e11dd855907b38ae043bf23b02046d9e567111a0b2d41326b880dde12eb5669d370a978425e7d495d2a17ac6f4143517177b826702705a0c0d88dbebac11684b9551bcea51dd8b4ab2bf29f53d7af084e33068118296cf433572a986c3c5a3b6dbf30375ed370b21a9c17f17bfe90405874512b72a3f3e96bac030c1bc5b28a4bf75ba86b62eb0bf2e91b8a705fd8d269012aa4c692563446597103f7e92960886f9dba217c5303f153a104b83f197d4f11cb66538e07ab2ec868d43402d23dc882c3253f3e52dabb31719d4a3b0ca636455a1835403e205bc6036df573e7d56fe2de2e5a3204757e459b252ed03faa4157d94eeddb8f50135cbbb34741a21437ab1021ee0ff06ffb7846b707b9850ff2fb52cf0d10691877c8d7aa80537611a63928435be88af5fb16807027afd28afd3fb3a9b9429c4d95ae3c3e29704053a1b2108608e01b50f3aab80f0bea2671ca7abdcae0883c6f951238244e27da437c09d91870eca36ab2de6e9b7eb6a117f4651f94226f8e956cc46cfc57fba78e70689acbda4b70a54a0118e0488386f602a1171f08ab19829944e69ebb641fb2c58761256aaa7168a5dd01d620b01d83d13c531bc8b0c9750452c0d99663125d19ba039812ed2092b4ca4da0107ad46042e5124477901405b0f7689044caab2ad02b150fe15e5a85f6ea6828362a804d1d47264b8b0ce0f140b551963edc236f3a3524837b67b2d08e559ef798e1077a393b4a2611282c3eb638ac21e46913e3a5de0fb4c7867dc576a2fdbae0cad6074bdf11873dd7d0969bba9015427fe9476298a2daf14983ed69afb85a427b6b664a58a885937698d3d65da3aa1d0e815482a70017d294121cb25536e8449400c0aa8d24e446b21f0ef3c0bc8086d42075889dde62f2a0b8ebbf8370dc3d9b4d1906288f0bf2dfeb317ed8bfd3a25e083f4b1e70bc3de060c4ad8be33a766b6d6ee6cc087a4ed69ea4c0d0756d137aeb8a430173b1ee3862e3121c443cd826a36ad26ae6753c06d78c3fb8d66965c30520579d8e7da7639b07eecc82d8ef1d9d142bfbcfdba23792a1df67ed6011608a09bcbb0148c8df0fd144e1b909d657597280069b77118313e199f62ad3f96a1fcffcfc608a646402e76f27d6f75df10f4a2900f644f505a7d88c7a10f32dc7a046e92a0e6bb9414d4edb36e0bee5812a2a9e3ce68fb5819996492463009ce58fa2115b7a969583e5944c1d15aa63a21d7450d4770d283bac8ae589ffb63bbaa6a6fad3d17fcdd0a71b247331e42f595e1db43b4797a58fed4d9afbc2994c7deeefcc17af97ec0e30dedb37e8cbbdc8d0d2ba09e951447a4ff6d7e6af316150aee977bfe57866f24151822e6bf324b491dff0629696217ccdcfa87f189b377fb514d36c35c0c0acac218d58981eedecb907c26fbd9729c0e5354bd56a3d3d0fd0639c8d203a8513a0387ee03d0d102ee35c4610d6caf89154142405bb506de8b4732c839fae643115c8abe6973a4dcecb61b50f40d81a7869b2ded8b81bc2081be0753e0fd8a2508a9dc3f4a3471eae14be8d107599779a338d032dcd1e9a09f0655fc2bf62f7685228ebe81cfce2a35fc9de5c818cbec1c29bccf93efa137785c3525f893e94a501232ce344df8112c2f2850b5a0e569d6742d5b489736419a0c1b6561538e1287d56fd53560515b7e43947749c420d84e1073c7ee105d93e1d527abb21bbe55797024b0dcef4c6611159779ba42b2a860035113faef2c845291a7dcec58937d9688d53185b55378499bb3c6277289fabdd2afa4d2b3b7df52c0526332bfa78898493c02e0fe1a8aa7db62fa4076f1023b76008f44e5188fcb9265ebac2c5025b75663068419376115386dd12f8dbb53cbe55808250fcfe53ef22ff448ce73bb680587e61b1a8385f1d47db4419b20f35f16905b055b4a7a9b8d1798f583d78866b776fbd37a476f47b716cfb3ad1e50b49eb1e16bb166601735cc53ee6e6f0c0a931c3a3f09ceb23c1afc348a47f433b7e8d9e3dd771a72158ab1c93761450a4eb4379b6726ff48e433ffd9de6cbba7bbec67b6053f2eaa55af694c20a31c6f3182d24522945a8f7b26d27f1c94af792e17c8c4ac30aae6d080b2d481a71fcd2a124a94323de4b2762dd55c4666a192427038815b2a8d3267365d3ecfa6336d08ab961e219e9034dc8e60e0f847075c87f5b7a706071325794f576141d6e6152753a8f73e772051adca989f450e342d02a1de6490479132c2526f313d3b988615e4bad19a03de8b75bb291bcdbb6a821ebcb2ee99eeeb708c3b9d4fc7e9ec5b06e6f4a43be65e38a05fee2505950cfcd9b907c2b0da58d2a68a8f50baa9f03fbd3f5d1b65109e53263296b0617015f5a73880a7bbeb2a4070337edd22146cfced941824184f520bcdfe5bb922dedae8332ef7047d50d79e5f4a301bd00dd340ca3aaaf975c36964a6e3853164ec8f3898ee526624d3dbd2eba05ccb12f5df0f8b60e60d02a441d70608e168757710e631477d933b688f7ebe819346bfd4792967b2457de1ac75fb75fbbd96f2f07e818d7c73843e8f32820a042a230ca6ac80ccacb68496427d243b10c901b4048f46288877a3e66b0b72e3459784e7e87bcab5d7d36419f3bfdace862886a3c7364668b5899d9541e3214bc81e6bdb754402cb5acf93ecb479934bff35edb6c8fc27d107664999447629cb063b8a4165cab4434ccf9bebe84b6e0b145bbede75fdbc150537721b24f5cd554626df8ee53b8dfb2f2e9bb23f612c14fdf7c0785317cc138def2d7f62b9ed88d597413d0a67419fba2ada8eb4b02f456609e3b8fe5e97ef7c2c06baec3370aa634773afc3f899cbb528817fe39", 0x1000}, {&(0x7f00000047c0)="7d4e703072996e86544b3742d165751c7c218c9ba816faa78e2d4ba3ab173b2ae6b61a37b8c3515cf785abd1046cbaaef37ee4a1f6fb0046fb1a628991eadb8ec7336b7ac1fcaa8957162b531395db4edf54ab8c3d1a958631ca9e1cb1d71a0c8a1edfb997ace3aee692e8e972617112bb4e82ce7343ef1fed3bb2c3576cfafbcb906a2e2c1cc087301d5aaffd9f2e2a35087c49cee238b79fea4c0c99613e4639580987582cd6611a15fd37d2b0dc06a4598ea76fc0390dfe6d185f9b06b787e61f49af9675a4aae0dc87a9dbffd57b23dbfba64ae1ea318221b13dd9", 0xdd}], 0x4, &(0x7f0000004900)=[@assoc={0x18, 0x117, 0x4, 0x200}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4}, {0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000004940)="73c978117493f59a33123a8e3b5b99fc24c5cd46c9a34064b6cb506fb7ff4072b00896cf2d628d455bd70e4f7a4a2c48ea18d502581c900bde2ca4b6f86bc466fc0c8ee1e1684fdbf20109cdad947f8ae56d5e679f46bfa5e05a7862c96abab3b8e92740707084f5696466ac1d9ba12f0c5f658026149dc03440f51c274c2d280806c5acb0492ac12dec2a7e8ab68b1ab6583124a6eb780c3c9efb5ad5f638e78bf07981828240513abb5048c43e306bbf32dd50fcc4c89698be88d6", 0xbc}, {&(0x7f0000004a00)="8a53975c", 0x4}, {&(0x7f0000004a40)="7f983f8f0f95010bd54c92a7d7c13791b0c3396ea4d79defc32a51a41ea7cf4310bec8daff488b69c8f161951bb5f89f7666078f14", 0x35}, {&(0x7f0000004a80)="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", 0x1000}], 0x4, &(0x7f0000005ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x5, 0x10) (async) r9 = gettid() sched_setscheduler(r9, 0x3, &(0x7f0000005c40)=0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005c80)={'wlan0\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000005cc0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000005d00)=0x2c) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000005dc0)={0x2, 0xf2f0, 0x49, &(0x7f0000005d40)=""/73}) (async) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005e00), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r10, &(0x7f0000007e80)={0x28, 0xffffffffffffffb4, r11, {{0xca, 0x19aeca69, 0x1, r9}}}, 0x28) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000007f80)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007f40)={&(0x7f0000007f00)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000007fc0), 0x87, 0x400000) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000008000)={0x1, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r12, 0xc0106438, &(0x7f0000008040)={0xef8e, r13}) write$FUSE_IOCTL(r8, &(0x7f0000008080)={0x20, 0x0, r11, {0x9, 0x4, 0xfff, 0x3ff}}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000080c0)={r4, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) 1.134011249s ago: executing program 7 (id=2404): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x7f00, 0x10001, 0x6, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0xf, 0x7e, [@remote, @multicast2, @broadcast]}]}}}}}) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="2e91930c9203e7bd3f6818c05319e7d2430988ca7ed902916e2a842ae4ae7765b6d590857c7d6e49315d24fa8a0ddd3e7337a8e90c19cc1c5b3e5fb960cbfde43ac01aba816bbd543afdd3848e59960b7971d67213646274ef0bbd8505e4a1a23c9f5e356e0930378e7975a1934c9849c49f5a9e3ef4f80d", 0x78}, {&(0x7f00000003c0)="eaf57785d3ccfe4f2300a1b964b23a05a80cafe99bbe24b347fd0945bf73b3ca1921debaf96dbd0014ae292c4b60991e14cbef33bbe6eb0fec0fb76ed1f13c9a5b3ae1ed29cc70b2e325532b5b6f8971b2cb3dea71da825ccdfbd22f49f748d1023fed0126c9410aef225089f873df2d80f7c42ae8b06f5c32eff381021e18105d47e42d38febda7207e664f56dbd21aa865ea8584e253deee060a909df8d5", 0x9f}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="8389874af7a15e50d2a10a788471dd4d2c4c8d0913c9fa9e2125d4e1b06e7a0b49d22d18c6994d63ff937f4f868aaaf75e860802dbd7a03a3f5107ccd1cc06283a2600d3a7c45a6c0901deef3596f9e5cc1e0caed22c777f5361e6422a9d2f8551f6a7dbc3cbfc89f57ddcab6173a0bd7ac1e91b74219a2f1e82b144f2a99b70df9ecc", 0x83}, {&(0x7f0000000740)="968b41398f30dcf60d38a5bbb2b77dd8a950386afcf755483ad7782627de11131cb7ef7c061cbd19edc23d663374a1c80facd0d9272ec45083c563588374ae3d00883fae99e873cff8489e0494d46d9155e5a844f429969d58e2e3", 0x5b}, {&(0x7f00000007c0)="cf4c301f3f2c3f66cd2823697104fa47", 0x10}, {&(0x7f0000000800)="ce3c0dad8a1dfdbcf07b5b7a122a3605f090c5750cf1ebe06afb095c544846c55ff2", 0x22}, {&(0x7f0000000840)="b2891aeafd15e84c2dc710f8a866e448957a879be904cc9bd5c6adfc8d2cdfdfe9a59f75e69242eeedeac4b0f2ae22f9086c284109274fcc4459a87fbf345c4e79a748c523b690e6302ef9725183aadd8afba06f72531c711dcdbb1ed97f76508b8ef49782a5aa998ad0548922a084cf5d0306e2540cd6cb42bb7c14f1908f6b03f79f72222a3f940b5cc6af5ac807f5cc6e0e11c6a380326c24586840da85caaf19af12b409a5f6627467c58055990b9d4ca53e352a6a0d531ec21f12", 0xbd}, {&(0x7f0000000900)="476e92708327f0da712ac6d8245f3224a21afb97377e91d0620862aa94ecbfd329abb812372ecf31d2b3db8eac3873d912585237367dd20f29a75ce76d1dfbe54bdabee81b95b5d3efac834cfee124cf9105130d2393735e0939a2dac31f2850e6f807e9f4f4e8f68935f98a7288d166fa46d462a6341d1d559f879118d9496eef7df0abca9072466ea2aa7a21caace0bf57f47411b1c0a3af2acd1a9726645a4c0506ea41a06ce30a6a31bbb259cefcdb3586531e8aa785702b0b93da2a6c569b632b410854e07e909d278515d080c501fcdd6c912fd811c182db1911410b3292fbf360076e7f44fe68ae4ee51d86e63e50", 0xf2}, {&(0x7f0000000a00)="9d241a18fca3864731998bb438bc85dd01b07e69eaa90359a2f5d1e954a6372b35de6eb21b7afe422056886cddf273bd5e5ca3e47fc052279a087ced176df6786aa371fae160ab68d3663829951eb690baf2804d2a2f9c9607056eb443235decaf6a226545912b91f30abb6ce9e7f69668a343ab3a59e1060286f5790a6178edee3c6c7fab0435981f12ef63b63750bd204748535b8f17568ee63b59cfe8ebb427e5ba8c33029c0626875f6ad942f18afafded6bc02275817c6efad5d3a0f0ee0d3b42a9b866bee79239b7a27baa6ce5607995", 0xd3}], 0x7}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="69eac63dbdefe5a16b40746f9350c5be3edf0a4f41936e0a2a295354055a23c2f92d7d56d63220786afd2e3102e0fcb95615e1956ddb4a14323db7ad92986f3bf3", 0x41}], 0x3}}], 0x3, 0x8004001) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 466.281693ms ago: executing program 7 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000001e00)={{0x6, 0x80}, 'port1\x00', 0x3d, 0x0, 0x6, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0xa, 0x4004000}], 0x1, 0x40800) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 465.115856ms ago: executing program 7 (id=2410): unshare(0x8000280) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') unshare(0x40000000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2000000) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff08) r4 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80, 0x800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) 462.423699ms ago: executing program 6 (id=2412): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r2 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x20) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x92df}, 0x8) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r4, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) 462.098386ms ago: executing program 5 (id=2413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000010c0)="fa", 0x1}, {0x0}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000080)={0x1}) (async) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00cc35e0d76e7e3746749d8f2a1aa3216fcc5b3f5712ce3dcfc1cdafb192e2e11ca45ce354bb09e6317590f4d2de0b663d92ee66a1d48e33b26987b85c7c29c762e308faa7542dd82958a500b8e19eab76dbafa966e6bb785594c83b64bf1a39ca198ec517fdb6e0dc1112f1bba257d98c398fcbd8e5582dee669a94869d358100c935746d"], 0xc) (async) write$vga_arbiter(r6, &(0x7f0000000080)=@unlock_all, 0xb) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80081, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='environ\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r7, &(0x7f00000014c0), 0x0, 0x182, 0x0) (async) close(r9) 461.839045ms ago: executing program 5 (id=2414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0506001a00000000000026ffcc1653efcc4d4ee0fa092ab5000000a742660b000011a36996a292f08b098352b46ece6389d52d12d3dec89badca6cffbce029950f4dfc6908fda25942e261580a602f4c56da569bbc4d70622369965669bd00f9f1b291baaf811b86a9438a8983277d182747e512ffe8", @ANYRES32=0x0, @ANYBLOB="46060900000002001c0012800b00010062726964676500000c00028008001c0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 397.737109ms ago: executing program 6 (id=2415): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x3c, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000002780)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f00000035c0)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 218.257034ms ago: executing program 7 (id=2416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90e46}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1, 0x0, ';\"'}]}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r3, 0x0, 0x0, 0x4014, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3ff, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1c10}}, {{0xa, 0x4e21, 0xfffffff7, @remote, 0x9}}}, 0x108) 217.95739ms ago: executing program 5 (id=2417): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x7f00, 0x10001, 0x6, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0xf, 0x7e, [@remote, @multicast2, @broadcast]}]}}}}}) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="2e91930c9203e7bd3f6818c05319e7d2430988ca7ed902916e2a842ae4ae7765b6d590857c7d6e49315d24fa8a0ddd3e7337a8e90c19cc1c5b3e5fb960cbfde43ac01aba816bbd543afdd3848e59960b7971d67213646274ef0bbd8505e4a1a23c9f5e356e0930378e7975a1934c9849c49f5a9e3ef4f80d", 0x78}, {&(0x7f00000003c0)="eaf57785d3ccfe4f2300a1b964b23a05a80cafe99bbe24b347fd0945bf73b3ca1921debaf96dbd0014ae292c4b60991e14cbef33bbe6eb0fec0fb76ed1f13c9a5b3ae1ed29cc70b2e325532b5b6f8971b2cb3dea71da825ccdfbd22f49f748d1023fed0126c9410aef225089f873df2d80f7c42ae8b06f5c32eff381021e18105d47e42d38febda7207e664f56dbd21aa865ea8584e253deee060a909df8d5", 0x9f}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="8389874af7a15e50d2a10a788471dd4d2c4c8d0913c9fa9e2125d4e1b06e7a0b49d22d18c6994d63ff937f4f868aaaf75e860802dbd7a03a3f5107ccd1cc06283a2600d3a7c45a6c0901deef3596f9e5cc1e0caed22c777f5361e6422a9d2f8551f6a7dbc3cbfc89f57ddcab6173a0bd7ac1e91b74219a2f1e82b144f2a99b70df9ecc", 0x83}, {&(0x7f0000000740)="968b41398f30dcf60d38a5bbb2b77dd8a950386afcf755483ad7782627de11131cb7ef7c061cbd19edc23d663374a1c80facd0d9272ec45083c563588374ae3d00883fae99e873cff8489e0494d46d9155e5a844f429969d58e2e3", 0x5b}, {&(0x7f00000007c0)="cf4c301f3f2c3f66cd2823697104fa47", 0x10}, {&(0x7f0000000800)="ce3c0dad8a1dfdbcf07b5b7a122a3605f090c5750cf1ebe06afb095c544846c55ff2", 0x22}, {&(0x7f0000000840)="b2891aeafd15e84c2dc710f8a866e448957a879be904cc9bd5c6adfc8d2cdfdfe9a59f75e69242eeedeac4b0f2ae22f9086c284109274fcc4459a87fbf345c4e79a748c523b690e6302ef9725183aadd8afba06f72531c711dcdbb1ed97f76508b8ef49782a5aa998ad0548922a084cf5d0306e2540cd6cb42bb7c14f1908f6b03f79f72222a3f940b5cc6af5ac807f5cc6e0e11c6a380326c24586840da85caaf19af12b409a5f6627467c58055990b9d4ca53e352a6a0d531ec21f12", 0xbd}, {&(0x7f0000000900)="476e92708327f0da712ac6d8245f3224a21afb97377e91d0620862aa94ecbfd329abb812372ecf31d2b3db8eac3873d912585237367dd20f29a75ce76d1dfbe54bdabee81b95b5d3efac834cfee124cf9105130d2393735e0939a2dac31f2850e6f807e9f4f4e8f68935f98a7288d166fa46d462a6341d1d559f879118d9496eef7df0abca9072466ea2aa7a21caace0bf57f47411b1c0a3af2acd1a9726645a4c0506ea41a06ce30a6a31bbb259cefcdb3586531e8aa785702b0b93da2a6c569b632b410854e07e909d278515d080c501fcdd6c912fd811c182db1911410b3292fbf360076e7f44fe68ae4ee51d86e63e50", 0xf2}, {&(0x7f0000000a00)="9d241a18fca3864731998bb438bc85dd01b07e69eaa90359a2f5d1e954a6372b35de6eb21b7afe422056886cddf273bd5e5ca3e47fc052279a087ced176df6786aa371fae160ab68d3663829951eb690baf2804d2a2f9c9607056eb443235decaf6a226545912b91f30abb6ce9e7f69668a343ab3a59e1060286f5790a6178edee3c6c7fab0435981f12ef63b63750bd204748535b8f17568ee63b59cfe8ebb427e5ba8c33029c0626875f6ad942f18afafded6bc02275817c6efad5d3a0f0ee0d3b42a9b866bee79239b7a27baa6ce5607995", 0xd3}], 0x7}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f0000000cc0)="8b6b12f2b36f6fc5da9e8fc782b33eb16752dd5261bed3b1e3c4c6340dd68c5301176b9b341dac061f06eb0742743ae19b584a46fa8506e47602a7dbf60060f093239d5abafc236572325d90606b146b14ae0ef5a5f558f83a7b8c6ca693dc16d27ca81eeadbf52796828f31768acd1eb293a2086ec6fdbe2438790188e8ef129a8d943b4154b154917831304813a2e4565de3a1837ededc634c3cf6c72960d6e24b848ac8dc3f7dd1cb1c850c600c87d642c3c70d2895044b2e1af07f06a285d34422ba666d7f28bf107d9b1f4cd9043ac028743975a4b3eb8c5f1af93b10f489e563024d747dce274104417feea1e81b9e465f5456aa83224383707cd8dcf859a85cea35c79b72e84bd12ac40f1c82bdc6c5e2db9e2496ab952ac3ca1fb96538c6bdb7945248ceaed02f8657835709c2fbec3e3b250bba4262b0a36d015ccc1a53fbc5f1676a675d0b72dbb7f4425d1307e661ffef657b87970a96ad482687890f1c58b7a518790e43bc4761d430983668aadb89518f1807329448b9fe58298cc308d5f0c8957bf5d423e6874e0fbb13921c4f5653e6652284b1172fe3a78bf14f256d694ce049a74d16b5c19df0aaeb0542ff7881f37e0e9993596c0d8cb9ec8fd860f12f27b36550137c976007a464d6c9f28eb94e79f006af8de561ad65ff879d6f28dffa823dc6d98b38aec6d40c37bbcb836ce8a5072d8e12266dbc66bfcb3f787ceefe68a33163deaa2e45e8f17eef13d9a3942ba25a3a826dc2446ef7eedcde9adf1f8e9180fd3a42cb9de45b512c3a9efbd74627b5f73d213d1800d617eecafbd00ae3be06da53e7474715c54e5172a342096ee52c406aa1abcbcdc826f999d16eb54019165f8c49ebf98dd967617d168b57fb3ed478c91ded2832afa103dff83558af1ff239d7bdf4dff482d60a035af7ac0b7e9caf1ae6e73ea2deb0ecd74c7ab959987f141283444ebc3aff44cb62c1441bc433b9bd489eb4c32794242dda6ea889019dcb09e43a2b3e4d8f974726eeee4cecdf529c648672a231f8120b46400edff12236f7a0884503c2e32921ee06bb5ece79bda1b49985a92090c183a8c3eab97024b29a7333f493a983924da011f24997be22e3e44db3192d1439568058cb543c20f559ce47c77e2f206315543f920a1af19bf67653bf27c9be5379ae1ccaff882cf7772cc226349f1d774320a5542c274177562cc33fa1bd213987393fb4f1b9b7570479bd2e88948e08d538f50560d644d929ac02503254971ef6d05f5905cc6e5bcf4d75f7ea2e9ce03f0404ef9a11d096a7d81ac0f9477d9cfb6ac55e0a17f178660e284452a9c512ecc7b2f540f1a216c15aa9cbd7cb5758fb717b3b535f807a1b917936ea2cd26fad7f6a87b0bb95e684073c64b8025564880fbc69e42010c5daea734285344e48695e2da63063a33a66da48143752e750926ece5062abe52f7f3ea54371ae638f3a059b41f853047d1fa7ffede02282e3837cc8c5579aaa3ab943ebf117f0f707c80fced2bc5aebaddabb7bacc606cd8f8bf44ec1d0d1f37cd4a53d27cc5e858ad7e597c1d12c163f1ee4e829e5ffdf95f4311f0ef85e8b1f228571ab3120ad34132acd6a574bf439c5c7bd2c2576706ca3b4578397e1d37e1cf44ae6ac8380d1bdf1a7a580bbc4ac7c0c6676ce021c67db100ee8ada1eb247dee202f864899f03f3e74334337575b1911d9f60d78a35ee35a7cf20e57512f5fad5437a53f2cd46e86c8777a27d74a9809b9abe68c30b168e2d719a6a3f56da378e730e78e0c58be7fbcc7e881cf2aabc129152136212694e317873fb078b5beaa29044f3797b3b254b2e9149565a2781ef2696b05d2906aa9ad2442961e0e625ad33e3a6fbac90a726b14b136ed479f40b58e230f02024e081daec3df91e24e63017f6fa92fee7e92b0ad90498f94316d2ae6485c2009329acf5132f6dfb1b251d97cd368912c35062368a5b6806e036f388ad9465903b56bf622a677414e070d8e3c5b45da86c0e346629e887cc9f570b471b06ad7f980d9bca72eadb23bd83f329a16eb79608781653b0fee184250402ec1eda78120297ef365edfa8f5cd4d740628b9c817897d860ddc952317bdc62fd868b3c5d23a4cde0ce43e983a6980e00a3d9836c70b56cd2722b77399c46bd39e078642a08c383dec6dfd9f93639d4067bbfe6490ded47d85779e2c63a10677601d0a68f93242d8f064895108033f155dd953d757f0fd5305ee0d87ca3169ebe8b408fd343d8c6db4f34c2fbc73212833bc271576c617caf4d116719f7bd977738d257f9c25c4de2135975790fd3d6b19b94abec5b0ecddcc8a43774fe59b23eba9f554c14a9fecb7b0350f03ab2ef614f7bd04d2113833db27c91251c0a83ba544329d5657b0fa416339105506e329780cf36f5aedf189b8ed345ecd020c1691899f5816d91a7905d9a9a0e3ac7c2ec60e19bdc944bf6e94ab1e2335423920365d8fc08242dee5cf7bf9cd14d702649aa0a0b0e1a144c7360890795ffb2fe84cfa6f6ea4880c4548014169bb78b66edbf2911546a4637b721fe3634124813cb14f363452c686a3ae7afcb1125e7649f1b40fd7afd19eda40a2e20e0a98aed9d3b69c5eedd62e7efd701d546201cfdcfa5194ce892c2948ec3d004eca7895b28a572e498ec4f7803eefd8a1cd7a2e69cc66f6a0aab160f37f7a9be18f12dc5401ca0663b5704bcf21f5fc345d6582cf07829591e578615127db2f0978f7b687d855f7ed29b2a303101910e74747f0b0329fd731854f82bbc3460c32637bd9818e0ddef402849af69ce84b2f69f22f93d3c812b22b773b50f35131a0911aaff4dc5a63b9e910041198fc2f3313b61b1ce5eabb382c9077351fa803b66c6bd2498fa15e1058ef3d0f4a20e3c436d3fe5999aba1f5771cae500646f2d59ecf8b928da67aa327ee8399da51c8d9309e9887556b074dcdc04c848033ae046ee88e5eb2a579d201fcbf9bbe8f3b1c678b78a9177bed635a44a355a1a4e3b728cde56de470a4454ac16a05b6e9dc93a267c90d6e88bbbf1853328d07dd0c4c42c3f19e76c6cfefd2fd9a5167f8dba3f4ce382a3d55a15e64b2d341ad3f7dc675b7517b83008fd9cf61e6264473faeb8c9a2fea340f6b6ea3317d97e4368ab06310bf643d680f63575a1da3f15aad9d2fa0e6e34ac8bca4a4ff525770e05f8b1505160b3dc91cd40ccb53f3013850454bb010c4fc896f45cb1153ef49521e7103bbe1c0611888118fdd8ac8a858c858cd4f955a567310a90e4a68f5ec7e7fb0d642ea8fd32903b8de8195a429aff7d6820aee5190975443f7d75d1844f8750e2b79becee4e52b99909cb61bf07a00c2eb614d18ff63666b8356c3f5a44f088b179773c59376ea81eb6689fb56e31eaf2fdf2cb1607595fae9be3cec259a4d1dc833a47a4ca4cd1e759f06e0f7f48e2e9ac91de342769e6fc171c7eaf449f6d63c93980be0c9b48f349331c0b1ca83efd845944bdd27df1905f8bad26354c2c554125cba316248fa33aac1bc87ccd8583a918a7bcb3408aa24b84d8d2e8d4c2cbffc04e8bd513c7214f0ce844d7d24bce097d42d9dd36af25c7e1c7bce2031d93cf237f91ae46688f86e2473f86a4955b8f47c2450384a0d5112995e1ea48b3bc4a6d113583577132d993105de37ade9a2f5e6ce47e5db3f2019e288f56b5088f1220fcabc04414d63fbe8e614643b98b44696a4b9901d483a17d1d5b3f4306d3ebdbaccca4d73bf4ac0660e1698134f6f15e10d61457c51ae99c6903249b8ad7ebb61aa67eb28bdd97d58173dfe738dbc60baf9d553f28aeec2238714a5f8ed072917d098cc58a06c711d767a3f666e61b54caf77ce3d0ed3e7e8d365a571acadbda378cc716d29da600e71bc3ff8752d2d1fbb32fd21614d7627d98994092b2c2c2ff1428b13db97cf19b585fa2140eae826323e5ebfa134e8326bb3cb339a743203573e2dbd3a64429450ffc90bbe636cec7c08865309ca760608aa831aac767868a98c5faba1576ec69ab8cc41aadcab9a2bec14da2c128fe0b1e62db2b2eec901148764c9e7fa841ce3b155a09c3901e6fc441b4a1c6eb7eb324832e53f44a606f7cd31b1ad25c4e07a2e7c5d0dbcc418114fdaf671f9b3b6528c8648e9825995b436750e5ae3343de0302a203aa86d0d0241cc2f209526959d1fb2fc9ef77b3fafef00fd932794de14012568e45e543217340f27ebf72066c1c582ca7df5d57ae026625028655dd34fb67454a18bca7f13fe627c56d8174c341c095dc0a8d1976c6ff01b970054572fce17b2a3e43a1f6277e0fae54d6fba1e0f7cd06de472e4070be2ede43466b8f42647ab1be0088dd07f0d36b3232f1507b5b28e6fd0b0172dde517086a49c329dd582db453df0e423ed8509d059a4ebe517f4e8f1a6d194577d2886ff1cd1143e2f1aeaa35ac2f69ef7e257165606ffdb03f32eed9e610b01d0baa4428a932bd39c81889e23b0da5730173f02bfcf130f2ea9a821a49dd77046c6ee141b3ab9848a2a6ffbef7917edaa11a43e74c5cd334b80b3116ca827c9069319931c8e1caa014b4bb0d59e2ff94ffc5927aaf96a9218318297a20920fc64a7be72ac6d3e7d59e8c22993d6e2ec2592b40eb23bfe15997f21c35ced74d6ff171055d4202e8a228f971a2153cb7cb0528afa6923db7bc5c704c9cd0c0ab83ed08157665ad6244d65eb321321226bd538f1b1cc2d3a1e99a7e448c983815a51ec2701233190d147ae27bb8ce07b5a2affb2ce0cdc65cc21debdf7715df236bf0150a19f735a61ef3935d3e9dd03c2a62cc9bbe75f4cc7f962b55ee56e1a24cca52ccb68ea67efa41fb1824a8add038833c47ec880abd656b72e0f068c6a56b6dbc896617659cbcb705474dd4eb9b38520f300a3fbecafb24ced5ec4e09daf4263f99eb281a98e88fc2cec2353a46bd440af884b07b054dce67a9066ec85fd3af1998eec9b73990e754f3f5bba2a60d75b29b83662bfbb0392c25473299b195133fd9742e02c2e4fb9a9ca2069ffc6a32e37a58c69cd4e3d1f2e8e8560f3aa7dade5a29f4747ec912ebb531e0f233eb756bc8887cd1caba707e3d1179e1158de3551671faf7cf092ee49701338977fbcce430f286f65acdaa56ec08d144cdb5a3696c31253fc33d3d482a22190c06a17a9e6ae01498159eebfa72a56ddd41fb594010e229043731fa47e9567734e9921f3684fea7df21da2227f824261a8bb54f8ba690afb1e7169320c6bfffab047dbb0ac223b5d5b71c0a4720b56619626dc0c101fd1b83a0bcaacf03811bb8f8591a98a4fa5b26cbd81a7d9cb4d2e55752678932a1b76db5cd665749e513133b61479f4594e0f9aa232b696e3cd333a6137c57f34e2ffe739d5739ea1cd9b07353b0562626d102367bef2cb06724822f659bcb154239913ce8988d0041cb55a33a6d6c590ac09d9602e23c65d6c3f0b87e675d968e5b64a7684793177b80a7a46eb824403930db5066fb4a1a65d981f9696cd24273f56e9983c61bf902458910d3dd5310fe6fddfc20ad89e4fbe3c58ff4aa9014d08e77ddebfc9f1ba5b7949b948a745dd3b5caedd1b03fd4828e8cd908559048b818b5f49cbc9ee0c72cdbbd3bb17b6c74570b7305017298db9e2317f593c623b9585bf4aab06785bd86a344c43a5c7f76f2e80337e7ffbe5963bd04c3abe64e33a0da200dd333a14462a21dda8eaf75bbab75d320404748b2acb87ea91dd0065cfa7cb5622973b743286e6bf822ac62330cfafa986c2c253825b3a59a9249", 0x1000}, {&(0x7f0000001cc0)="69eac63dbdefe5a16b40746f9350c5be3edf0a4f41936e0a2a295354055a23c2f92d7d56d63220786afd2e3102e0fcb95615e1956ddb4a14323db7ad92986f3bf3", 0x41}], 0x3}}], 0x3, 0x8004001) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x800, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 217.363322ms ago: executing program 6 (id=2418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) 216.855355ms ago: executing program 6 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000080)="d4dc99789e88fb25299053e9170c2e6e7c4a734311dcbcf13fa4d0") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="007200000000000000b708000058e90007000000000007020000f8ffffffb703000001000000b70400000000000085000000c300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0xffffffffffffff76, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0xa, 0x0, 0x0, 0x0, 0x80, 0x49, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES16=r5, @ANYRES16, @ANYRESOCT=r2, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000100)={r10, 0x0, 0x4000}) getsockopt$inet_udp_int(r10, 0x11, 0x67, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x3) sysinfo(&(0x7f0000000000)=""/196) ioctl$BSG_GET_TIMEOUT(r9, 0x2202, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0) 210.233503ms ago: executing program 3 (id=2420): r0 = socket(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 209.460698ms ago: executing program 5 (id=2421): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa00000000200000000a0000000000000034ea684efc4df5364d90ac958d91c0f6684c1bc0eb35383399e0a76cc4b6264fd20787d3a6c128336812477ae048ad81b859ef7eddcfcdfc1f1a6049aac066decd8b0b23f55ec0d5d0fecc8fe0f0fef3b5f1dfa709c66858e7ecef38423005bb2a853f31511f4e5c3d3bff7cc9f6081ac46653500a5c70dd0639b8ebb79785b85395ffa2e1309ccf6a71c0fda99baeb24278", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000000146c00000000000014000000000000000000000000000000000000000001000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff0000000001040000030000000000000006350000020001065000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400637263743130646966000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) 209.172132ms ago: executing program 3 (id=2422): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) r1 = io_uring_setup(0x7858, &(0x7f0000000580)={0x0, 0xddf7, 0x10, 0xfffffdfe, 0x32d}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r1, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x101000) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000004c0)={r3, 0x80000}) add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f00000002c0)="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", 0x125, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x101c80, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8f) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x141000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x7cc1, 0x401, 0x1, 0x6dc1, 0xfff, 0x1838, 0x5, 0x3fb, 0x802, 0xc42, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x7f, 0x0, 0x10, 0x8000008c, 0xfffffffe, 0xa, 0xfffffff5, 0x0, 0x3, 0xab99, 0x2, 0x5, 0x8000000, 0xff]}) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000080)={0x68d, &(0x7f0000000000)=[{0xa000005, 0x60, 0x0, 0xa92, 0x3d}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004a008d2a0a00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) r9 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)) pwritev(r9, &(0x7f00000002c0)=[{&(0x7f0000000140)='E', 0x1}], 0x1, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socket$nl_generic(0x10, 0x3, 0x10) 151.460966ms ago: executing program 5 (id=2423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000180)={{0x9, 0x0, 0x80000001, 0x0, 'syz0\x00', 0x8}, 0x1, [0x4, 0x8, 0x5, 0x5, 0xfff, 0x4, 0xd24a, 0x6, 0x101, 0x5, 0xe0, 0x4, 0x4, 0x2, 0x80, 0x6, 0x351, 0x7fffffff, 0x8000, 0x100, 0x9, 0xc, 0x8, 0xe8b, 0x9, 0x8, 0xfa, 0xff, 0x7, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x1, 0x0, 0xfffffe0000000000, 0x7, 0x7, 0xffffffffffffde80, 0x8, 0x3, 0x3, 0xf4, 0x7, 0xf5e3, 0x5, 0x8000000000000000, 0xa7, 0x9, 0x4, 0xbd, 0x33, 0xfa, 0x0, 0x2, 0x6, 0x2, 0x800, 0x4b7, 0x8, 0x23, 0x2, 0xffffffffffffffff, 0x2, 0x3, 0x5c0c, 0x3, 0x1, 0x2, 0x925f, 0x6, 0x0, 0x434, 0x3, 0x6, 0x3a0, 0x7fffffff, 0x6, 0x7f, 0x80000000, 0x6, 0x6, 0x7, 0x6, 0x3, 0x800, 0x7, 0x100, 0x0, 0xe14d, 0x2, 0xffffffffffffff46, 0x1000, 0x8, 0xffffffff7fffffff, 0x0, 0xfffffffffffffff9, 0x4, 0x7ff, 0x3, 0x8000000000000001, 0x4, 0x3, 0x0, 0x47, 0x3, 0xec, 0xcd2, 0xe7, 0xfffffffffffffc00, 0x70, 0x1, 0x5, 0x5, 0xe, 0xc81, 0xa961, 0x8001, 0x3, 0x5343f9de, 0x42, 0x7, 0x70, 0x6, 0x5, 0x8001, 0x8, 0x4, 0x8000, 0x1a]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0x69}, {0x10, 0x0, 0x3fb}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x14, 0x6, 0x0, 0xffffffff, 0x0}) mmap$KVM_VCPU(&(0x7f00005fb000/0x2000)=nil, r4, 0xc, 0x10, r6, 0x0) 324.528µs ago: executing program 6 (id=2424): poll(&(0x7f0000004200)=[{}], 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="d800000018009903e00312ba028105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0) 0s ago: executing program 5 (id=2425): r0 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x40001) r1 = memfd_secret(0x80000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x7ff, 0x7fff, 0xe4, 0xfc, 0x38, 0x8, 0x4, 0x21, 0x0, 0x5e, 0x7d, 0x7, 0x5}, {0xbfffffff, 0x150, 0xff, 0xff, 0x4, 0x2, 0x2, 0x0, 0x80, 0x2}, {0x6, 0x8, 0x6, 0xf, 0x2, 0x1, 0xf8, 0x2, 0xfe, 0x6, 0xfd, 0x8, 0xe0ee}], 0x7c1d}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) kernel console output (not intermixed with test programs): .039973][T11037] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 147.088654][ T59] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.092021][ T59] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.095028][ T59] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.098164][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.102672][T10997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.107165][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.209518][T11043] speed is unknown, defaulting to 1000 [ 147.322843][ T40] audit: type=1400 audit(1768466014.667:37155): avc: denied { append } for pid=10996 comm="syz.1.1484" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.323345][ T5294] Bluetooth: hci1: command tx timeout [ 147.380293][ T5980] usb 6-1: USB disconnect, device number 11 [ 147.675791][T11072] block nbd5: NBD_DISCONNECT [ 147.764194][T11084] PKCS8: Unsupported PKCS#8 version [ 147.772906][T11086] __nla_validate_parse: 25 callbacks suppressed [ 147.772922][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1511'. [ 147.808414][T11090] netlink: 'syz.3.1512': attribute type 4 has an invalid length. [ 147.811063][T11090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1512'. [ 147.852450][T11099] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 147.855976][T11099] netlink: 'syz.3.1515': attribute type 6 has an invalid length. [ 147.861169][T11099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1515'. [ 147.866993][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 147.929559][T11105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'. [ 147.931575][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'. [ 147.963232][T11104] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1517'. [ 147.966661][T11104] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1517'. [ 147.970816][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 148.302612][T11135] autofs: Unknown parameter './file1' [ 148.306444][ T40] audit: type=1400 audit(1768466015.583:37156): avc: denied { listen } for pid=11133 comm="syz.3.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.313055][T11134] binder: Unknown parameter 'uid>00000000000000000000' [ 148.446574][ T5294] block nbd5: Disconnected due to user request. [ 148.458182][T11144] netlink: 'syz.1.1531': attribute type 54 has an invalid length. [ 148.531335][T10976] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.621778][T11158] netlink: 'syz.3.1536': attribute type 83 has an invalid length. [ 148.693153][ T40] audit: type=1400 audit(1768466015.939:37157): avc: denied { ioctl } for pid=11163 comm="syz.1.1538" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.753874][T11167] geneve2: entered promiscuous mode [ 148.756460][T11167] geneve2: entered allmulticast mode [ 148.899372][ T40] audit: type=1400 audit(1768466016.135:37158): avc: denied { setopt } for pid=11185 comm="syz.1.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 149.035217][ T5935] Bluetooth: hci0: unexpected event 0x03 length: 23 > 11 [ 149.169502][T11207] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1549'. [ 149.198479][T11221] 9pnet_virtio: no channels available for device syz [ 149.290637][ T40] audit: type=1400 audit(1768466016.500:37159): avc: denied { write } for pid=11223 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 149.365683][T11229] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 149.538795][T11243] tmpfs: Bad value for 'huge' [ 149.551924][T11245] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 149.586425][T11252] xt_NFQUEUE: number of total queues is 0 [ 149.588869][T11247] xt_hashlimit: invalid interval [ 149.618206][ T40] audit: type=1400 audit(1768466016.799:37160): avc: denied { create } for pid=11255 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.621445][T11258] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 149.629632][ T40] audit: type=1400 audit(1768466016.799:37161): avc: denied { bind } for pid=11255 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.640334][ T40] audit: type=1400 audit(1768466016.799:37162): avc: denied { bind } for pid=11255 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.650180][ T40] audit: type=1400 audit(1768466016.799:37163): avc: denied { ioctl } for pid=11255 comm="syz.3.1567" path="socket:[33094]" dev="sockfs" ino=33094 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.661478][T11258] bond0: (slave team0): Releasing backup interface [ 149.688812][T11266] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 149.692488][T11266] SELinux: failed to load policy [ 149.709956][T11258] team0: Cannot enslave team device to itself [ 149.939486][T11284] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 149.948505][T11284] geneve1: entered allmulticast mode [ 150.044803][T11297] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 150.062760][T11299] Invalid ELF header magic: != ELF [ 150.111428][T11299] netlink: 'syz.1.1581': attribute type 6 has an invalid length. [ 150.125299][T11308] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 150.189636][T11316] 9pnet_virtio: no channels available for device syz [ 150.192010][T11316] 9pnet_virtio: no channels available for device syz [ 150.194301][T11316] 9pnet_virtio: no channels available for device syz [ 150.377721][T11334] speed is unknown, defaulting to 1000 [ 150.529810][T11338] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 150.556351][T11338] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 150.732955][ T5935] Bluetooth: hci4: command 0x1003 tx timeout [ 150.733134][ T5294] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.832721][T11357] overlayfs: missing 'lowerdir' [ 150.894934][T11361] fuse: Unknown parameter '' [ 150.933414][T11364] netlink: 'syz.5.1598': attribute type 1 has an invalid length. [ 150.991053][T11366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.182792][T11387] syzkaller0: entered promiscuous mode [ 151.184727][T11387] syzkaller0: entered allmulticast mode [ 151.338514][T11392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11392 comm=syz.5.1606 [ 151.616724][T11406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.664213][T11409] bridge0: port 1(syz_tun) entered blocking state [ 151.667825][T11409] bridge0: port 1(syz_tun) entered disabled state [ 151.670887][T11409] syz_tun: entered allmulticast mode [ 151.675110][T11409] syz_tun: entered promiscuous mode [ 151.701928][T11410] process '/newroot/510/file0' started with executable stack [ 152.376830][T11449] netlink: 'syz.3.1623': attribute type 3 has an invalid length. [ 152.459387][T11453] overlayfs: failed to clone upperpath [ 152.565800][T11463] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 152.624322][T11473] comedi comedi0: c6xdigio: I/O port conflict (0x8,3) [ 152.766739][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 152.766750][ T40] audit: type=1400 audit(1768466019.755:37171): avc: denied { name_bind } for pid=11491 comm="syz.2.1639" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 152.809308][T11500] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.890037][T11508] tipc: Enabling of bearer rejected, media not registered [ 152.895019][ T40] audit: type=1400 audit(1768466019.876:37172): avc: denied { setattr } for pid=11509 comm="syz.3.1646" name="QIPCRTR" dev="sockfs" ino=34465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.906395][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11508 comm=syz.2.1645 [ 152.984899][ T40] audit: type=1800 audit(1768466019.951:37173): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1652" name="nullb0" dev="tmpfs" ino=100 res=0 errno=0 [ 153.152458][T11549] gtp1: entered promiscuous mode [ 153.285957][T11557] netlink: 'syz.2.1662': attribute type 21 has an invalid length. [ 153.289587][T11557] netlink: 'syz.2.1662': attribute type 6 has an invalid length. [ 153.292949][T11557] __nla_validate_parse: 10 callbacks suppressed [ 153.292967][T11557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1662'. [ 153.517800][T11574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=11574 comm=syz.5.1668 [ 153.625030][T11586] netlink: 'syz.5.1670': attribute type 9 has an invalid length. [ 153.629747][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 153.740254][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 153.744092][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 154.476978][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 154.529661][T11637] net_ratelimit: 45 callbacks suppressed [ 154.529678][T11637] openvswitch: netlink: Message has 8 unknown bytes. [ 154.535979][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.573741][T11642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1686'. [ 154.652157][T11650] vlan2: entered promiscuous mode [ 154.654449][T11650] bridge0: entered promiscuous mode [ 154.682252][T11652] overlayfs: failed to clone upperpath [ 154.733001][ T40] audit: type=1400 audit(1768466021.597:37174): avc: denied { mounton } for pid=11653 comm="syz.5.1691" path="/66/bus" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 154.734433][T11654] FAT-fs (nullb0): bogus number of reserved sectors [ 154.745142][T11654] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 155.051921][T10975] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 155.055476][T10975] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 155.058494][T10975] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 155.061223][T10975] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 155.457476][T11680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11680 comm=syz.3.1701 [ 155.504748][T11684] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 155.527780][T11684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.542920][T11684] gretap1: entered promiscuous mode [ 155.548578][T11684] bond5: (slave gretap1): making interface the new active one [ 155.552758][T11684] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 155.608974][ T5935] Bluetooth: hci4: command 0xfc11 tx timeout [ 155.608992][ T5294] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 155.668899][T11694] 9pnet_virtio: no channels available for device syz [ 155.711181][T11699] could not open pipe file descriptor [ 155.713088][T11699] could not open pipe file descriptor [ 155.714973][T11699] could not open pipe file descriptor [ 155.718456][T11699] could not open pipe file descriptor [ 155.720567][T11699] could not open pipe file descriptor [ 155.722838][T11699] could not open pipe file descriptor [ 155.724872][T11699] could not open pipe file descriptor [ 155.727162][T11699] could not open pipe file descriptor [ 155.729142][T11699] could not open pipe file descriptor [ 155.731155][T11699] could not open pipe file descriptor [ 155.733079][T11699] could not open pipe file descriptor [ 155.734989][T11699] could not open pipe file descriptor [ 155.737845][T11699] could not open pipe file descriptor [ 155.740491][T11699] could not open pipe file descriptor [ 155.743091][T11699] could not open pipe file descriptor [ 155.745690][T11699] could not open pipe file descriptor [ 155.749570][T11704] overlayfs: failed to clone upperpath [ 155.753109][T11699] could not open pipe file descriptor [ 155.755744][T11699] could not open pipe file descriptor [ 155.758451][T11699] could not open pipe file descriptor [ 155.761047][T11699] could not open pipe file descriptor [ 155.763662][T11699] could not open pipe file descriptor [ 155.766262][T11699] could not open pipe file descriptor [ 155.768823][T11699] could not open pipe file descriptor [ 155.774005][T11699] could not open pipe file descriptor [ 155.776605][T11699] could not open pipe file descriptor [ 155.779208][T11699] could not open pipe file descriptor [ 155.781983][T11699] could not open pipe file descriptor [ 155.784561][T11699] could not open pipe file descriptor [ 155.787098][T11699] could not open pipe file descriptor [ 155.789811][T11699] could not open pipe file descriptor [ 155.792721][T11699] could not open pipe file descriptor [ 155.795585][T11699] could not open pipe file descriptor [ 155.798254][T11699] could not open pipe file descriptor [ 155.800855][T11699] could not open pipe file descriptor [ 155.803700][T11699] could not open pipe file descriptor [ 155.806399][T11699] could not open pipe file descriptor [ 155.806518][T11706] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.808948][T11699] could not open pipe file descriptor [ 155.814158][T11699] could not open pipe file descriptor [ 155.816665][T11699] could not open pipe file descriptor [ 155.819159][T11699] could not open pipe file descriptor [ 155.821747][T11699] could not open pipe file descriptor [ 155.824317][T11699] could not open pipe file descriptor [ 155.826777][T11699] could not open pipe file descriptor [ 155.829330][T11699] could not open pipe file descriptor [ 155.832071][T11699] could not open pipe file descriptor [ 155.834851][T11699] could not open pipe file descriptor [ 155.837428][T11699] could not open pipe file descriptor [ 155.839993][T11699] could not open pipe file descriptor [ 155.842532][T11699] could not open pipe file descriptor [ 155.845229][T11699] could not open pipe file descriptor [ 155.847770][T11699] could not open pipe file descriptor [ 155.850404][T11699] could not open pipe file descriptor [ 155.853050][T11699] could not open pipe file descriptor [ 155.855750][T11699] could not open pipe file descriptor [ 155.858306][T11699] could not open pipe file descriptor [ 155.860865][T11699] could not open pipe file descriptor [ 155.863593][T11699] could not open pipe file descriptor [ 155.866615][T11699] could not open pipe file descriptor [ 155.869224][T11699] could not open pipe file descriptor [ 155.871850][T11699] could not open pipe file descriptor [ 155.874401][T11699] could not open pipe file descriptor [ 155.877154][T11699] could not open pipe file descriptor [ 155.879782][T11699] could not open pipe file descriptor [ 155.882265][T11699] could not open pipe file descriptor [ 155.884756][T11699] could not open pipe file descriptor [ 155.968747][T11725] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1715'. [ 155.972751][T11727] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1716'. [ 155.974267][T11729] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1715'. [ 155.975681][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1716'. [ 155.980131][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.093606][T11734] vlan0: entered promiscuous mode [ 156.102437][T11734] vlan0: entered allmulticast mode [ 156.104469][T11734] veth0_vlan: entered allmulticast mode [ 156.107002][T11734] team0: Port device vlan0 added [ 156.215634][T11740] dvmrp8: entered allmulticast mode [ 156.274400][T11747] input: syz1 as /devices/virtual/input/input12 [ 156.314548][ T6019] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 156.327903][T11749] bond6: entered promiscuous mode [ 156.365332][T11752] netlink: 'syz.3.1725': attribute type 12 has an invalid length. [ 156.401955][T11754] erspan1: entered promiscuous mode [ 156.474736][ T6019] usb 10-1: Using ep0 maxpacket: 32 [ 156.478462][ T6019] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 156.482619][ T6019] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 156.487666][ T6019] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.492265][ T6019] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 156.499706][ T6019] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 156.503434][ T6019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.506360][ T6019] usb 10-1: Product: syz [ 156.508936][ T6019] usb 10-1: Manufacturer: syz [ 156.510969][ T6019] usb 10-1: SerialNumber: syz [ 156.519513][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 156.525035][ T6019] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input13 [ 156.753720][ T6019] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 156.757775][ T6019] (id 0x00) [ 156.819015][ T5294] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 156.819969][ T6019] rc_core: IR keymap rc-imon-pad not found [ 156.823069][ T5294] Bluetooth: hci0: Injecting HCI hardware error event [ 156.828133][ T6019] Registered IR keymap rc-empty [ 156.830829][ T6019] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 156.832844][ T5935] Bluetooth: hci0: hardware error 0x00 [ 156.835304][ T6019] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 156.979748][ T6019] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 156.986638][ T6019] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input14 [ 156.997393][ T6019] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:3> initialized [ 157.163977][ T6019] usb 10-1: USB disconnect, device number 3 [ 157.179374][T11811] netlink: 'syz.2.1744': attribute type 9 has an invalid length. [ 157.201497][T11813] netlink: 'syz.3.1745': attribute type 11 has an invalid length. [ 157.321837][ T5294] Bluetooth: hci3: link tx timeout [ 157.323666][ T5294] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 157.327190][ T5294] Bluetooth: hci3: link tx timeout [ 157.328862][ T5294] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.339872][ T40] audit: type=1400 audit(1768466024.019:37175): avc: denied { getopt } for pid=11831 comm="syz.2.1751" lport=40234 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 157.465992][T11849] affs: Unknown parameter 'discard' [ 157.473199][T11849] netlink: 'syz.3.1755': attribute type 4 has an invalid length. [ 157.483832][ T9] speed is unknown, defaulting to 1000 [ 157.487944][ T9] sz1: Port: 1 Link DOWN [ 157.491400][ T9] speed is unknown, defaulting to 1000 [ 157.538443][T11849] speed is unknown, defaulting to 1000 [ 157.734024][ T40] audit: type=1400 audit(1768466024.393:37176): avc: denied { write } for pid=11856 comm="syz.5.1756" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.743942][ T40] audit: type=1400 audit(1768466024.393:37177): avc: denied { open } for pid=11856 comm="syz.5.1756" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.754069][ T40] audit: type=1400 audit(1768466024.393:37178): avc: denied { ioctl } for pid=11856 comm="syz.5.1756" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.912433][T11862] 9p: Bad value for 'rfdno' [ 157.962480][ T40] audit: type=1400 audit(1768466024.608:37179): avc: denied { map } for pid=11865 comm="syz.5.1760" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.274717][T11886] netlink: 'syz.3.1767': attribute type 8 has an invalid length. [ 158.280260][T11888] netlink: 'syz.1.1768': attribute type 30 has an invalid length. [ 158.451459][ T40] audit: type=1326 audit(1768466025.067:37180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.3.1775" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf8db8f7c9 code=0x0 [ 158.613281][ T5980] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 158.752383][ T5980] usb 6-1: device descriptor read/64, error -71 [ 159.030534][ T5980] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 159.085998][ T40] audit: type=1400 audit(1768466025.665:37181): avc: denied { read } for pid=11919 comm="syz.5.1779" dev="nsfs" ino=4026533333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.092934][ T40] audit: type=1400 audit(1768466025.665:37182): avc: denied { open } for pid=11919 comm="syz.5.1779" path="mnt:[4026533333]" dev="nsfs" ino=4026533333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.127187][ T5935] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 159.154645][T11928] tipc: Started in network mode [ 159.156863][T11928] tipc: Node identity 72e2861c1067, cluster identity 4711 [ 159.160676][T11928] tipc: Enabled bearer , priority 0 [ 159.190777][ T5980] usb 6-1: device descriptor read/64, error -71 [ 159.195383][T11928] syzkaller0: entered promiscuous mode [ 159.197783][T11928] syzkaller0: entered allmulticast mode [ 159.200769][T11928] tipc: Resetting bearer [ 159.209523][T11927] tipc: Resetting bearer [ 159.308466][ T5980] usb usb6-port1: attempt power cycle [ 159.326841][T11930] openvswitch: netlink: IP tunnel dst address not specified [ 159.331072][T11930] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 159.543517][ T5294] Bluetooth: hci3: command 0x0406 tx timeout [ 159.671842][ T5980] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 159.693639][ T5980] usb 6-1: device descriptor read/8, error -71 [ 159.949905][ T5980] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 159.971603][ T5980] usb 6-1: device descriptor read/8, error -71 [ 160.089389][ T5980] usb usb6-port1: unable to enumerate USB device [ 160.374076][T11927] tipc: Disabling bearer [ 160.378940][T11930] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 160.399048][ T5980] tipc: Node number set to 1652917788 [ 160.423988][T11939] __nla_validate_parse: 77 callbacks suppressed [ 160.424001][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 160.428936][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 160.438942][T11941] tipc: Started in network mode [ 160.440709][T11941] tipc: Node identity , cluster identity 4711 [ 160.446702][T11941] tipc: Failed to obtain node identity [ 160.448534][T11941] tipc: Enabling of bearer rejected, failed to enable media [ 160.651315][ T40] audit: type=1400 audit(1768466027.124:37183): avc: denied { firmware_load } for pid=11959 comm="syz.2.1791" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 160.662805][T11967] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1793'. [ 160.732463][T11973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1795'. [ 160.946616][T11985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1799'. [ 160.947070][T11986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1799'. [ 161.041967][T11985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=11985 comm=syz.3.1799 [ 161.048250][T11985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11985 comm=syz.3.1799 [ 161.054124][T11985] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1799'. [ 161.256895][T12012] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1808'. [ 161.260151][T12013] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1808'. [ 161.363826][ T40] audit: type=1400 audit(1768466027.788:37184): avc: denied { create } for pid=12021 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.370004][ T40] audit: type=1400 audit(1768466027.788:37185): avc: denied { ioctl } for pid=12021 comm="syz.3.1812" path="socket:[33770]" dev="sockfs" ino=33770 ioctlcmd=0xa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.480353][ T5935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.484101][ T5935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.487330][ T5935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.492548][ T5935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.495328][ T5935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.515447][T12024] speed is unknown, defaulting to 1000 [ 161.597741][T12027] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 161.661523][T12033] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 161.677476][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 161.702348][T12024] chnl_net:caif_netlink_parms(): no params data found [ 161.725314][ T40] audit: type=1400 audit(1768466028.134:37186): avc: denied { read } for pid=12035 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.863955][ T5935] Bluetooth: hci3: command 0x0406 tx timeout [ 161.906890][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.910641][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.913149][T12024] bridge_slave_0: entered allmulticast mode [ 161.916532][T12024] bridge_slave_0: entered promiscuous mode [ 161.920139][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.922669][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.925275][T12024] bridge_slave_1: entered allmulticast mode [ 161.928136][T12024] bridge_slave_1: entered promiscuous mode [ 161.967051][T10976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.970859][T10976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.996318][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.010293][T12057] 8021q: adding VLAN 0 to HW filter on device bond11 [ 162.014962][T12057] bond0: (slave bond11): Enslaving as an active interface with an up link [ 162.019176][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.039077][T12024] team0: Port device team_slave_0 added [ 162.042174][T12024] team0: Port device team_slave_1 added [ 162.060466][ T40] audit: type=1400 audit(1768466028.443:37187): avc: denied { name_bind } for pid=12059 comm="syz.2.1821" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 162.079667][T10976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.083269][T10976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.093484][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.095846][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.104571][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.109442][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.111994][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.121640][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.144349][T12024] hsr_slave_0: entered promiscuous mode [ 162.146564][T12024] hsr_slave_1: entered promiscuous mode [ 162.148709][T12024] debugfs: 'hsr0' already exists in 'hsr' [ 162.150709][T12024] Cannot create hsr debugfs directory [ 162.169929][ T40] audit: type=1400 audit(1768466028.546:37188): avc: denied { watch watch_reads } for pid=12064 comm="syz.2.1822" path="/593/file0" dev="tmpfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 162.178820][T10976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.182259][T10976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.261983][T10976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.266364][T10976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.446473][T10976] team0: left allmulticast mode [ 162.448092][T10976] vlan0: left allmulticast mode [ 162.449637][T10976] veth0_vlan: left allmulticast mode [ 162.452800][T10976] bridge0: port 1(team0) entered disabled state [ 162.598388][T12086] xt_CONNSECMARK: invalid mode: 0 [ 162.601324][T12086] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 162.763027][T10976] bond5 (unregistering): (slave gretap1): Releasing active interface [ 162.818782][T10976] dvmrp8 (unregistering): left allmulticast mode [ 163.015711][T10976] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 163.019044][T10976] bridge2 (unregistering): left promiscuous mode [ 163.406911][T10976] smc: removing net device bond0 with user defined pnetid SYZ2 [ 163.409689][T10976] bond0 (unregistering): Released all slaves [ 163.416850][T10976] bond1 (unregistering): Released all slaves [ 163.423575][T10976] bond2 (unregistering): Released all slaves [ 163.504754][T10976] bond3 (unregistering): Released all slaves [ 163.511571][T10976] bond4 (unregistering): Released all slaves [ 163.579520][T10976] bond5 (unregistering): Released all slaves [ 163.585985][T10976] bond6 (unregistering): Released all slaves [ 163.661607][ T5944] Bluetooth: hci4: command tx timeout [ 163.666902][T10976] : left promiscuous mode [ 163.753828][ T40] audit: type=1400 audit(1768466030.023:37189): avc: denied { setopt } for pid=12116 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.957335][T12144] overlayfs: empty lowerdir [ 164.123853][T12024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.127848][T12024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.133892][T12024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.137867][T12024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.224263][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.232677][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.240065][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.242485][T10963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.251904][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.254382][T10947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.390503][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.414269][T12024] veth0_vlan: entered promiscuous mode [ 164.419950][T12024] veth1_vlan: entered promiscuous mode [ 164.471057][T10976] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 164.503794][T12024] veth0_macvtap: entered promiscuous mode [ 164.508420][T12024] veth1_macvtap: entered promiscuous mode [ 164.517675][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.528487][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.536445][ T6104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.539900][ T6104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.544151][ T6104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.546997][ T6104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.671879][T10976] hsr_slave_0: left promiscuous mode [ 164.674233][T10976] hsr_slave_1: left promiscuous mode [ 164.681772][T10976] veth0_macvtap: left promiscuous mode [ 164.684221][T10976] veth1_vlan: left promiscuous mode [ 164.854850][T10976] team0 (unregistering): Port device vlan0 removed [ 165.106111][ T40] audit: type=1400 audit(1768466031.295:37190): avc: denied { accept } for pid=12202 comm="syz.5.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.108171][T12203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.341211][T10947] smc: removing ib device sz1 [ 165.350551][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.353205][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.372167][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.381601][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.394511][ T5944] Bluetooth: hci2: Malformed LE Event: 0x1b [ 165.510417][T12221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12221 comm=syz.3.1813 [ 165.542173][ T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 165.636661][T12224] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.643163][T12224] xt_hashlimit: invalid interval [ 165.645420][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.649449][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.652326][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.655335][ T40] audit: type=1400 audit(1768466031.800:37191): avc: denied { getopt } for pid=12223 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.662632][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.665320][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.714493][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 165.718383][ T53] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 165.721049][ T53] usb 10-1: config 0 has no interface number 0 [ 165.723010][ T53] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.730007][ T53] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 165.733712][ T53] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.737304][T12235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.737552][ T53] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.755264][ T40] audit: type=1400 audit(1768466031.894:37192): avc: denied { watch_mount } for pid=12234 comm="syz.3.1870" path="/3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.756911][ T53] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 165.768242][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.774049][ T53] usb 10-1: config 0 descriptor?? [ 165.779643][ T53] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.832137][ T40] audit: type=1400 audit(1768466031.969:37193): avc: denied { execute } for pid=12239 comm="syz.3.1872" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.873507][ T5935] Bluetooth: hci4: command tx timeout [ 165.885032][T12240] ptrace attach of "/syz-executor exec"[12024] was attempted by ""[12240] [ 165.978531][T12232] chnl_net:caif_netlink_parms(): no params data found [ 166.000947][T12209] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 166.000947][T12209] program syz.5.1862 not setting count and/or reply_len properly [ 166.024787][ T835] usb 10-1: USB disconnect, device number 4 [ 166.030811][ T835] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 166.036979][T12251] __nla_validate_parse: 13 callbacks suppressed [ 166.036997][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1874'. [ 166.049768][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.052140][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.054516][T12232] bridge_slave_0: entered allmulticast mode [ 166.057411][T12232] bridge_slave_0: entered promiscuous mode [ 166.061138][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.063466][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.065932][T12232] bridge_slave_1: entered allmulticast mode [ 166.068647][T12232] bridge_slave_1: entered promiscuous mode [ 166.088801][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.093596][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.110200][T12232] team0: Port device team_slave_0 added [ 166.113808][T12232] team0: Port device team_slave_1 added [ 166.121545][T12252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1874'. [ 166.130382][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.132711][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.142103][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.146405][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.148673][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.158098][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.168144][ T40] audit: type=1400 audit(1768466032.287:37194): avc: denied { create } for pid=12255 comm="syz.3.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 166.191933][T12232] hsr_slave_0: entered promiscuous mode [ 166.195365][T12232] hsr_slave_1: entered promiscuous mode [ 166.211411][ T40] audit: type=1400 audit(1768466032.324:37195): avc: denied { setopt } for pid=12257 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.293805][T12232] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 166.297068][T12232] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 166.361434][T12232] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 166.364625][T12232] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 166.427983][T12232] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 166.431747][T12232] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 166.531241][T12232] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 166.534737][T12232] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 166.653795][T12300] netlink: 'syz.3.1889': attribute type 2 has an invalid length. [ 166.693029][ T40] audit: type=1400 audit(1768466032.773:37196): avc: denied { wake_alarm } for pid=12304 comm="syz.3.1892" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.752177][T12232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.759423][T12232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.768772][T12232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.775539][T12232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.793533][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.795863][T12232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.798158][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.800346][T12232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.807875][ T40] audit: type=1400 audit(1768466032.885:37197): avc: denied { ioctl } for pid=12320 comm="syz.5.1895" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.832089][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.840978][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.844938][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.862947][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.871237][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.873624][T10947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.881585][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1896'. [ 166.882408][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.886847][T10947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.954907][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 167.062543][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.101747][T12232] veth0_vlan: entered promiscuous mode [ 167.110424][T12232] veth1_vlan: entered promiscuous mode [ 167.124694][T12340] netlink: 'syz.1.1900': attribute type 2 has an invalid length. [ 167.132644][T12232] veth0_macvtap: entered promiscuous mode [ 167.139759][T12232] veth1_macvtap: entered promiscuous mode [ 167.153223][ T59] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 167.155395][T12232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.156203][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 167.162064][ T59] usb 8-1: Product: syz [ 167.163506][ T59] usb 8-1: Manufacturer: syz [ 167.164995][ T59] usb 8-1: SerialNumber: syz [ 167.167070][T12232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.173412][ T59] usb 8-1: config 0 descriptor?? [ 167.178698][T10963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.181527][T10963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.185326][ T59] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 167.188196][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 167.192933][T10963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.200134][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.203045][T10963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.205404][ T59] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 167.210739][ T59] usb 8-1: media controller created [ 167.218106][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.236546][T12344] program syz.1.1902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.242184][ T6738] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 167.246941][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.249559][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.268595][T10963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.272058][T10963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.359481][T12344] nbd: must specify a device to reconfigure [ 167.405946][ T59] cxusb: set interface failed [ 167.407474][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 167.413423][ T6738] usb 10-1: Using ep0 maxpacket: 8 [ 167.419304][ T6738] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 167.422054][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.426301][ T6738] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.444380][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.448869][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.452791][ T59] DVB: Unable to find symbol mt352_attach() [ 167.453400][ T6738] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 167.454994][ T59] dvb-usb: bulk message failed: -22 (5/0) [ 167.460020][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.463769][ T6738] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.466780][ T59] zl10353_read_register: readreg error (reg=127, ret==-121) [ 167.468352][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.470883][ T59] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 167.473972][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.488846][ T6738] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 167.491625][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.506356][ T6738] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.510710][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.514329][ T6738] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.520952][ T6738] usb 10-1: string descriptor 0 read error: -22 [ 167.523072][ T6738] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 167.526348][ T6738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.533934][ T6738] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 167.541832][ T59] rc_core: IR keymap rc-dvico-mce not found [ 167.544202][ T59] Registered IR keymap rc-empty [ 167.547559][ T59] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 167.552297][ T59] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input15 [ 167.557905][ T59] dvb-usb: schedule remote query interval to 100 msecs. [ 167.560653][ T59] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 167.565354][ T59] usb 8-1: USB disconnect, device number 5 [ 167.654655][ T59] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 167.748518][ T6738] usb 10-1: USB disconnect, device number 5 [ 167.841269][ T5935] Bluetooth: hci0: command tx timeout [ 167.940568][T12373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1908'. [ 168.098088][ T5935] Bluetooth: hci4: command tx timeout [ 168.190150][T12390] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 168.208226][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1913'. [ 168.261489][T12391] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 168.265240][T12390] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 168.295508][T12401] netlink: 'syz.2.1916': attribute type 29 has an invalid length. [ 168.444338][ T40] audit: type=1400 audit(1768466034.410:37198): avc: denied { relabelfrom } for pid=12414 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 168.456600][ T40] audit: type=1400 audit(1768466034.410:37199): avc: denied { relabelto } for pid=12414 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 168.524344][T12419] "syz.2.1922" (12419) uses obsolete ecb(arc4) skcipher [ 168.561533][T12426] trusted_key: encrypted_key: insufficient parameters specified [ 168.564998][T12427] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1925'. [ 168.609260][T12434] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1927'. [ 168.858333][ T835] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 168.895258][T12448] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1930'. [ 169.027735][ T835] usb 6-1: Using ep0 maxpacket: 8 [ 169.031739][ T835] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 169.035098][ T835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.039981][ T835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.043980][ T835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.048007][ T835] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.054091][ T835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.058372][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.864467][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1933'. [ 169.871556][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'. [ 169.887498][T12455] gfs2: not a GFS2 filesystem [ 170.065071][ T5935] Bluetooth: hci0: command tx timeout [ 170.230232][T12472] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 170.316903][T12440] kexec: Could not allocate control_code_buffer [ 170.321595][ T5935] Bluetooth: hci4: command tx timeout [ 170.398161][T12487] 9p: Bad value for 'msize' [ 170.403549][T12487] netlink: 'syz.5.1940': attribute type 15 has an invalid length. [ 170.426247][T12496] netlink: 'syz.2.1944': attribute type 10 has an invalid length. [ 170.435339][T12496] team0: Port device dummy0 added [ 170.440108][T12496] netlink: 'syz.2.1944': attribute type 10 has an invalid length. [ 170.454486][T12496] team0: Port device dummy0 removed [ 170.459881][T12496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.521035][T12500] block device autoloading is deprecated and will be removed. [ 170.554032][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 170.554048][ T40] audit: type=1400 audit(1768466036.383:37203): avc: denied { write } for pid=12499 comm="syz.2.1946" path="socket:[38906]" dev="sockfs" ino=38906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 170.557641][T12503] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 170.642025][ T40] audit: type=1400 audit(1768466036.458:37205): avc: denied { write } for pid=12511 comm="syz.2.1951" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.645659][T12513] binder: 12511:12513 ioctl c0306201 200000000080 returned -14 [ 170.653129][ T40] audit: type=1400 audit(1768466036.458:37204): avc: denied { write } for pid=12511 comm="syz.2.1951" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.588719][ T40] audit: type=1400 audit(1768466037.356:37206): avc: denied { append } for pid=12568 comm="syz.5.1957" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.694010][T12578] netlink: 'syz.2.1960': attribute type 178 has an invalid length. [ 171.701890][ T5935] Bluetooth: hci0: Malformed LE Event: 0x1b [ 171.888040][T12591] __nla_validate_parse: 10 callbacks suppressed [ 171.888052][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1963'. [ 171.916732][T12593] tmpfs: Bad value for 'mpol' [ 171.918959][T12593] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 171.926332][ T5980] usb 6-1: USB disconnect, device number 16 [ 171.944349][T12595] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1967'. [ 171.947441][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 171.960659][ T40] audit: type=1400 audit(1768466037.702:37207): avc: denied { recv } for pid=5938 comm="syz-executor" saddr=10.0.2.2 src=42160 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.976915][T12601] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1968'. [ 171.978830][ T40] audit: type=1400 audit(1768466037.702:37208): avc: denied { recv } for pid=5875 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.991467][T12596] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1967'. [ 171.994417][T12595] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1967'. [ 172.013036][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 172.072760][ T40] audit: type=1400 audit(1768466037.805:37209): avc: denied { read append } for pid=12613 comm="syz.3.1972" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.124977][T12622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.130359][T12619] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1973'. [ 172.244869][T12614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.247926][T12614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.255163][T12614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.261003][T12614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.263631][T12614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.269947][T12614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.273627][T12614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.276264][T12614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.283317][T12614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.290176][T12614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.292875][T12614] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.297686][T12614] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.335080][T12634] erspan0: entered promiscuous mode [ 172.410198][ T40] audit: type=1400 audit(1768466038.123:37210): avc: denied { create } for pid=12639 comm="syz.5.1979" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.413646][T12640] syzkaller0: entered promiscuous mode [ 172.417107][ T40] audit: type=1400 audit(1768466038.123:37211): avc: denied { map } for pid=12639 comm="syz.5.1979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.419220][T12640] syzkaller0: entered allmulticast mode [ 172.426930][ T40] audit: type=1400 audit(1768466038.123:37212): avc: denied { read write } for pid=12639 comm="syz.5.1979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.983974][ T7903] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 173.058910][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 173.144366][ T7903] usb 10-1: Using ep0 maxpacket: 8 [ 173.148251][ T7903] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.151761][ T7903] usb 10-1: config 179 has no interface number 0 [ 173.154738][ T7903] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 173.159761][ T7903] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 173.164567][ T7903] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 173.169692][ T7903] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 173.174629][ T7903] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.180686][ T7903] usb 10-1: config 179 interface 65 has no altsetting 0 [ 173.183694][ T7903] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 173.187702][ T7903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.194755][T12645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.207832][ T7903] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input16 [ 173.219337][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 173.228199][ T59] usb 7-1: config 0 has no interfaces? [ 173.235613][ T59] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.239708][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.244201][ T59] usb 7-1: SerialNumber: syz [ 173.250530][ T59] usb 7-1: config 0 descriptor?? [ 173.262460][ T5328] input input16: unable to receive magic message: -110 [ 173.348234][ T5328] input input16: unable to receive magic message: -32 [ 173.399771][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 173.425143][T12645] input input16: unable to receive magic message: -32 [ 173.473328][ T59] usb 7-1: USB disconnect, device number 2 [ 173.478526][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1984'. [ 173.529655][ T5328] input input16: unable to receive magic message: -32 [ 173.549829][ T6738] usb 10-1: USB disconnect, device number 6 [ 173.549938][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 173.556211][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 173.713324][T12666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=12666 comm=syz.5.1985 [ 174.084777][T12691] geneve2: entered promiscuous mode [ 174.090113][T12691] geneve2: entered allmulticast mode [ 174.105017][T12683] autofs: Bad value for 'fd' [ 174.342130][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.371396][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.375622][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.378297][T12703] syz.5.2002 (12703) used obsolete PPPIOCDETACH ioctl [ 174.438273][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.438368][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.513269][ T5294] Bluetooth: hci0: command 0x0419 tx timeout [ 174.630633][ T6738] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 174.806010][ T6738] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.812031][ T6738] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.815948][ T6738] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 174.819717][ T6738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.824994][ T6738] usb 10-1: config 0 descriptor?? [ 174.829404][ T6738] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 174.831987][ T6738] dvb-usb: bulk message failed: -22 (3/0) [ 174.839576][ T6738] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 174.843773][ T6738] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 174.855222][ T6738] usb 10-1: media controller created [ 174.859570][ T6738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.869758][ T6738] dvb-usb: bulk message failed: -22 (6/0) [ 174.872824][ T6738] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 174.878284][ T6738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input17 [ 174.884321][ T6738] dvb-usb: schedule remote query interval to 150 msecs. [ 174.886582][ T6738] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 174.933840][T12729] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 174.938367][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.943817][T12729] bridge_slave_1: left allmulticast mode [ 174.946482][T12729] bridge_slave_1: left promiscuous mode [ 174.949162][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.955587][T12729] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 175.044035][ T5980] usb 10-1: USB disconnect, device number 7 [ 175.090370][T12744] misc userio: Begin command sent, but we're already running [ 175.117130][ T5980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.703449][T12773] IPv6: sit2: Disabled Multicast RS [ 175.706023][T12773] sit2: entered allmulticast mode [ 176.207416][T12847] veth1_macvtap: left promiscuous mode [ 176.265810][T12854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 176.268152][T12854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.271350][T12854] vhci_hcd vhci_hcd.0: Device attached [ 176.274768][T12855] usbip_core: unknown command [ 176.276873][T12855] vhci_hcd: unknown pdu 1024 [ 176.279534][T12855] usbip_core: unknown command [ 176.281850][T10959] vhci_hcd vhci_hcd.1: stop threads [ 176.284617][T10959] vhci_hcd vhci_hcd.1: release socket [ 176.286674][T10959] vhci_hcd vhci_hcd.1: disconnect device [ 176.401198][T12869] ntfs3(sr0): Primary boot signature is not NTFS. [ 176.404454][T12869] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 176.576677][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.635881][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 176.635893][ T40] audit: type=1400 audit(1768466042.069:37232): avc: denied { execute } for pid=12882 comm="syz.1.2053" path="pipe:[39920]" dev="pipefs" ino=39920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 176.652395][ T5294] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.652422][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.689031][T12890] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 176.692230][T12890] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 176.697680][T12890] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 176.700941][T12890] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 176.737153][ T5944] Bluetooth: hci0: command 0x0419 tx timeout [ 176.840217][ T40] audit: type=1400 audit(1768466042.266:37233): avc: denied { read append } for pid=12894 comm="syz.3.2057" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.848407][ T40] audit: type=1400 audit(1768466042.266:37234): avc: denied { open } for pid=12894 comm="syz.3.2057" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.953376][ T40] audit: type=1400 audit(1768466042.369:37235): avc: denied { remount } for pid=12902 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 177.122533][T12916] vivid-004: disconnect [ 177.128611][T12915] vivid-004: reconnect [ 177.141069][ T5935] block nbd5: Receive control failed (result -32) [ 177.141201][T12850] block nbd5: shutting down sockets [ 177.147369][T12918] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 177.158274][T12918] cramfs: wrong magic [ 177.174728][T12920] openvswitch: netlink: IP tunnel dst address not specified [ 177.206917][T12922] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.266553][ T40] audit: type=1400 audit(1768466042.659:37236): avc: denied { read } for pid=12931 comm="syz.5.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.301654][ T40] audit: type=1326 audit(1768466042.696:37237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.5.2073" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db098f7c9 code=0x0 [ 177.376665][ T5935] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 177.379599][T12948] loop6: detected capacity change from 0 to 2560 [ 177.382563][T12948] buffer_io_error: 22 callbacks suppressed [ 177.382575][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.388228][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.391668][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.394423][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.397870][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.401501][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.404470][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.407495][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.410899][T12948] ldm_validate_partition_table(): Disk read failed. [ 177.415448][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.418557][T12948] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.421538][T12948] Dev loop6: unable to read RDB block 0 [ 177.423941][T12948] loop6: unable to read partition table [ 177.426254][T12948] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 177.457939][T12955] pim6reg: entered allmulticast mode [ 177.589362][T12957] __nla_validate_parse: 11 callbacks suppressed [ 177.589375][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'. [ 177.595740][T12957] chnl_net:caif_netlink_parms(): no params data found [ 177.794842][T12965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12965 comm=syz.1.2081 [ 178.046055][ T40] audit: type=1400 audit(1768466043.388:37238): avc: denied { nlmsg_read } for pid=12979 comm="syz.3.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 178.094013][T12978] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2086'. [ 178.126206][ T40] audit: type=1400 audit(1768466043.463:37239): avc: denied { ioctl } for pid=12987 comm="syz.3.2089" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42663 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.246118][T12999] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 178.292188][T12999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 178.303304][T12999] vlan4: entered allmulticast mode [ 178.305577][T12999] bond8: entered allmulticast mode [ 178.331950][ T40] audit: type=1400 audit(1768466043.659:37240): avc: denied { shutdown } for pid=13001 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.471004][T13006] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2095'. [ 178.475304][T13006] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2095'. [ 178.789936][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.864020][ T40] audit: type=1400 audit(1768466044.155:37241): avc: denied { getopt } for pid=13015 comm="syz.1.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.875803][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.886304][ T5294] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.927809][T13021] fuse: Unknown parameter '0x00000000000000030x000000000000000400000000000000000000003' [ 178.939356][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 179.062965][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 179.066502][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 179.125888][ T5935] block nbd5: Receive control failed (result -32) [ 179.126613][T12994] block nbd5: shutting down sockets [ 179.136805][T13025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13025 comm=syz.1.2110 [ 179.170792][T13027] ntfs3(sr0): Primary boot signature is not NTFS. [ 179.173123][T13027] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 179.189553][T13031] netlink: 'syz.5.2104': attribute type 11 has an invalid length. [ 179.209025][T13031] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2104'. [ 179.402866][T13058] netlink: zone id is out of range [ 180.107751][T13085] libceph: resolve '4' (ret=-3): failed [ 180.269095][T13110] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 180.395783][T13118] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.398832][T13118] use the actual size instead. [ 180.522787][T13132] binder_alloc: 13131: binder_alloc_buf size 4112 failed, no address space [ 180.526570][T13132] binder_alloc: allocated: 24 (num: 1 largest: 24), free: 4072 (num: 1 largest: 4072) [ 180.554727][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 180.618476][T13139] vivid-000: ================= START STATUS ================= [ 180.621010][T13139] vivid-000: Test Pattern: 75% Colorbar [ 180.629056][T13139] vivid-000: Fill Percentage of Frame: 100 [ 180.631608][T13139] vivid-000: Horizontal Movement: No Movement [ 180.633837][T13139] vivid-000: Vertical Movement: No Movement [ 180.636487][T13139] vivid-000: OSD Text Mode: All [ 180.638078][T13139] vivid-000: Show Border: false [ 180.642166][T13139] vivid-000: Show Square: false [ 180.644108][T13139] vivid-000: Sensor Flipped Horizontally: false [ 180.646978][T13139] vivid-000: Sensor Flipped Vertically: false [ 180.648956][T13139] vivid-000: Insert SAV Code in Image: false [ 180.652808][T13139] vivid-000: Insert EAV Code in Image: false [ 180.654793][T13139] vivid-000: Insert Video Guard Band: false [ 180.656823][T13139] vivid-000: Reduced Framerate: false [ 180.658572][T13139] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 180.670392][T13139] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 180.678135][T13139] vivid-000: Enable Capture Cropping: true [ 180.680133][T13139] vivid-000: Enable Capture Composing: true [ 180.681354][T10671] syz_tun (unregistering): left allmulticast mode [ 180.682080][T13139] vivid-000: Enable Capture Scaler: true [ 180.686172][T13139] vivid-000: Timestamp Source: End of Frame [ 180.686234][T10671] syz_tun (unregistering): left promiscuous mode [ 180.689579][T13139] vivid-000: Colorspace: sRGB [ 180.690328][T10671] bridge0: port 1(syz_tun) entered disabled state [ 180.691799][T13139] vivid-000: Transfer Function: Default [ 180.696385][T13139] vivid-000: Y'CbCr Encoding: Default [ 180.698168][T13139] vivid-000: HSV Encoding: Hue 0-179 [ 180.700000][T13139] vivid-000: Quantization: Default [ 180.701741][T13139] vivid-000: Apply Alpha To Red Only: false [ 180.704440][T13139] vivid-000: Standard Aspect Ratio: 4x3 [ 180.706786][T13139] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 180.709389][T13139] vivid-000: DV Timings: 640x480p59 inactive [ 180.711800][T13139] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 180.714300][T13139] vivid-000: Maximum EDID Blocks: 1 [ 180.716643][T13139] vivid-000: Limited RGB Range (16-235): false [ 180.718679][T13139] vivid-000: Rx RGB Quantization Range: Automatic [ 180.720784][T13139] vivid-000: Power Present: 0x00000001 [ 180.722682][T13139] tpg source WxH: 320x240 (Y'CbCr) [ 180.724468][T13139] tpg field: 1 [ 180.725881][T13139] tpg crop: (0,0)/320x240 [ 180.727310][T13139] tpg compose: (0,0)/320x240 [ 180.728843][T13139] tpg colorspace: 8 [ 180.730143][T13139] tpg transfer function: 0/0 [ 180.731731][T13139] tpg Y'CbCr encoding: 0/0 [ 180.733211][T13139] tpg quantization: 0/0 [ 180.734604][T13139] tpg RGB range: 0/2 [ 180.736016][T13139] vivid-000: ================== END STATUS ================== [ 180.738886][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.741822][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.744476][ T9] usb 7-1: Product: syz [ 180.745822][ T9] usb 7-1: Manufacturer: syz [ 180.747799][ T9] usb 7-1: SerialNumber: syz [ 180.758110][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.781001][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.793410][T13143] tipc: Started in network mode [ 180.795361][T13143] tipc: Node identity , cluster identity 4711 [ 180.797877][T13143] tipc: Failed to obtain node identity [ 180.800532][T13143] tipc: Enabling of bearer rejected, failed to enable media [ 180.996888][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.030828][ T5980] usb 7-1: USB disconnect, device number 3 [ 181.135337][ T1050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.139236][ T1050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.144632][ T1050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.190948][T13171] netlink: 'syz.5.2155': attribute type 29 has an invalid length. [ 181.195755][T13171] netlink: 'syz.5.2155': attribute type 29 has an invalid length. [ 181.200344][ T5294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.203564][T13171] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2155'. [ 181.204473][ T5294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.213171][ T5294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.218058][ T5294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.221157][ T5294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.247930][ T1050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.252102][ T1050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.255353][ T1050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.344069][ T1050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.348739][ T1050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.353279][ T1050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.442822][ T1050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.447219][ T1050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.451535][ T1050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.485875][T13172] chnl_net:caif_netlink_parms(): no params data found [ 181.558480][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.561669][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.564181][T13172] bridge_slave_0: entered allmulticast mode [ 181.566841][T13172] bridge_slave_0: entered promiscuous mode [ 181.570239][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.572593][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.575007][T13172] bridge_slave_1: entered allmulticast mode [ 181.577689][T13172] bridge_slave_1: entered promiscuous mode [ 181.602404][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.607630][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.636346][T13172] team0: Port device team_slave_0 added [ 181.639714][T13172] team0: Port device team_slave_1 added [ 181.661150][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.663452][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.671638][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.677253][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.679917][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.690381][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.698323][ T5935] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 181.701426][ T5935] Bluetooth: hci0: Injecting HCI hardware error event [ 181.761037][T13172] hsr_slave_0: entered promiscuous mode [ 181.766198][T13172] hsr_slave_1: entered promiscuous mode [ 181.768451][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 181.770264][T13172] Cannot create hsr debugfs directory [ 181.801217][ T1050] tipc: Resetting bearer [ 181.869387][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 181.871893][ T9] ath9k_htc: Failed to initialize the device [ 181.874487][ T5980] usb 7-1: ath9k_htc: USB layer deinitialized [ 182.122979][ T1050] tipc: Disabling bearer [ 182.184651][ T1050] bond5 (unregistering): (slave erspan1): Releasing active interface [ 182.290584][ T1050] bond1 (unregistering): (slave gre1): Releasing backup interface [ 182.344209][ T1050] dvmrp8 (unregistering): left allmulticast mode [ 182.361663][ T1050] bond3 (unregistering): (slave geneve2): Releasing active interface [ 182.819987][ T1050] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 182.866361][ T1050] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 182.889105][ T1050] bond0 (unregistering): Released all slaves [ 182.895826][ T1050] bond1 (unregistering): Released all slaves [ 183.017826][ T1050] bond2 (unregistering): (slave veth3): Releasing active interface [ 183.047143][ T1050] bond2 (unregistering): Released all slaves [ 183.056915][ T1050] bond3 (unregistering): Released all slaves [ 183.066086][ T1050] bond4 (unregistering): Released all slaves [ 183.177322][ T1050] bond5 (unregistering): Released all slaves [ 183.184564][ T1050] bond6 (unregistering): Released all slaves [ 183.191492][ T1050] bond7 (unregistering): Released all slaves [ 183.286672][ T1050] bond8 (unregistering): Released all slaves [ 183.414427][ T5935] Bluetooth: hci2: command tx timeout [ 183.440007][ T1050] : left promiscuous mode [ 183.484671][T13212] macsec1: entered promiscuous mode [ 183.486926][T13212] macsec1: entered allmulticast mode [ 183.511352][T13172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.524203][ T1050] tipc: Disabling bearer [ 183.527797][ T1050] tipc: Left network mode [ 183.528899][T13212] 8021q: VLANs not supported on ip6gre0 [ 183.537685][T13172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.544363][T13172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.550657][T13172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.601841][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.602360][ T1050] IPVS: stopping backup sync thread 9342 ... [ 183.613675][ T6738] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 183.622205][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.631858][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.634740][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.643127][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.645997][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.686314][T13172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.795685][ T6738] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 183.800510][ T6738] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 183.804952][ T6738] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 183.808280][ T6738] usb 10-1: config 0 interface 0 has no altsetting 0 [ 183.812026][ T6738] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.814945][ T6738] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.817800][ T6738] usb 10-1: Product: syz [ 183.819242][ T6738] usb 10-1: Manufacturer: syz [ 183.820723][ T6738] usb 10-1: SerialNumber: syz [ 183.824878][ T6738] usb 10-1: config 0 descriptor?? [ 183.827303][T13208] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 183.831896][ T6738] usb 10-1: selecting invalid altsetting 0 [ 183.844614][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.857345][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 183.857573][ T40] audit: type=1400 audit(1768466048.822:37252): avc: denied { getopt } for pid=13224 comm="syz.2.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 184.046080][T13208] "syz.5.2165" (13208) uses obsolete ecb(arc4) skcipher [ 184.049017][ T40] audit: type=1400 audit(1768466048.999:37253): avc: denied { ioctl } for pid=13207 comm="syz.5.2165" path="socket:[44391]" dev="sockfs" ino=44391 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.056936][T13208] usb 10-1: BOGUS urb xfer, pipe 0 != type 1 [ 184.058514][ T5935] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 184.149124][ T1460] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 184.151847][T13172] veth0_vlan: entered promiscuous mode [ 184.162837][T13172] veth1_vlan: entered promiscuous mode [ 184.181689][T13172] veth0_macvtap: entered promiscuous mode [ 184.186331][T13172] veth1_macvtap: entered promiscuous mode [ 184.242930][ T1050] hsr_slave_0: left promiscuous mode [ 184.245483][ T1050] hsr_slave_1: left promiscuous mode [ 184.252552][ T1050] veth1_vlan: left promiscuous mode [ 184.311009][ T1460] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 184.314263][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.328565][ T1460] usb 7-1: Product: syz [ 184.330095][ T1460] usb 7-1: Manufacturer: syz [ 184.331611][ T1460] usb 7-1: SerialNumber: syz [ 184.346174][ T1460] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 184.378022][ T1460] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.520560][ T1050] team0 (unregistering): Port device vlan0 removed [ 184.645465][ T5939] usb 7-1: USB disconnect, device number 4 [ 185.077282][T13172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.085971][T13172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.099773][T10956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.103183][T10956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.107946][T10956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.111778][T10956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.168151][T13241] xt_HMARK: spi-set and port-set can't be combined [ 185.193033][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.196937][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.213276][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.216948][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.232227][ T40] audit: type=1400 audit(1768466050.112:37254): avc: denied { mounton } for pid=13172 comm="syz-executor" path="/syzkaller.6UMtnQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 185.268916][T13247] xt_socket: unknown flags 0x48 [ 185.338336][ T40] audit: type=1400 audit(1768466050.215:37255): avc: denied { read write } for pid=13251 comm="syz.6.2152" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.347643][ T40] audit: type=1400 audit(1768466050.215:37256): avc: denied { open } for pid=13251 comm="syz.6.2152" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.379354][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 185.385160][T13261] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 185.422019][ T40] audit: type=1400 audit(1768466050.290:37257): avc: denied { append } for pid=13263 comm="syz.3.2177" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.473079][ T1460] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 185.476211][ T1460] ath9k_htc: Failed to initialize the device [ 185.483061][ T5939] usb 7-1: ath9k_htc: USB layer deinitialized [ 185.564467][ T40] audit: type=1400 audit(1768466050.421:37258): avc: denied { create } for pid=13270 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.565714][T13278] f2fs: Unknown parameter 'norecovery:zag&674}0v6l' [ 185.574079][ T40] audit: type=1400 audit(1768466050.421:37259): avc: denied { setopt } for pid=13270 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.586879][ T40] audit: type=1400 audit(1768466050.421:37260): avc: denied { getopt } for pid=13270 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.633411][ T5935] Bluetooth: hci2: command tx timeout [ 185.924945][ T6738] usb 10-1: USB disconnect, device number 8 [ 186.075917][T13287] [U] zͻi[27| [ 186.077324][T13287] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 186.081844][T13287] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 186.084260][T13287] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 186.094691][T13287] [U] 8)X)YvxRĻbmbN@ox;JD, [ 186.096675][T13287] [U] *Cn3v7KEXgt_3 [ 186.098247][T13287] [U] D/QazҬEHgE1$_ks=R@ [ 186.099968][T13287] [U] ϼcEv @ [ 186.101135][T13287] [U] a% [ 186.102108][T13287] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 186.108347][T13287] [U] f1p3 [ 186.109544][T13287] [U] N0[L;a_l&kMC [ 186.111135][T13287] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 186.114427][T13286] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 rejected, failed to enable media [ 201.855059][ T5294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.862674][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.868792][ T5294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.872322][ T5294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.876292][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.915142][ T40] audit: type=1400 audit(1768466065.712:80689): avc: denied { listen } for pid=13947 comm="syz.6.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.037057][T13949] chnl_net:caif_netlink_parms(): no params data found [ 202.137731][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.140243][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.143340][T13949] bridge_slave_0: entered allmulticast mode [ 202.146979][T13949] bridge_slave_0: entered promiscuous mode [ 202.150639][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.153843][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.156572][T13949] bridge_slave_1: entered allmulticast mode [ 202.159221][T13949] bridge_slave_1: entered promiscuous mode [ 202.176378][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.181042][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.197697][T13949] team0: Port device team_slave_0 added [ 202.201201][T13949] team0: Port device team_slave_1 added [ 202.215142][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.217446][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.226703][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.232584][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.234929][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.244144][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.271915][T13949] hsr_slave_0: entered promiscuous mode [ 202.274343][T13949] hsr_slave_1: entered promiscuous mode [ 202.276684][T13949] debugfs: 'hsr0' already exists in 'hsr' [ 202.278560][T13949] Cannot create hsr debugfs directory [ 202.413102][T13949] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.421934][T13949] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.429550][T13949] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.437718][T13949] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.476210][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.479325][T13949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.482113][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.485123][T13949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.518518][T13949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.528633][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.532151][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.543871][T13949] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.554245][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.556595][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.560407][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.562837][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.678891][T13949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.898885][T13949] veth0_vlan: entered promiscuous mode [ 202.924888][T13949] veth1_vlan: entered promiscuous mode [ 202.947957][T13949] veth0_macvtap: entered promiscuous mode [ 202.954319][T13949] veth1_macvtap: entered promiscuous mode [ 202.970207][T13949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.983156][T13949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.990812][T10977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.998223][T10977] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.001397][T10977] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.014081][T10977] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.053031][T10977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.056222][T10977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.077933][T10976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.081314][T10976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.158727][T13998] binder: 13996:13998 ioctl 127f 200000000080 returned -22 [ 203.213002][T14003] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 203.307055][T14007] __nla_validate_parse: 3 callbacks suppressed [ 203.307067][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 203.365335][ T40] audit: type=1400 audit(1768466067.068:80690): avc: denied { execute } for pid=14011 comm="syz.6.2394" path="/sys/power/disk" dev="sysfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 203.374254][T14018] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2396'. [ 203.574656][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2399'. [ 203.633801][T14027] overlayfs: missing 'lowerdir' [ 203.854940][ T40] audit: type=1400 audit(1768466066.536:80691): avc: denied { mounton } for pid=14035 comm="syz.7.2402" path="/8/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 203.855844][T14036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.870510][T14036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.894249][T14036] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 203.898260][T14036] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 203.904428][T14036] overlayfs: d_ino too big (8, ino=9223372036854775866, xinobits=3) [ 203.909003][T14036] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 203.913021][T14036] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 203.918717][T14036] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 203.922562][T14036] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 203.926532][T14036] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 203.930854][T14036] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 203.935958][T14036] overlayfs: d_ino too big (kernel, ino=4611686018427388752, xinobits=3) [ 204.024549][ T5935] Bluetooth: hci3: command tx timeout [ 204.065490][T14045] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2404'. [ 204.173833][ T40] audit: type=1400 audit(1768466066.826:80692): avc: denied { bind } for pid=14048 comm="syz.5.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.587420][T14055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14055 comm=syz.5.2407 [ 204.597748][T14055] nbd: must specify a size in bytes for the device [ 204.648617][ T40] audit: type=1400 audit(1768466067.275:80693): avc: denied { mounton } for pid=14062 comm="syz.7.2410" path="/12/file0" dev="proc" ino=4026533472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 204.648640][T14063] fuse: Bad value for 'fd' [ 204.749150][ T40] audit: type=1400 audit(1768466067.359:80694): avc: denied { setattr } for pid=13949 comm="syz-executor" path="/12/file0/eps" dev="proc" ino=4026533474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 204.772569][T14083] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2417'. [ 204.784716][ T40] audit: type=1400 audit(1768466067.406:80695): avc: denied { mounton } for pid=14080 comm="syz.6.2415" path="/file0" dev="ramfs" ino=49923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 204.797680][T14081] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.800254][T14081] overlayfs: failed to set xattr on upper [ 204.803555][T14081] overlayfs: ...falling back to redirect_dir=nofollow. [ 204.805838][T14081] overlayfs: ...falling back to index=off. [ 204.807768][T14081] overlayfs: ...falling back to uuid=null. [ 204.813442][T14081] overlayfs: cleanup of 'bus/work' failed (-13) [ 204.817075][T14081] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 204.820251][T14081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.824019][T14081] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 204.928647][T14093] rdma_op ffff88804d3571f0 conn xmit_rdma 0000000000000000 [ 204.942580][T14095] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2421'. [ 204.999289][T14090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14090 comm=syz.6.2419 [ 205.085270][T14103] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 205.173375][T14105] program syz.5.2425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.205746][T14107] IPv6: Can't replace route, no match found Connection to localhost closed by remote host. [ 205.788126][T10961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.994634][T10961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.122454][T10961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.212823][T10961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.440889][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.445443][T10961] bridge_slave_0: left allmulticast mode [ 206.447575][T10961] bridge_slave_0: left promiscuous mode [ 206.449867][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.948403][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.001256][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.052602][T10961] bond0 (unregistering): Released all slaves [ 207.059573][T10961] bond1 (unregistering): Released all slaves [ 207.186338][T10961] bond2 (unregistering): Released all slaves [ 207.332209][T10961] tipc: Left network mode [ 207.462950][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.981922][T10961] hsr_slave_0: left promiscuous mode [ 207.984550][T10961] hsr_slave_1: left promiscuous mode [ 207.986991][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.989466][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.992508][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.994869][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.006131][T10961] veth1_macvtap: left promiscuous mode [ 208.007999][T10961] veth0_macvtap: left promiscuous mode [ 208.009832][T10961] veth1_vlan: left promiscuous mode [ 208.013133][T10961] veth0_vlan: left promiscuous mode [ 208.350261][T10961] team0 (unregistering): Port device team_slave_1 removed [ 208.394851][T10961] team0 (unregistering): Port device team_slave_0 removed [ 209.244900][T10961] IPVS: stop unused estimator thread 0... [ 210.136169][T10961] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.247338][T10961] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.319376][T10961] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.404370][T10961] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.626500][T10961] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.744967][T10961] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.810172][T10961] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.903225][T10961] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.132792][T10961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.203615][T10961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.299377][T10961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.372150][T10961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.556446][T10961] bridge_slave_1: left allmulticast mode [ 211.558243][T10961] bridge_slave_1: left promiscuous mode [ 211.560095][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.563791][T10961] bridge_slave_0: left allmulticast mode [ 211.566072][T10961] bridge_slave_0: left promiscuous mode [ 211.567909][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.572542][T10961] bridge_slave_1: left allmulticast mode [ 211.574575][T10961] bridge_slave_1: left promiscuous mode [ 211.576882][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.580730][T10961] bridge_slave_0: left allmulticast mode [ 211.583060][T10961] bridge_slave_0: left promiscuous mode [ 211.585951][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.592057][T10961] bridge_slave_1: left allmulticast mode [ 211.594336][T10961] bridge_slave_1: left promiscuous mode [ 211.596475][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.603227][T10961] bridge_slave_0: left allmulticast mode [ 211.605581][T10961] bridge_slave_0: left promiscuous mode [ 211.608139][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.221663][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.303986][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.368133][T10961] bond0 (unregistering): Released all slaves [ 212.647264][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.690073][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.763811][T10961] bond0 (unregistering): Released all slaves [ 213.110487][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.138967][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.160626][T10961] bond0 (unregistering): (slave bond3): Releasing backup interface [ 213.212701][T10961] bond0 (unregistering): Released all slaves [ 213.220228][T10961] bond1 (unregistering): Released all slaves [ 213.232174][T10961] bond2 (unregistering): Released all slaves [ 213.332737][T10961] bond3 (unregistering): Released all slaves [ 213.519665][T10961] tipc: Left network mode [ 215.350139][T10961] hsr_slave_0: left promiscuous mode [ 215.354555][T10961] hsr_slave_1: left promiscuous mode [ 215.357399][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.360530][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.364740][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.368312][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.378912][T10961] hsr_slave_0: left promiscuous mode [ 215.382457][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.385588][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.390165][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.393359][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.399703][T10961] hsr_slave_0: left promiscuous mode [ 215.402940][T10961] hsr_slave_1: left promiscuous mode [ 215.407658][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.410779][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.414697][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.417830][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.466102][T10961] veth1_macvtap: left promiscuous mode [ 215.469451][T10961] veth0_macvtap: left promiscuous mode [ 215.471993][T10961] veth1_vlan: left promiscuous mode [ 215.474479][T10961] veth0_vlan: left promiscuous mode [ 215.477821][T10961] veth1_macvtap: left allmulticast mode [ 215.480743][T10961] veth1_macvtap: left promiscuous mode [ 215.483138][T10961] veth0_macvtap: left promiscuous mode [ 215.485608][T10961] veth1_vlan: left promiscuous mode [ 215.487944][T10961] veth0_vlan: left promiscuous mode [ 215.493580][T10961] veth0_macvtap: left promiscuous mode [ 215.496126][T10961] veth1_vlan: left promiscuous mode [ 215.500282][T10961] veth0_vlan: left promiscuous mode [ 215.919919][T10961] team0 (unregistering): Port device team_slave_1 removed [ 215.950085][T10961] team0 (unregistering): Port device team_slave_0 removed [ 216.527902][T10961] team0 (unregistering): Port device team_slave_1 removed [ 216.553240][T10961] team0 (unregistering): Port device team_slave_0 removed [ 216.825753][T10961] pim6reg (unregistering): left allmulticast mode [ 217.068373][T10961] team0 (unregistering): Port device team_slave_1 removed [ 217.093186][T10961] team0 (unregistering): Port device team_slave_0 removed [ 221.168741][ T24] ================================================================== [ 221.171351][ T24] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1a24/0x1ca0 [ 221.173838][ T24] Read of size 8 at addr ffff88805621d320 by task kworker/2:0/24 [ 221.176259][ T24] [ 221.177055][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.177072][ T24] Tainted: [L]=SOFTLOCKUP [ 221.177075][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.177084][ T24] Workqueue: events l2cap_chan_timeout [ 221.177098][ T24] Call Trace: [ 221.177104][ T24] [ 221.177109][ T24] dump_stack_lvl+0x116/0x1f0 [ 221.177124][ T24] print_report+0xcd/0x630 [ 221.177148][ T24] ? __virt_addr_valid+0x81/0x610 [ 221.177157][ T24] ? __phys_addr+0xe8/0x180 [ 221.177166][ T24] ? __mutex_lock+0x1a24/0x1ca0 [ 221.177180][ T24] kasan_report+0xe0/0x110 [ 221.177192][ T24] ? __mutex_lock+0x1a24/0x1ca0 [ 221.177207][ T24] __mutex_lock+0x1a24/0x1ca0 [ 221.177221][ T24] ? l2cap_chan_timeout+0x6d/0x340 [ 221.177232][ T24] ? add_lock_to_list+0x9d/0x130 [ 221.177243][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 221.177257][ T24] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.177273][ T24] ? l2cap_chan_timeout+0x6d/0x340 [ 221.177284][ T24] l2cap_chan_timeout+0x6d/0x340 [ 221.177295][ T24] process_one_work+0x9ba/0x1b20 [ 221.177310][ T24] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 221.177324][ T24] ? __pfx_process_one_work+0x10/0x10 [ 221.177338][ T24] ? assign_work+0x1a0/0x250 [ 221.177350][ T24] worker_thread+0x6c8/0xf10 [ 221.177364][ T24] ? __pfx_worker_thread+0x10/0x10 [ 221.177377][ T24] kthread+0x3c5/0x780 [ 221.177388][ T24] ? __pfx_kthread+0x10/0x10 [ 221.177400][ T24] ? rcu_is_watching+0x12/0xc0 [ 221.177410][ T24] ? __pfx_kthread+0x10/0x10 [ 221.177421][ T24] ret_from_fork+0x983/0xb10 [ 221.177432][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 221.177443][ T24] ? __switch_to+0x7af/0x10d0 [ 221.177460][ T24] ? __pfx_kthread+0x10/0x10 [ 221.177471][ T24] ret_from_fork_asm+0x1a/0x30 [ 221.177490][ T24] [ 221.177493][ T24] [ 221.239297][ T24] Allocated by task 13002: [ 221.240711][ T24] kasan_save_stack+0x33/0x60 [ 221.242215][ T24] kasan_save_track+0x14/0x30 [ 221.243830][ T24] __kasan_kmalloc+0xaa/0xb0 [ 221.245474][ T24] l2cap_conn_add.part.0+0x60/0xa90 [ 221.247148][ T24] l2cap_chan_connect+0x1691/0x2150 [ 221.248869][ T24] l2cap_sock_connect+0x3ba/0x770 [ 221.250497][ T24] kernel_connect+0x107/0x180 [ 221.252073][ T24] rfcomm_dlc_open+0x84a/0xaf0 [ 221.253619][ T24] rfcomm_sock_connect+0x423/0x6a0 [ 221.255274][ T24] __sys_connect_file+0x141/0x1a0 [ 221.256880][ T24] __sys_connect+0x13b/0x160 [ 221.258356][ T24] __x64_sys_connect+0x72/0xb0 [ 221.260114][ T24] do_syscall_64+0xcd/0xf80 [ 221.261583][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.263459][ T24] [ 221.264231][ T24] Freed by task 13257: [ 221.265525][ T24] kasan_save_stack+0x33/0x60 [ 221.267019][ T24] kasan_save_track+0x14/0x30 [ 221.268554][ T24] kasan_save_free_info+0x3b/0x60 [ 221.270232][ T24] __kasan_slab_free+0x5f/0x80 [ 221.271790][ T24] kfree+0x2f8/0x6e0 [ 221.273040][ T24] l2cap_conn_del+0x5c7/0x760 [ 221.274539][ T24] l2cap_disconn_cfm+0x95/0xf0 [ 221.276072][ T24] hci_conn_hash_flush+0x10e/0x290 [ 221.277701][ T24] hci_dev_close_sync+0x601/0x1260 [ 221.279333][ T24] hci_dev_do_close+0x2e/0xc0 [ 221.280902][ T24] hci_unregister_dev+0x227/0x680 [ 221.282497][ T24] vhci_release+0x17d/0x230 [ 221.283952][ T24] __fput+0x402/0xb70 [ 221.285222][ T24] task_work_run+0x150/0x240 [ 221.286688][ T24] do_exit+0x87f/0x2bd0 [ 221.288057][ T24] do_group_exit+0xd3/0x2a0 [ 221.289512][ T24] get_signal+0x2671/0x26d0 [ 221.290977][ T24] arch_do_signal_or_restart+0x8f/0x7e0 [ 221.292732][ T24] exit_to_user_mode_loop+0x8c/0x540 [ 221.294393][ T24] do_syscall_64+0x4ee/0xf80 [ 221.295872][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.297906][ T24] [ 221.298692][ T24] The buggy address belongs to the object at ffff88805621d000 [ 221.298692][ T24] which belongs to the cache kmalloc-1k of size 1024 [ 221.303047][ T24] The buggy address is located 800 bytes inside of [ 221.303047][ T24] freed 1024-byte region [ffff88805621d000, ffff88805621d400) [ 221.307391][ T24] [ 221.308164][ T24] The buggy address belongs to the physical page: [ 221.310158][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805621b800 pfn:0x56218 [ 221.313408][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.316058][ T24] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 221.318688][ T24] page_type: f5(slab) [ 221.319971][ T24] raw: 00fff00000000240 ffff88801b442dc0 ffffea00008f6210 ffffea00014f9a10 [ 221.322689][ T24] raw: ffff88805621b800 000000000010000a 00000000f5000000 0000000000000000 [ 221.325545][ T24] head: 00fff00000000240 ffff88801b442dc0 ffffea00008f6210 ffffea00014f9a10 [ 221.328458][ T24] head: ffff88805621b800 000000000010000a 00000000f5000000 0000000000000000 [ 221.331198][ T24] head: 00fff00000000003 ffffea0001588601 00000000ffffffff 00000000ffffffff [ 221.334152][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.337107][ T24] page dumped because: kasan: bad access detected [ 221.339128][ T24] page_owner tracks the page as allocated [ 221.340976][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1164, tgid 1164 (kworker/u32:9), ts 57477642630, free_ts 57343092386 [ 221.347312][ T24] post_alloc_hook+0x1af/0x220 [ 221.348872][ T24] get_page_from_freelist+0xd0b/0x31a0 [ 221.350656][ T24] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 221.352548][ T24] alloc_pages_mpol+0x1fb/0x550 [ 221.354229][ T24] new_slab+0x2c3/0x430 [ 221.355868][ T24] ___slab_alloc+0xe18/0x1c90 [ 221.357413][ T24] __slab_alloc.constprop.0+0x63/0x110 [ 221.359198][ T24] __kmalloc_noprof+0x4fc/0x910 [ 221.360780][ T24] ieee802_11_parse_elems_full+0x1db/0x3780 [ 221.362790][ T24] ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 221.364916][ T24] ieee80211_iface_work+0xe28/0x1350 [ 221.366887][ T24] cfg80211_wiphy_work+0x3fb/0x560 [ 221.368813][ T24] process_one_work+0x9ba/0x1b20 [ 221.370409][ T24] worker_thread+0x6c8/0xf10 [ 221.371926][ T24] kthread+0x3c5/0x780 [ 221.373239][ T24] ret_from_fork+0x983/0xb10 [ 221.374729][ T24] page last free pid 6176 tgid 6175 stack trace: [ 221.376920][ T24] __free_pages_ok+0x725/0xf80 [ 221.378608][ T24] skb_free_head+0x114/0x210 [ 221.380605][ T24] skb_release_data+0x795/0x9e0 [ 221.382779][ T24] consume_skb+0xbf/0x100 [ 221.384698][ T24] netlink_unicast+0x5b2/0x870 [ 221.386720][ T24] netlink_sendmsg+0x8c8/0xdd0 [ 221.388773][ T24] ____sys_sendmsg+0xa5d/0xc30 [ 221.391004][ T24] ___sys_sendmsg+0x134/0x1d0 [ 221.393050][ T24] __sys_sendmsg+0x16d/0x220 [ 221.395039][ T24] do_syscall_64+0xcd/0xf80 [ 221.396890][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.398798][ T24] [ 221.399589][ T24] Memory state around the buggy address: [ 221.401851][ T24] ffff88805621d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.404878][ T24] ffff88805621d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.407379][ T24] >ffff88805621d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.410561][ T24] ^ [ 221.412655][ T24] ffff88805621d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.415892][ T24] ffff88805621d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.419103][ T24] ================================================================== [ 221.422462][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.424978][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.428329][ T24] Tainted: [L]=SOFTLOCKUP [ 221.429700][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.433301][ T24] Workqueue: events l2cap_chan_timeout [ 221.435075][ T24] Call Trace: [ 221.436170][ T24] [ 221.437124][ T24] dump_stack_lvl+0x3d/0x1f0 [ 221.438601][ T24] vpanic+0x640/0x6f0 [ 221.439920][ T24] panic+0xca/0xd0 [ 221.441138][ T24] ? __pfx_panic+0x10/0x10 [ 221.442581][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 221.444222][ T24] check_panic_on_warn+0xab/0xb0 [ 221.445805][ T24] end_report+0x107/0x160 [ 221.447193][ T24] kasan_report+0xee/0x110 [ 221.448659][ T24] ? __mutex_lock+0x1a24/0x1ca0 [ 221.450198][ T24] __mutex_lock+0x1a24/0x1ca0 [ 221.451748][ T24] ? l2cap_chan_timeout+0x6d/0x340 [ 221.453368][ T24] ? add_lock_to_list+0x9d/0x130 [ 221.454925][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 221.456763][ T24] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.458665][ T24] ? l2cap_chan_timeout+0x6d/0x340 [ 221.460315][ T24] l2cap_chan_timeout+0x6d/0x340 [ 221.461930][ T24] process_one_work+0x9ba/0x1b20 [ 221.463618][ T24] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 221.465855][ T24] ? __pfx_process_one_work+0x10/0x10 [ 221.467594][ T24] ? assign_work+0x1a0/0x250 [ 221.469066][ T24] worker_thread+0x6c8/0xf10 [ 221.470709][ T24] ? __pfx_worker_thread+0x10/0x10 [ 221.472435][ T24] kthread+0x3c5/0x780 [ 221.473750][ T24] ? __pfx_kthread+0x10/0x10 [ 221.475261][ T24] ? rcu_is_watching+0x12/0xc0 [ 221.476781][ T24] ? __pfx_kthread+0x10/0x10 [ 221.478264][ T24] ret_from_fork+0x983/0xb10 [ 221.479924][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 221.481638][ T24] ? __switch_to+0x7af/0x10d0 [ 221.483117][ T24] ? __pfx_kthread+0x10/0x10 [ 221.484524][ T24] ret_from_fork_asm+0x1a/0x30 [ 221.486038][ T24] [ 221.488066][ T24] Kernel Offset: disabled [ 221.489447][ T24] Rebooting in 86400 seconds..