last executing test programs: 13.138758106s ago: executing program 3 (id=457): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) io_uring_setup(0x2687, &(0x7f0000000300)={0x0, 0x608, 0x44200, 0x3, 0x3d7}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="160000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000000c0)="c27d613820a7f7e2d98b7d0864cc675d2c87b0a22ba2bdb108c2b95eb78b805b78e846274adc040668baead7f99e57832e7eb46cef5b84c3131e6301be4c6f9693db2988b1cfab9b5eccb7ba7d6d81202ef31ee2318cf3b69e", &(0x7f00000002c0)=@tcp=r4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1005, 0x2, 0x9, 0x0, 0xaba}, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfffd, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x0, 0xfffffffd, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x1, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x200, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x1ff, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x6, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0xfffffffd, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8081, 0x2, 0x263, 0x40000b, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x4, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x6, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xffb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x0, 0x3, 0x4, 0xffff, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x1, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0xe, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a8, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4, 0x1}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 11.520466937s ago: executing program 3 (id=467): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x1, 'dvmrp0\x00', {}, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006800010029bd7000000000000a00030000000000080005006418718e", @ANYRES32=0x0, @ANYBLOB="0800088004000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setresuid(0xee00, 0xee01, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e045f2d20", @ANYRES16], 0x7) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="0104ff0305000c00ea01dc7eddf00998ae0eea536e83016845d1f5c516db6b468a377583bdeb5cb03ed5d8ae3691884ee34fa48d4ecdf89758c81ca4a595fb916a1450bd1259493764de2c5a7acb7d664780269cd0f83f7f189535b491355d3008b43eca846ec01eb74ef521c0ad05478b1e06c82baa4eef24c24edeb778d9a5e0fc16adbb985f1495fb93faa67439b9c170fcb89dc7bd70691c6cb8350300000000000000ac94bed5014686f436f6c84fd7a49745da108c66333c636bac1e17bb3ece5656096aa9"], 0xc8) sendto$inet6(r10, &(0x7f00000003c0)="25eed0aee8c79f", 0x7, 0x48899, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r11, @ANYRESOCT], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.950362277s ago: executing program 3 (id=474): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0xfffd, 0xfffffffd, @remote}, r2, 0xfffffffc}}, 0x48) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x85000) getresgid(&(0x7f00000002c0)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x100000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@mmap}, {@posixacl}, {@posixacl}, {@uname={'uname', 0x3d, '\x88{\"-:'}}, {@access_user}, {@mmap}, {@noextend}, {@privport}, {@cache_mmap}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure}, {@dont_measure}, {@smackfstransmute}, {@fsname}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, r7}}]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="66eaff00000000006111770000000000850800001a0000209500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 10.870260104s ago: executing program 3 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x20000008}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000776782ec0500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) mount$afs(0x0, 0x0, 0x0, 0x14000, &(0x7f0000000000)={[{@dyn}, {@flock_write}]}) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414bb080007400100000124000680140004000000000000"], 0xb8}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0) 10.659554159s ago: executing program 3 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r6, 0x25, 0x7, @val=@tcx={@void, @value=r0}}, 0x1c) 10.349365817s ago: executing program 3 (id=481): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 10.303458768s ago: executing program 32 (id=481): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 4.950135185s ago: executing program 1 (id=511): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8080) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000d580dca700000000", @ANYRES64=r6, @ANYRES64=r7/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000e00100000001000080320000003682dbe4021584110c78ece8100bc5bc049bd638b8f874136db718e7af7e09e8dd01039a435cd1cb6205ee4ded92d97368929ea2a80f5a05e5d2ba271c3b9a8d"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000045) keyctl$unlink(0x9, r2, r2) 4.800298157s ago: executing program 1 (id=512): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x5, 0xfffffffe) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffff56) syz_fuse_handle_req(r4, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xfffffffffffffff5, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x10, {0x5, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x8, 0x5, 0xc000, 0x7ff, r7, r8, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x2eb, 0x0, 0x0, 0x40, 0x10001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7f, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x7, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r4, r5, 0x0) write$binfmt_misc(r9, &(0x7f0000000440)=';', 0x1) 3.889344456s ago: executing program 1 (id=523): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000040)="6a6f94a88842ac69ba6a567e1bdb90d25e21a98c7b6c1f86ba111d89008d8648c5ed0359c323f6588c9e57b3283f8e2b08362c4e63ce0a54bb849661f5a6cd0735d6", 0x42}], 0x2}, 0x4050) 3.888743577s ago: executing program 1 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x35) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x2c, 0x0, [0xfffffffa, 0x1ff, 0xbb, 0x4, 0x2, 0x1, 0x2, 0xfffffffe, 0x9, 0xc00, 0xffffff3f, 0x9, 0x6, 0x8000008, 0xfffffff7, 0x5]}], r4, 0x1, 0x1, 0x48}}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_disconnect={0x5}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r5, 0x40087101, 0x110c230000) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000e40)={{r5}, "390557e788eb9aea92f77396f397ecd822dfc4309d3d4fe247d7afd858e8f5281c27492b864e8a4c47c829b1d9876fae6f3bd560e604649d58c5221bc4f421b21f8e619f0a1bb3cc6c31ab26dcbb69ef488cc3f9dcc455cce7541155d4131a0ef88c1a0e5abf7d33cee56b3236144a561df5021530cf75d97a8116445540e16337ebbcec672a807d6451bd097ef3d9d3b846d97d46d1db1ee1d190e7c144f79ca84de8d27513251cf13057c3ba796664ed6fbb7094f6287eb35aeb17b5e63920d267eab0a0634a026421d00fb2ee4f8295a778abc536a670fe631d4277d3fa6c7025b48dc0a56093ce3f846631f2e81c9b34b0ab19fca9adb35c6cc46ddbd5566eb7fd8982cb1ff8335d787ff1bf700cc2346cf0107ca7ce2d82a8bc5c15d94879e8503371ece16540e4c5ef4f7aefe8c032268fa2bd65de278f98a9deec4ef30cc6e22b6b84740b88b77d744f6e0bb2919124cdeba0a225dfabae1e4d48048abc649b682cf5de991d98791a02449db896bcf809d90a6876a2b5aeb347af5cdbc06f47d7b149fb452dd7dfa58aac8c6151af98ac93c88b0ffc27ea7300ed13fc08f36f284286febc144c819bd09afc85a8fcdee307c47e50bce6a0e0e50db506f4cc03859c706be9dc8128e58c4423dc7238713179bed33b36816f921e0cebe22b7cebd63a0802a44c41081b3cddc9a47200f742417554690b2b86d27479f2e3ea2e8ac788ead424263c37f99610a18b811a19266d50b79e58d09562e3b1b95132eabc9852131a2f7b756bbf99873b40a7454189e9bac199e1f798a014d051b5bfc2ac530c5ce043204da7dc5a72b8923556f5b29a43dbf03147b2b0884d8c45b8e879acb8858b341d5241a2b63921276a809438a67cd82571cd71d102f86db9e0dfe77f576456af3ecb67873bb75ecc1795cf2ddc15e7540a4ff2a39aac5eacf0b34fa2c74795f740a84dc62f69dd5b89cbec4cec9752e61126a156afeaa8f411c30a38a285f84c352818d6f52f63d2fcf7e13454124ae56bf2c57e256ea75bc82e24d95bf93b388cf48bee86f7e0a32905f932a81627e476dd28ca60347a72f25bd36c556791469962ef404cdbdedf52a69f1fbeb169877f1153eddfd03073f26ccbb989b8531cc028df475033334ff8ab9681cff983199399b7e29294f3ab665bd2022f494d90d9655dca93fdececea6f6dc550b60a93a08d1215b830c9264933e0787eba3b0f4daac6a370f8594f7925d989296054b8b6c60f9db88f819b10bbb4062487e2180a36bcc14bf2e12dec066f893dbd437e3ed675457389aa6a93fac13ab25021700b88c44211a55ff03d14813a436a6d74a2efc79a0f34f499c024341941ca31707e8b40a49a4ca33fb009cce4430afb9a02e3db6086520b234143cf937d505777bd4a98502bb2cff90b61dbb8a2e708386077678bdb99f4e897982d3cb8a7d33b31f778f9645db9226fd03edb31d4b74e2c3a43d44d01e1d2ac562c3b8f2a9a4509a8f7e03203ada3ac639e44785df3899d2fbbfd543b165fcbe481d089d19dd05b9cb4f4c05c3866ac5d9e147784b258bc5f37d24385e0d71b7437f6b024db30d0d786a9265abc4a4162594ec9365894dfe30caa55294a8c3a35bd2c9c448fd02d2285a925f3d029e151459dc0e621c30fa2d6d0919ca8a0ef985a7ce61d0063cce6b3d0b82b1bdfc188ac5b7e8d4053b8bd384d8f9eea17d9b6c139c0ce9e8ac7e3927dd4305b5f1a555dda951af0a23df05c439c0806831e9888244899ba3a66696a1717e41e23b91170aba964a461c7b0ed32fc8a5ebfad5a03a3ff37de49e0ad3d96f5b9f57db483e419d30b8de461d34d28e40d51cae57909e1602920ec7645103804b0d3deca8d8a804dd90f0638ce261d4eda5e75d1d03cfa3db396807d281e41f534df3f64c51629e6b1b613ad846614283acf2bc180c9f37b09ca4cbbab9f83ad2165337dba93f5a719ac5a4223c4667957cdaeb70c1ce3061c5218bdbf2a5cde89794337d0b68c25205e2369e504183d199f3684b45474e60e77fb296d6d69cd7e89920f5c5daa32f1b1a0f0defb6c0182516412a1012a15ba9d8efd7e61a845e9ed643cb240ea9914865550d6814a0d56cb6b1ace5b82627832fad8f9b2a8357d35f28a8e22c6e18b18f811dbafdea0c24fb11d7a4c22fccad5afe98cf2ffd75c7a9cd42e94460d6cab8039a8484ccaea52b5a2e89c26e4057b0c6fa277e875874c02d4b15e4cec5cc422d052a5978a10d415219a2108d0a551cd50d01e52d01ed36ad6ad89dee146ecf6f7e4b4fadae91d76d79201cfd0baede70b267dcb71e25c3efb005bfac83358f786fe80ed858ff41189a9f6221f425fb5023a04f66926fa7a1255509441faa5f04878bc7f98f4e84527b8a1405ec2f1b9bf1dd9c47476804c9322c8ccf89967335b6040b0efad55a50647520dcf0d218178768821c6bdcc93c76cefca606e4e7c710929b6d29075289afadfdd2e29e4b477d67fa73ede7facbd5f6b1b68843c429dafc94345dd1e258be50a08e3e2efe4dfc5ab6709bba2103ac9d6cab03d1d8d6d22d9819dc273545395675515acf77363cc251c7d25496c0affc33240d5a7b9fccce513f17b0b6b9b5dd5a6e6a6962a8c3b69bd7ba9338d269246ca6d7506187d3e021bdc2edd80c4da518816bf8fcda4357ba9b3d067d1f9bcacd5da5d9e4eba584f61d9c3ac41b704e1bc24e91fcf3c9736859d586dbf9f142a44fc2f489784295852d1c89ccc4b4e4f8d48d77a231967bab2b377334d0a3ee288f214d69f3d253202ff43a142cd5d1644d5c3e622dffae4edd254e1d35f993dfa277c6864a53ddd0178946b839fe44ff6e6b3860b3b9c66073f4bd3acf8518604fe8d4c4d997beebdc0de15046011d4512adf8065b00a1997c2cf6f2e82e88f3df99483e0c3db31ace95b20b5b13cf4ec844ecc1b0bcecb1f6b8b27af079380016a9b014849e51733724890633a658225aa73d07fb2af751a91266e96f9bd23b732fe9fa7053b190a7fca5b500873b542954224f0a4703eda7756cbb2af59215ef5c13fc975ec824593058509b996e291da566a0ef13141c4e925c680f31651ce18e80cf021e22ec195726d8f59c01cfbe94efd9968a37b2870a4327379d42d30d434ce7208cd61949bd0ee0bdf0c0db342dffbe1c6bbf1a4e55b829d422958de772ebb6d215fe8697cc7666a7c56bc5d3c86326a9fa9344628730e7dd9ef7990f08ca3cf84f81cfffb2890fb659a92e4c7ef460c6b73406233402aa92629ddcdeb9113dbc6f0bb084517747575d5f65f4a1b15fb564cfdf86ab6eee821a106555ad3ca3e2535859eafe0b3c1a9e670ae2b4f50781ec98c5512f1f54dc3a681eaaae7b56d2f7cf3baf7af4cf97b04c6069a22e37e6cb1a223c621da961ade3e6680b3cf92137ef2dc9ceaab1e4717ae370aed35a3959b09ff6adc7290097cc82366820f67dbd645323ff59161ddc9bc3774ae12982b8ba0aa6bc90094229f8b8970f0667ad76bbe57574e25f74eca5d43ef630273a78376156402a2e7c88ce2e811e12eb63a151dca68919d3aa224e57dc797fdf80458e585c2ea86057fa79ab98c851eb693f7fb050fc53f5acc287dc1686bb0bd363eaad0762f759b39482384f99d8e84329d763fa6d582f7063d6db391d1b4f2d6aadd8e5d26ead40fb2cf1ddbb380ba39334d768cd53a8ecc7097ed09e1de06db8b3cc5ea828dac1230eb6e3b779ce9f40c864d3327f5565f97f8acca2a4c65784814b58967ddcee20b41c09b1d02a75a9e5e8c7fe6d78cd20fcac3b44ccedb61de9d5d67c49ab2b1c71818d20c357e88acce7b47fb40adf58ba273963602c21650f0d659ae8b8b1f0181ef36135618d345962074c6190807d8e121cb95e00bea154536ae2300d450702952052f2d776029c90a1bea0c5b7daa1dbd3e7bf01fe87cd906f02e129150f3f2fe65d3871fda331a7af82f79dfc69ba284078a1e86590f206baa4138b92efa5851f636ddb88a98d246a1643a55a847fb6663f57e553f23425b9b2972c5215f1ce5e24c3ed652be145a55c391672acb0f0ba30e1d20646d7a76e99b53137e45008879acb063fff78a38ed7b7df347a515b25e8283085c346fba8d5ed01c803d65e33edd051256335059ccfedd52a3d86a8cdcb11959f35796c8436dcff82ed86424967f8af310e67c4c3d1b85449922764367228453471502e06d3d49035377764d5a4ca4313f090be885a6a7068fe5071b111a92c3ca76695c424e5c34e6463e62d49b27f389ddf1e221594148ebffa7343f3ad2c212692834e78d7a16d846ce843f4ee2ccf52dae19fc8190f05b0d2a67ad786cb3ab7bdd8543f8c49c7f512512746e04f5f2186678bacf3987848b3d48b5f8aa853c01ad3749434c02e28b2f0d4791abb96a5dedaaec396314ea06dce47cdf44432e3743d744dcc8100fc5859c90c1c4b1175f72893c29f51f3bfb0769f32969e7a1a9c701676316b73b6a290f4fed06b6a6d274168f1056d75aeef0f6b4f2d0dbbd33c1ad7fb7d2ec0573f5463f5c6c538d41cd239e7dfc9b68c6c56d057586657f4dac66cfcbc898758491b2bb040c7860cd6236076393a89b4b234077a6b21c7953be955063748a11d1a6a33913c1ec622802e84219db2e43b009f3aea37689d2273a59a6bc0cf3100418794075b95b6fe1e5702f273a70a27ab964ba4210f81de60408c8870db0f1dcfc617b03913ff9419b524c5d01cc746173f0a8557aef0b384e159bbba489f7aede4377e2700aaf050bc822569ecaadff486e8838b094354463ddd9ffcbb308dd0442b804fe1f7749b23c07bebb8eacb1498d26af481ec038cb1ccb75e32419944dfe9fd1e2f47f74f06866a2b8bffe37d08c04ce4246d9e82d103f02d6773677d3d242f3c92299d28e1770101ffdb8147f99545d7cd0c007b8b7bef1917ae1694e3f1ab6d8855c0a8699e14cbe0f3d8b36ef353f0d68adcf87f094d87f13e5002e611e7db9084fc9ac8b932db618627c5d8254536cb544f8f1465611110907a8d59f73389687704f7377752c00a5158748809cc4c8017171c152ae782a8de818c813b05e734f0228cf8aae6f8e9c96f9f70e7b0ec75bb5629ddda1a891e712b3c3478ccf4803ccfd1b6f6fdc0390899ee21e7e4aa58273d83af2569d6c76107c8388bc6b04a6c1e35e605f6af026c03344b2ba24b8a99a54cef535cb5a3ae0d1c4bdfb2ba43b3627b085ec04fc67af57dc03f74a571ff52dac39abb2a59a4a2e44181eb087ada3c6931a4aa217c07e125b50b28736f85adda9d3f339212ec33db1105b190e942f3391f4e1b411cd75e9d24269849d792f230ceefcf803fa7a679a86dd3cf5b43b22e51701ebafda01d6f6e354ef59773c11772b426619bb8c58c39cdfc0a6faf7121c8fc352ad7acfcd16db15fa9e16d51cb642423dc57629a63a0385a93d28cfd3a7c9b64220c6d90c593fba627aeca2c0bd1fed23faa06d3c9c31223dfa2983b84adff67cd7d5981ba771ea03591b2a0756c12b7bcf1494a118229338a514635949691a900d0ff1c9e03ecacd64218cc6ec26e76c1ae102bc94bfb54b64b1ea36a71a523697cf9c53c26d12761bb073853d4c40908ef3158d9b54e66754072501f5ce8f4a7d539a939ccd50cf44bdf207a46c1a15551f9d83551455b1a7ae410c1ab091afc8cde00ccbd7bfa437cfcdfb505d69c4d82b61c3e772144b781ded1f8c7291b5b802314af39e551f82ce9c6932241ad763e551d5a939d71e12f3"}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20008001}, 0x24000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x00', &(0x7f0000000980)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\b\x7f\xd8\x1e\xac\xb8\xa0\x1dm\"Y\x84tu=\xfe\xb7\x8cs\x87\xc56\x11\xd7\x05\xda\\Q|\xc0Z?\xeb\x00\x00\x00\x00=\x8bu\x8c\xbe\rL\xb4\xa9\x1d\x81\xce|F4J\x18\x92\x00\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}, &(0x7f0000000880)=0xc) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1800084, &(0x7f00000008c0)={[{@stats}, {}], [{@fowner_lt={'fowner<', r2}}]}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_usb_connect$midi(0x1, 0xac, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xccd, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x1, 0x1, 0xf0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x6, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x2, 0x1, [{0xe, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x9, 0x7, [{0x15, 0x3}, {0x0, 0x3}, {0x56, 0x7f}, {0xc4, 0x8}, {0x8, 0xe3}, {0x6, 0x3}, {0x9, 0x5}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x0, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xd, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xbe1, 0x7}], [{{0x9, 0x5, 0x8, 0x954887235cb764d9, 0x20, 0x7d, 0x4, 0xe, {0x6, 0x25, 0x1, 0x2, "4dc8"}}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x5, 0xf, {0x9, 0x25, 0x1, 0x5, "22fe1206de"}}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x9, 0x9, 0x5, {0x8, 0x25, 0x1, 0x4, "14fe6ae9"}}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x68, 0x6, 0x80, {0xe, 0x25, 0x1, 0xa, "8141ff71c88ddce36b5c"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x4, 0x9, 0x80, 0x20, 0x1}, 0x38, &(0x7f0000000280)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "4ed6c9bcee5d6bb00c5b6d0094a04cdf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8b, "bda7df899a43f3dd71f859b02d75417c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xd1, 0x7, 0xda, 0x80, 0x5}]}, 0x5, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "8b186b49400068d6b4aabca69829e0376937e8a106b7a0269adc2be9ed433cd8ea0ef4a72207"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x1f, &(0x7f0000000380)=@string={0x1f, 0x3, "ce929a76cc414794b384103ff55592944f322bc59ad55ddb1c4290c923"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000680)={0x14, &(0x7f0000000500)={0x0, 0x23, 0xda, {0xda, 0x3b3943cbc55f32e8, "cc6f74d06d4ca4ac5a11633dc2adddfed0d806ca5af8f848e6f5e7eed2e5a18acc4ac36b8288f2f55c249196ed8a92aaa76a8f08d588616d9f7b285504ed4ba6b33f2e3fd86f653a46dc8a73e247b6915bec0cfe4425f6921d1a6acaa517ab5a825ad9b914d63f9fde07ab37011964bf117b1fdd0f5d3aa2ee80b6263b6e08aa6a5c416059601f7297ed163e11f3145fdd1b1b31dd956a079d4e4b23da3801e098ee740a79c25208c5e8506745db8bae65c81bee2e80843c87ec9b6e078a578e3d02053f8bccc14a9bf387976abd7575a1921e4846cdabe9"}}, &(0x7f0000000600)={0x0, 0x3, 0x52, @string={0x52, 0x3, "c0e30b810511175b04246d0d1dfe777d60e66c0004bcd22429d055128df16213007f9a0ff435bacbc946a57ffc2b6ac49a6332857f9b9c337f2c2cc96d0adbedc72c655529fa04dc60d708f78c74ef9c"}}}, &(0x7f0000000840)={0x34, &(0x7f00000006c0)={0x40, 0xe, 0x13, "9749429b3b4a8e9372781dd3f34bf75e102df5"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000780)={0x20, 0x0, 0x13, {0x11, "94a970c010a95e0aac78d41c8b335881fa"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xe9}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x4c}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x1, 0x5000003a, r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r10, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000b80)={r10, &(0x7f0000000a80)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x4040, &(0x7f0000000bc0)={@_ha_fsid={[0x6, 0xd]}, {0x1, 0xcfd6, 0xe, 0xd}}, 0xfffffff2, &(0x7f0000000b00), &(0x7f0000000b40)=0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000000000006006600c78800001c0033"], 0x4c}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xb2b7, 0x42}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x79}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80c4) r12 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r12, 0x6f2d, 0xffffffffff60014a) 1.988585817s ago: executing program 2 (id=536): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xa, 0xfffffffc}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400020000000900020073797a31000000000c000780057f0000000000000000050002000000050001000600000013ff0300006173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25060000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000008000200010000000c000680060005004e2000000c0006800500020009000000300006800500020005080000050002007f0000001400040000000000000000000000000000000001060001000a00000008000200060000000c00018008000600060000000800040004000000"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4080) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000004c0)={{0xffff, 0x1, 0x7, 0x1}, 'syz0\x00', 0x3a}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100ff1f00000000000007000000c2"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xa, 0xfffffffc}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400020000000900020073797a31000000000c000780057f0000000000000000050002000000050001000600000013ff0300006173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25060000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000008000200010000000c000680060005004e2000000c0006800500020009000000300006800500020005080000050002007f0000001400040000000000000000000000000000000001060001000a00000008000200060000000c00018008000600060000000800040004000000"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000004c0)={{0xffff, 0x1, 0x7, 0x1}, 'syz0\x00', 0x3a}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc080) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100ff1f00000000000007000000c2"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) 1.630259074s ago: executing program 4 (id=537): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000180)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.267311873s ago: executing program 2 (id=543): r0 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x7f1d, 0xc}) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="00354508bc2d7302a4da60d36f74b1986dfa7334a9b5a0bfd8c2d7615e30a34e90ba3fe1d6dcd7c0c9d42c1b3b210937cd780efdee01809d06fc919c782651cbd29bb3fc2ac0e94383f56bc60912ea79d0c0e0a8fe8a8a96f6833082507ef87858578f8463dc35ad9f800000000000000000", 0x72, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) write(r4, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) (async) keyctl$clear(0x7, r3) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 32) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/67, 0x43, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 1.1084828s ago: executing program 2 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000010000000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002000180c2001f"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x200) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180391e02006e657464657673696d300000000000000500190003"], 0x2f}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) 1.04969819s ago: executing program 2 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000140)=0x7) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1, 0x0, 0xfffffffffffffecf}, 0x10000}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac404e1e", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 850.013219ms ago: executing program 0 (id=549): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000340), 0x0, 0x0) fcntl$dupfd(r1, 0x406, r2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, 0x0) (async, rerun: 32) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) (rerun: 32) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='iocharsr)\xae', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_io_uring_setup(0x5230, &(0x7f0000000080)={0x0, 0xcc1a, 0x10803, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000300)={0x2020}, 0x2020) r10 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x101140) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000828bd7000f6dbdf25010000000000000008410000004c001800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x5) (async) ioctl$EVIOCGBITSND(r10, 0x80404532, &(0x7f0000000400)=""/7) (async) r12 = socket$kcm(0x29, 0x2, 0x0) r13 = memfd_create(&(0x7f0000000a00)='\xcdT\xea\x1fd\x1a6\x13\xeb\xce(}\x91Q\x02\x00E\x88-\x00', 0x0) pwritev(r13, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) (async) write$binfmt_elf64(r12, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x88, 0xac, 0x5, 0xff, 0xa, 0x2, 0x6, 0x9, 0x32f, 0x40, 0x331, 0x2, 0x800, 0x38, 0x1, 0x3, 0x7, 0xffff}, [{0x2, 0x6, 0x3, 0x5, 0x6, 0x100000001, 0x9, 0x7fffffff}]}, 0x78) (async) sendfile(r12, r13, 0x0, 0x8000fb00) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 849.618763ms ago: executing program 2 (id=550): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x1010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f000090d000/0x2000)=nil}) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000080)={0x3, 0xfffffffc}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x0, {0x4, 0x4}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000580)="440f20c0663502000000440f22c0ba2100b0f2ee0fc7ad0f000f01b95d000f18850400b800008ed80f320fc7bf18b466b8000000000f23c80f21f866350c0040000f23f836f008b562ad", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000600)="400f06b9aa0900000f32b805000000b9b5d100000f01c1660f3817bf08000000660f383442af48b880690000000000000f23c00f21f835010009000f23f8c442d5b8bfc9c000003636260fc76d00195a0867476e", 0x54}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x4f, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x53) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x23b4010, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 739.678321ms ago: executing program 1 (id=551): r0 = socket$netlink(0x10, 0x3, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaab8aaaa0c0800450000b00000000000119078000000000000000000004e4b142b7461fd777b1c012bd14e449f49fcdb8f080c26a04883ad6e078e56b65c8c82b8af584cbf2649a50f2dbc43efa8698db652ffcebbf1380c1c59852e4451b57d037ad3c04594282423424d00000000000000110000000000bcfd5606375461caaa2f19935e6996c7096f650003000000000000649a3bfbc1f39cb307b347dcb9cdb042d2643f0000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0], &(0x7f0000000440)='syzkaller\x00', 0x2000009, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffce}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r9, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/4097, 0x1001}], 0x1}, 0xb}], 0x4000000000000f1, 0x40000021, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x106c, 0x80000001, 0x5, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 739.388164ms ago: executing program 0 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000014000580"], 0x4c}}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0xf000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x107000}) setrlimit(0x8, &(0x7f0000000380)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x4000010, 0xffffffffffffffff, 0x0) 580.561074ms ago: executing program 0 (id=553): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000000)='(%\x00', 0x4e00, &(0x7f00000001c0)={@_ha_fsid={[0x18b3eb2e, 0xc]}, {0xc89, 0x4, 0x8, 0x6}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xe}, {[0x3, 0x6, 0x1, 0x4]}, 0x0, 0x2a, &(0x7f0000000280)=""/42}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000380)=0x81) (async) unshare(0x60000600) (async) r3 = dup3(r1, r0, 0x80000) (async) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x2, 0x3, 0x7f, 0xa, 0x8}}, 0x118) write$tcp_congestion(r3, &(0x7f00000002c0)='cubic\x00', 0x4000) 510.40451ms ago: executing program 4 (id=554): add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 440.045825ms ago: executing program 0 (id=555): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000000)="0a000000010003", 0x7) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 439.442749ms ago: executing program 4 (id=556): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x0, 0xa}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c881}, 0x20000001) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) sendmmsg$sock(r8, &(0x7f0000003680)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8840) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000180), &(0x7f0000000240)=[r9], &(0x7f00000001c0), 0x0, 0xff}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) 289.992577ms ago: executing program 0 (id=557): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) open(&(0x7f0000000080)='./file0\x00', 0x1e587f, 0xc9) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone3(&(0x7f0000000680)={0x24184000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 289.692627ms ago: executing program 2 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}]}}]}, 0x14c}}, 0x0) sendto$inet(r8, &(0x7f0000000a00)="b4f8476bca083812a22baed0b369d8c6ea065b4760b1540bc559a564acd4d885d2c1ab08f5e34f7bb087343d0458a1c460d5691424c2d494e8f3b3122b9175b7e3bee07bb85db5a8b631f935091ef70108d551ecea405bf91bce84d15ae56c1e8bb870935d275e88cfc9d3b5cdba95a89d9e97a50f457aac925d51c371fa4b88fea6033fd5a9d565d83955737ad613d4a27734736a8cc960ce1516f58e9b6a6b1b53d2a77f5f944ea5cfb89ecfe4d9f621293decd3dab9bf74abc414cbd4b88f9b1375a66133f12230c8c861296b416db8df411dc56a6c67f44d8af525249afcc8e777d8cf32d98e5220f3b9ac7e064957745551ff3f6f21c983351687f7945287c66e86b4a715d610769f3b2b924157fd5a6f24c2b0a44a1732cf4fd12f35ec5746831dd4e92b8e958c3ab1418513388782658edb689c2db4fa706fd26959e65ac58903081ed4d062243ab91617cc6cbf0a5bfe4a3bfe7d965de4e65c1a8c867b99d8b8bb64d7d7342e5c69c0c5c23e62270ff7dc005b4b53a9b7de6c2fc0ad48e305d98458a419895c88cb181a29961f954cf246900461ec0f8329764d274c41baf71ed06fdbc36b21d4e4a643695cef9efacadc2f10026e378f38e4dbca42dd45d0fe50ee94bc8b5d95248633d3987e6f4a6522b80ee13bf8be275113a93a0b098127cbccba0aa9b5211d1b59aa437daaee1d5299d75a67133154d56cea75cb2a7b2e336b2385aea6dfa83075a1a145f3f1773320438ade88366970cdca8ccafd55b3de602eaa7ce58483680373379c456726635d83d6e0817b955bded4b46ab97f0e8f0e56a604227c44894514c8371942bc18f6b2b57c5085a73a9b53816407752506824da1a8442e974f34e0768dd6e1396a0f6f9c30d993093e984a94ff0e2f05da2c7c0cd388e7bb370df42182b2f8299c59ec8c0c3d6eb45d8ed20c55ff10044ffc39ba93e6448c486e4f2f2192a6e15f2b69f691eff32fca1262f415603157f23bb7e0cb41ec5cf2798367e074ebe044cb9b271adc21071ed2bcd23f82ae200ef81ee71a916c39fd64e84cb2407cecb3952d8920bfaaafb886c5c5974f516d7de6e87c291fb20138ae620c9f09174e09ec2b973073baaa7ce9043db5ba9a52ab25437453a6ea60d4b23a836c0c1b1b1d4bc822f707daa9a802ff3b1e141d37583cebd5f7d43a281462272b29c00b7f4dfe30202a3938033c1d989c8fa6a0f6642dccc32b1c8bb03a7bf251dbd42b38d6abcd65d37894ffc7852037bd10f4b622959d04286b8bd58f51d1d216659d0a6d765a310644f7b92591f44ee60bb6014870294fb146f685cc2afa9117b1fd5a404e7ad01777cca0a7d4f5cac9fa4b614636029d25ee59b3f48c50c51b25570e584d870b8a8320598cb326cc4be64d6f38e8e42484a3a83a214769db678c75f4b112590bf69ebae28625b02906aa5e4d5b8f5898aaf5a450f321e3b563911a2e9d8ee956b4b85796dc02f140517008673d9ea9b6f5c69741de508283acff1fbc0bba067f6c12ce3b747eed468dee33e6e7d85571d71924f60352467de50d3270d02f9652e928280f94ffd8f356a5ef3eea7083dec709e16979debfdd8f801dd317a8b8ab4b6285fc7d0508bc4e31870a9804554a4b58fcfc023abcbd7d25365713a66c7e86a401e6b363063c8c96732c19c41d5e53838980fe39592c6828c8cef7fb25a69f36ee30201fab5f998dd704dd8ef02314450f1cd5874b82a1aa34b571b6d33377b8f7974c3f2050d34b2a313ad4595a93713e586780d4a97f4310e9c92575f161f25706c8f354bfda7790c5f1eacdecf13a2b0251d655d2bcac8bbd78c585e9889e246e635615f91595e80c69546fb498a0144a10606ad2b43d504d33d8c6c39316cdb5149a22c1065a202eb429a12110d84ccb9f5cca9f860adae77b1461763181c9dc7dc918ddcc377ab056b8acbf729b2961bef70b77fc6df4f82a1508b45181b45e527e1b74972ad3c8f85b1c0c5236c259aeb88875c8694ca55560264d512602a4ff0275dbd29b5c8f93ff7b6353c0cd1549db8f30fc9715c12a49e548978c87c59e97d6e8d2081f2dfbc4be51c22be628ac13708733c4c5adafabf3c39ba945d6a1f6bf09939560564b0fbbfb9e028d87e91e1137b5705698a89405609e8b2b64e95bcebbb53544595af374273757772330c3856c70d7d2d1136bbae564bedad2d646a01ecd070ed2f47b62aad8e15218fbb41b311e6ca3405af060f938b8f9a0fe362db5b802ac893618fc4a663c50effd7e75894d7c4fd1410e3597bfcabbd2f05086d049e5573676d4ad0c6bd5d2bcfe617e7c6ee666173e400e6077ca320664af375de805d53197d3cbfd7ae9c292aed402c774b7e7de83feda891f207136d79bfe1663fc50347daad1fe67761d06f7467f5be8040b2dbe2a52658b7bd0611421cee5d5ebd5ff31ae28ac5279f500a45d746669efdc37d5b46f0ab34728642db4d0bfb9bbce5eb105f63f1c97a648105eb33c2ecaed74fcb78d41a09fe941eaf05a9ece289c6f5dc6f359e4280c2a9d438737e37d033b54809a145d26889843dc231ef947dcb05f048fcf2b73dbb05a21c942c801bc7f88c7aeda63cf799e571c04ee7d489ede15b44af46b77116020d2dfacf8c8ec76afab095e3dbd4219e3523d5001de4140bc0efb26d1eacd0ca94623427dd5a2d0fbfbbe35aa8f443513135a931157f2cf6caef5a7018c154266ce81ec9a395209095d965e13479fd72dd096092194e69b08241feb626bec1193a23b85203de3cc49de21027f30539bcf0f234b9363b562e56be9c501b5dd8f591f99cb53c9e4ff1539627a2e06d7477fbfd20c903db8d492f2c0c24075a1d61db6299929056023bed85348661e3ca54a863986d78b598073781be0016db4321c7a205635e3eac7b9420e8be56beeaac1742c594003abff0012d15c40444e34abb46456e3bff48b5c53c82a7970497da6192b5dd72958088f43c34cddf05663bc6953b95fd3e146731b15e98097dbfbbcef8d95e23d22476924d340b5b5e173dd68bead27d4af55ac77f35fe5acbca4534964f1498ba8964c5ea69616fca83fe92e4578ffb5984dbfcda82d60fb2d137993843aef47c2882106a8fd9b64379c55a35ae485716527aa3dbcdfb51d3edd611972846a787359a1f6eb8cd851ed51fc4d8b9232f97af4a2f4cc618f34bb423e917d81d029fa7bd3e037dc63f199861c818746c4771c3bd26c7ce0e3b1ac79721bcc8d95793adece90d6babe842433ebcae2228be3b818aac6dea75cd2cfc953ea60f6420ae31b75e1ef6004da6c920836da95491c3a81b46f1c85a469a87be87c731d12b21da6915293e4c21fb85adb5a565927c49d55c01d8463ecc6314153170721e2fc423e0c6674f9128cc1793f43277112e67976c7033930673d4d25500087b8f503850f593b461fd2c05c17c61c8b2df3060b305efa380966909bff5bee1dc2c19e93ae010ac213a4715c4ee559407d03dcbd72342a64e5badd7e1aee92f35cc3c6b12136a6648dc9832ae723855cf05a0d486f555f2b961b1c87006557e09cea24c8e7a2979bcdeda4762110c07e17ba233204d9693f4b2403c8c657b38aa8daaa132460f257de4bcfc23f1bada1ecca794683bdef9355ea121ff3430f16758540459e84948bdf5c3a6128e9edb6b3bf260af855d85c1d67dc22eb51da436ad302f0cc7375325dfb463fc63212159c2373d6db7fe59bf903fec503e115e02ee5814511cedbfe86d1a0f94dbc746e3d05ccc3fc811bf25a64003783ed6b9d6774bde6798999607a74b571f9d9b4566a77ea8fe2622166c08f1c3e0331f17a63564b0f9a74214716fabdf35869afa87c96a3e407c916f442ab7f6d183d73ee22ba25232796076b199a9c515b83ad401b31731b5e982a054a3a86277d318876a57b02a494cdfbf64293c35c712eabcfe052837288b44ac4fbc91ab7f0b595fa6d5e7dab530a8167dab05b9f1d69b2970f1a3fd2bd621cd10dfc89ad24588e320c653ed2e77aa87c6ba7d8631b40cea2486e0034e79350f61b13177ca0b9666e86ddbaa1ded98db4c00f00633f6dd82007e1ef3ec339f055150ea7bfb1e1fe9faa165d51a56b559f597d2732b1cdc3376b119d9af0d7ac825a58a06a4d381c6ab048e9e839dd707cf734d0923fb9c701e783af3e9ae9a61e05e31d315a754cd1691d94902135f50528df4876195d874aa228f3a1cfb8f98534dd2bff466f71d18b78d8e1f16e3e0f06ce6cf8ac5c65e40108339bea2bcf38d257e8c1a15b0a65351fb682749adf49d80b979ded9abcb569ac8733038f06055cd32ec3b75f4c6d917ee6317393765e686d25689d4af512fd491cefe07d6e6622b82e768eb05d0e5bd5cb610964c7aa9b912670d0a9b47e8c1aadae2847a53e97872fd8c872216b8d6c37e8d67e2f1ee4bf8a398d60377d29a90fbe7a4719d8d9c3d7c7baf2f781fbb2f4139eb691cea0e5d0e6da5f83eb6a245ce00e95ffab8a6b9c1b75c0e338bdab563c1e85638cde95bac9533aeed029d653e13e113a8ee3d457bce41afc32d4ea747cb20f1b03194b22e3636d8ae9f4dcf3700f06d0ee0827a44b582f3eb630236d056fabb67f56d4d679bbbbddaed6583cd4630d6098740705f0e617facc59bfefad25848c49ad87c9e19a55b275dc1faf99e495019fd9f5499acfde14200bb5bb22a824d71cff1ac6862d6607c8043563edfb8a88b909e8da3ea6103818cd236c4385e8e98801be098af93cf07840cef12af9346a11e422b8a4a158205afa8fbe427b243de8d15be3a007744201bd10dec09d21432be7ff777bef225ba5dca65563c9fbaff3883462f5316d8a079b3a85b276bb879fca2a92f53f68918f50a9f6445ab6116a5363cfb85c44632ba7bedf3ecf6f7b7ea0f6115a83b9a975ade47831bbcbc6fa9de4379629bc3b0413c32837b5a2653111c10ad4c5620c35ff522d98dc65a6296c305955181b66aac7cdbd5edc1c2d11d8f73e24b2d8258ef7bf4076b2d48958cd459945aaad18e25009fe8996cba3912ccbb92457e7271b9271b0d0ceda9b297f216c62f85729b648ff568bdaa1aa0bfa2b190df69e379241dc17545c39998f8776e1869a0cf53a2101bf576f5520bbe0e980aae503a12697f75065c5d97d421c7cc0a63e5e0d890782c3c2d281299abc001e9bff53e2d480a4425253147fac980c6814c5e53459eff89636e13862d1acb7aaf1a58e7be5dd679c8e163d652330f19a639ef4e71ea9fe571f8c00f5a8f2823b982b7daff098dfa6b6bdfe8d5f3d2b309ebbbb37d31fbda3f279d4a4a0bd75acf288213e36b608d7c7ed46710617e2a7e533494d77595c333c2ddb113195094cce16fc5424551e0adce340a90ca693c0925fa0a84f644aa17f88ec626d2c24017d5fa7dfedccc485b099b2cfbddd4faf1c91e1d01bf885e1c0d79ec8a451246cc491370d59dab605c636902100e0d1a5d4c8d44d0eea7eb17a62bdd20e968d66c79e94d84ef910aee4dcfb9ecd43a9cb1b0098787e46469035fbc679563765178f84537f193ec3a46be6aa9e29b482864b02061ce60ae3913ddcdbcd8994734b0f24fdfd027c5b3c1c1ecac0648fb641a42d9606bcb3ce9296c2804f4a45e8953cbbbf4fe1ad6841d243cae9c604d622420c6e7f6d01779f43d70029745eb4a620c01760137a74206cee28c82dd5206ade5f1328da713cbb4d8375e53b30a9d7e74ec4d89e2050a18ef33e45649465c2a8127a27fce2355cd94b5ebe4903b7ee434b09165634", 0x1000, 0x20000000, &(0x7f0000001a00)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r7, 0x1009}], 0x1, 0x8000007) close_range(r3, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4e1fd10fdc44164596512c744240047000000c744240247000000ff1c24b9800000c00f3235002000000f300f20e035000002000e0f22e0e0b8390140d84f2c66ba420066b8dd947676efc4a17853abb00c00003e470f019c1030000000440f20c0350e000000440f22c0", 0x6b}], 0x1, 0x27, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 210.838984ms ago: executing program 4 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf0527000000140030003d53fe6a4edc40915724e1a6ef0813900a0001007770616e31003100fc00000024003200226ea9908827954609ea2cc17d5e1163c878a322d5d4d24c6d615f7a4a889082"], 0x60}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x0, 0x401}}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) 54.175808ms ago: executing program 4 (id=560): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x9, 0x4}, {0x5, 0xc}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 48.932816ms ago: executing program 4 (id=561): syz_emit_ethernet(0x3e, &(0x7f0000000d00)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB="f8f4d75b634da1ef99fcb0b12cb9afff708d892c4edc9c4e2db0c960f9eed986c340d994db818de28cb6a5300edd81e64682b623b4cc5b4c0756c33215e5221ba30b433cb060e1b2b485584dec847bad76bc9d6bdad1e3d8f90fd287e8076e612d99f7b14d00ef0d4480c498d0c1bfce1ed89d5b83ac3a0735887a35e218e6fdacb934aa60362505c85bec9a39f1f7a4a140056cb1bf2a08aa3da7479f27330d6be6ea9487970644372aa5292db002e61fae0fadd5a1e813105fc558049aba989956df876c9be127d8e1b56a6841f6213c5be8d4edad20a9774d06a6b030a03bbf1a10569a5976cf4443e284de646bbd3a37b41288d10897522d09c30c659f", @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYBLOB="b5ea34e183804373e79a7e3d8185d42185d0fb036583f8b2a77f3b1806ed3dc81f45f4a2d38b029c24abbc84b82a1c8121077db90db750c7d32c4bd3bd26a60de27a864845c5e3fcd060de98a1963cbb8bda2080d8c7c3eeee987af845851086ac3e4f9257c1b8b86381b106fd344c2db1eb411fb00fb224f8a8a11bf2a6a02fd7c2c1dfb7e66347dd96bec089cc3401a0cd", @ANYRESOCT, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="4f2452cf15f15428d188f08d9b35be152800ab74acb146086d88599c3e9aef8cbceff54b0c87dfb15df1a4332a05bf828f485d2f6a64a91aac7d8ef9a0695efc9729c16097065d8dd2ea380900edb828461bff3b89b2f11adde7d40630ef1684c424cbd6b0a17e0cdaf31b09ab7c747b16a01345387afc22d1c9f979b95833973bfd5778586bcca6fb6ff84ff8d9a6c8c60b6cde2dfcb60985fc1be6c9642e1d3aad6bb3cba5a69c6336aad4ec3144baad8a9109a9f8ac46f9287f7eaae5f4aea710fde4310835159fbf49f2829c170b15", @ANYRES16, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="6157e594018722ab626e27827a51f8d224477b2f817fffd29779f86afa787f01c482b06779875d8c7bb5f45462b2897a432fb9ed1791fec623d36dd16078"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x20000004}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7", 0xaf}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1002000018000100feffffff0001000000000000000000000000ffffac1414aafc0000e6ffffffffff000001071c4e2300050000a00004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000067c1057e9540830b1b8f8894458de753abeff6000c00000004000100030000000000001100140000004a6f11"], 0x0, 0x28, 0x0, 0x1}, 0x20) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x56}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x28) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f00000001c0)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) r9 = dup3(r6, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 0 (id=562): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) kernel console output (not intermixed with test programs): 5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.894508][ T42] audit: type=1400 audit(1784366493.067:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.903188][ T42] audit: type=1400 audit(1784366493.077:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[3540]" dev="sockfs" ino=3540 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.910051][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.936869][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.941077][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.946198][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.951028][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.955422][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.957759][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.959655][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.960812][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.961786][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.962368][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.962855][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.963495][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.965979][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.968478][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.970552][ T42] audit: type=1400 audit(1784366493.167:163): avc: denied { read } for pid=5743 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.970919][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.974124][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.987115][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.989865][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.991980][ T42] audit: type=1400 audit(1784366493.167:164): avc: denied { open } for pid=5743 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.995508][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.021406][ T42] audit: type=1400 audit(1784366493.167:165): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.028526][ T42] audit: type=1400 audit(1784366493.177:166): avc: denied { module_request } for pid=5743 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.036537][ T42] audit: type=1400 audit(1784366493.217:167): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.724140][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.727716][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.730902][ T5743] bridge_slave_0: entered allmulticast mode [ 54.734851][ T5743] bridge_slave_0: entered promiscuous mode [ 54.754611][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.757976][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.761006][ T5743] bridge_slave_1: entered allmulticast mode [ 54.764679][ T5743] bridge_slave_1: entered promiscuous mode [ 54.843251][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.858197][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.860661][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.863093][ T5738] bridge_slave_0: entered allmulticast mode [ 54.866181][ T5738] bridge_slave_0: entered promiscuous mode [ 54.869850][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.872209][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.874685][ T5738] bridge_slave_1: entered allmulticast mode [ 54.877970][ T5738] bridge_slave_1: entered promiscuous mode [ 54.882815][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.950552][ T5743] team0: Port device team_slave_0 added [ 54.961655][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.975205][ T5743] team0: Port device team_slave_1 added [ 54.993308][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.043466][ T5738] team0: Port device team_slave_0 added [ 55.045931][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.049507][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.052568][ T5739] bridge_slave_0: entered allmulticast mode [ 55.056534][ T5739] bridge_slave_0: entered promiscuous mode [ 55.061674][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.064613][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.075630][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.092772][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.095796][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.099084][ T5748] bridge_slave_0: entered allmulticast mode [ 55.103051][ T5748] bridge_slave_0: entered promiscuous mode [ 55.108772][ T5738] team0: Port device team_slave_1 added [ 55.117690][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.120571][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.123482][ T5739] bridge_slave_1: entered allmulticast mode [ 55.127377][ T5739] bridge_slave_1: entered promiscuous mode [ 55.130919][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.133656][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.142591][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.147720][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.149818][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.151915][ T5748] bridge_slave_1: entered allmulticast mode [ 55.154700][ T5748] bridge_slave_1: entered promiscuous mode [ 55.184537][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.187234][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.196909][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.223664][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.226291][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.236687][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.250792][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.255546][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.261457][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.284591][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.311486][ T5739] team0: Port device team_slave_0 added [ 55.345483][ T5743] hsr_slave_0: entered promiscuous mode [ 55.349594][ T5743] hsr_slave_1: entered promiscuous mode [ 55.353631][ T5739] team0: Port device team_slave_1 added [ 55.370315][ T5738] hsr_slave_0: entered promiscuous mode [ 55.372659][ T5738] hsr_slave_1: entered promiscuous mode [ 55.375648][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 55.378239][ T5738] Cannot create hsr debugfs directory [ 55.393225][ T5748] team0: Port device team_slave_0 added [ 55.418834][ T5748] team0: Port device team_slave_1 added [ 55.430507][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.433196][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.441170][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.478161][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.481265][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.492040][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.506178][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.508592][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.517185][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.542553][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.544942][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.554493][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.618065][ T5739] hsr_slave_0: entered promiscuous mode [ 55.620302][ T5739] hsr_slave_1: entered promiscuous mode [ 55.622409][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 55.624415][ T5739] Cannot create hsr debugfs directory [ 55.670717][ T5748] hsr_slave_0: entered promiscuous mode [ 55.673916][ T5748] hsr_slave_1: entered promiscuous mode [ 55.676151][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 55.678843][ T5748] Cannot create hsr debugfs directory [ 55.884576][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.892070][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.895132][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.900264][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.911194][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.915955][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.932658][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.938260][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.988940][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.993658][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.996374][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.000618][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.003312][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.007857][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.010672][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.014798][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.029244][ T5100] Bluetooth: hci3: command tx timeout [ 56.029281][ T5752] Bluetooth: hci0: command tx timeout [ 56.029287][ T5746] Bluetooth: hci1: command tx timeout [ 56.036957][ T5752] Bluetooth: hci2: command tx timeout [ 56.103084][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.112187][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.115912][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.121904][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.127248][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.132975][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.137882][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.143820][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.223052][ T5748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.228429][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.238385][ T5748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.243199][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.248316][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.256656][ T5748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.262004][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.264910][ T5748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.270845][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.294513][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.306402][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.323413][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.326402][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.342313][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.344642][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.363108][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.378785][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.381010][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.400566][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.408966][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.411273][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.460124][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.481598][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.483936][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.499641][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.502050][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.530961][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.557055][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.565712][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.568048][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.582333][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.585155][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.764394][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.774275][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.836564][ T5743] veth0_vlan: entered promiscuous mode [ 56.855336][ T5743] veth1_vlan: entered promiscuous mode [ 56.861385][ T5738] veth0_vlan: entered promiscuous mode [ 56.878377][ T5738] veth1_vlan: entered promiscuous mode [ 56.888992][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.910308][ T5743] veth0_macvtap: entered promiscuous mode [ 56.923475][ T5743] veth1_macvtap: entered promiscuous mode [ 56.955720][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.959859][ T5738] veth0_macvtap: entered promiscuous mode [ 56.979666][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.983609][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.986414][ T5738] veth1_macvtap: entered promiscuous mode [ 56.990813][ T5739] veth0_vlan: entered promiscuous mode [ 57.009125][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.016308][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.019551][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.023410][ T5739] veth1_vlan: entered promiscuous mode [ 57.032504][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.044019][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.058499][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.071490][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.076469][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.093195][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.100067][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.118284][ T5739] veth0_macvtap: entered promiscuous mode [ 57.126932][ T5748] veth0_vlan: entered promiscuous mode [ 57.139719][ T5739] veth1_macvtap: entered promiscuous mode [ 57.156627][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.161675][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.201245][ T5748] veth1_vlan: entered promiscuous mode [ 57.201376][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.206411][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.221486][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.223255][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.227065][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.237035][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.261666][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.268609][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.272350][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277518][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.280571][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.280756][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.288253][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.331214][ T5748] veth0_macvtap: entered promiscuous mode [ 57.335944][ T5748] veth1_macvtap: entered promiscuous mode [ 57.382289][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.386458][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.391008][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.403912][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.422101][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.423938][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.425340][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.432370][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.437788][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.444782][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.490053][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.495418][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5'. [ 57.511493][ T5894] binder: 5889:5894 ioctl c018620c 200000000040 returned -22 [ 57.515949][ T5894] binder: 5889:5894 ioctl 8943 2000000000c0 returned -22 [ 57.542836][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.545438][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.579633][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 57.583468][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.588479][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.646416][ T5904] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 57.668518][ T5901] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 57.672740][ T5901] qnx6: wrong signature (magic) in superblock #1. [ 57.674724][ T5901] qnx6: unable to read the first superblock [ 57.679751][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.694035][ T5910] Zero length message leads to an empty skb [ 57.750867][ T5910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8'. [ 57.761219][ T5917] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 57.765138][ T5910] overlay: Bad value for 'workdir' [ 57.768515][ T5917] CPU: 1 UID: 0 PID: 5917 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 57.768540][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.768586][ T5917] Call Trace: [ 57.768593][ T5917] [ 57.768601][ T5917] dump_stack_lvl+0x100/0x190 [ 57.768631][ T5917] sysfs_warn_dup.cold+0x1c/0x28 [ 57.768656][ T5917] sysfs_create_dir_ns+0x24b/0x2b0 [ 57.768683][ T5917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.768707][ T5917] ? find_held_lock+0x2b/0x80 [ 57.768730][ T5917] ? kobject_add_internal+0x25f/0x930 [ 57.768752][ T5917] ? kobject_add_internal+0x25f/0x930 [ 57.768775][ T5917] ? class_dir_child_ns_type+0xd/0x60 [ 57.768799][ T5917] kobject_add_internal+0x2c8/0x930 [ 57.768825][ T5917] kobject_add+0x16a/0x1e0 [ 57.768845][ T5917] ? __pfx_kobject_add+0x10/0x10 [ 57.768868][ T5917] ? get_device_parent+0x1b3/0x4c0 [ 57.768886][ T5917] ? kobject_put+0xb9/0x640 [ 57.768911][ T5917] device_add+0x294/0x1970 [ 57.768933][ T5917] ? lockdep_init_map_type+0x5c/0x250 [ 57.768952][ T5917] ? __pfx_device_add+0x10/0x10 [ 57.768971][ T5917] ? lockdep_init_map_type+0x5c/0x250 [ 57.768990][ T5917] ? __init_waitqueue_head+0xca/0x150 [ 57.769015][ T5917] tty_register_device_attr+0x388/0x7f0 [ 57.769093][ T5917] ? lockdep_init_map_type+0x5c/0x250 [ 57.769114][ T5917] ? __pfx_tty_register_device_attr+0x10/0x10 [ 57.769141][ T5917] ? tty_port_init+0x156/0x1c0 [ 57.769163][ T5917] gsm_activate_mux+0x155/0x2a0 [ 57.769183][ T5917] gsmld_ioctl+0xbbc/0x15c0 [ 57.769211][ T5917] ? __pfx_gsmld_ioctl+0x10/0x10 [ 57.769234][ T5917] ? __ldsem_down_read_nested+0xf3/0x890 [ 57.769260][ T5917] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 57.769288][ T5917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.769309][ T5917] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 57.769337][ T5917] ? __pfx_gsmld_ioctl+0x10/0x10 [ 57.769357][ T5917] tty_ioctl+0x11b4/0x1640 [ 57.769388][ T5917] ? __pfx_tty_ioctl+0x10/0x10 [ 57.769407][ T5917] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.769441][ T5917] ? __fget_files+0x215/0x3d0 [ 57.769457][ T5917] ? hook_file_ioctl_common+0x140/0x440 [ 57.769482][ T5917] ? selinux_file_ioctl+0x13b/0x290 [ 57.769504][ T5917] ? selinux_file_ioctl+0xb6/0x290 [ 57.769527][ T5917] ? __pfx_tty_ioctl+0x10/0x10 [ 57.769546][ T5917] __x64_sys_ioctl+0x18e/0x210 [ 57.769570][ T5917] do_syscall_64+0x115/0x870 [ 57.769587][ T5917] ? clear_bhb_loop+0x40/0x90 [ 57.769610][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.769628][ T5917] RIP: 0033:0x7f323eb9de99 [ 57.769645][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.769662][ T5917] RSP: 002b:00007f323f9f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.769681][ T5917] RAX: ffffffffffffffda RBX: 00007f323ee26090 RCX: 00007f323eb9de99 [ 57.769693][ T5917] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 57.769705][ T5917] RBP: 00007f323ec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 57.769715][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.769726][ T5917] R13: 00007f323ee26128 R14: 00007f323ee26090 R15: 00007ffc25147718 [ 57.769753][ T5917] [ 57.769778][ T5917] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.790854][ T5919] xt_hashlimit: size too large, truncated to 1048576 [ 57.922477][ T5917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5917 comm=syz.3.9 [ 58.065790][ T5941] vivid-002: disconnect [ 58.083513][ T5919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5919 comm=syz.2.11 [ 58.107394][ T5752] Bluetooth: hci2: command tx timeout [ 58.109184][ T5752] Bluetooth: hci3: command tx timeout [ 58.109692][ T5100] Bluetooth: hci0: command tx timeout [ 58.111311][ T5752] Bluetooth: hci1: command tx timeout [ 58.146519][ T5947] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 58.152435][ T5947] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16'. [ 58.567106][ T5528] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.658892][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 58.658909][ T42] audit: type=1400 audit(1784366497.857:257): avc: denied { setopt } for pid=5969 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.667354][ T42] audit: type=1400 audit(1784366497.857:258): avc: denied { bind } for pid=5969 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.674445][ T42] audit: type=1400 audit(1784366497.857:259): avc: denied { name_bind } for pid=5969 comm="syz.2.22" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.684760][ T42] audit: type=1400 audit(1784366497.857:260): avc: denied { node_bind } for pid=5969 comm="syz.2.22" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 58.713362][ T42] audit: type=1400 audit(1784366497.857:261): avc: denied { write } for pid=5969 comm="syz.2.22" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.722417][ T42] audit: type=1400 audit(1784366497.857:262): avc: denied { connect } for pid=5969 comm="syz.2.22" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.731131][ T5528] usb 8-1: Using ep0 maxpacket: 8 [ 58.734493][ T42] audit: type=1400 audit(1784366497.857:263): avc: denied { create } for pid=5969 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.735876][ T5528] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 58.742973][ T42] audit: type=1400 audit(1784366497.857:264): avc: denied { bind } for pid=5969 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.752419][ T5528] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 58.756468][ T42] audit: type=1400 audit(1784366497.917:265): avc: denied { getopt } for pid=5969 comm="syz.2.22" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.760800][ T5528] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.767636][ T5528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.770988][ T42] audit: type=1400 audit(1784366497.967:266): avc: denied { listen } for pid=5967 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.898333][ T5984] ======================================================= [ 58.898333][ T5984] WARNING: The mand mount option has been deprecated and [ 58.898333][ T5984] and is ignored by this kernel. Remove the mand [ 58.898333][ T5984] option from the mount to silence this warning. [ 58.898333][ T5984] ======================================================= [ 58.898403][ T5940] vivid-002: reconnect [ 58.917857][ T5830] IPVS: starting estimator thread 0... [ 58.920628][ T5984] IPVS: sh: FWM 3 0x00000003 - no destination available [ 58.923863][ C3] IPVS: sh: FWM 3 0x00000003 - no destination available [ 58.938571][ T5984] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.945366][ T5984] tmpfs: Unknown parameter 'lowerdir' [ 59.007175][ T5985] IPVS: using max 43 ests per chain, 103200 per kthread [ 59.182987][ T5998] netlink: 'syz.0.28': attribute type 322 has an invalid length. [ 59.240774][ T5887] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 59.296959][ T5831] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 59.366976][ T5887] usb 6-1: device descriptor read/64, error -71 [ 59.460151][ T5831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.463050][ T5831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.466351][ T5831] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.472985][ T5831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.475774][ T5831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.479496][ T5831] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.484220][ T5831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.486606][ T5831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 59.491921][ T5831] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.498623][ T5831] usb 7-1: string descriptor 0 read error: -22 [ 59.500444][ T5831] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.503241][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.514924][ T5831] adutux 7-1:168.0: interrupt endpoints not found [ 59.544391][ T6013] batadv_slave_1: entered promiscuous mode [ 59.549781][ T6012] batadv_slave_1: left promiscuous mode [ 59.627544][ T5887] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 59.725045][ T5831] usb 7-1: USB disconnect, device number 2 [ 59.763220][ T6024] autofs: Unknown parameter 'ÿÿÿÿ' [ 59.767034][ T5887] usb 6-1: device descriptor read/64, error -71 [ 59.887198][ T5887] usb usb6-port1: attempt power cycle [ 60.122167][ T29] libceph: connect (1)[c::]:6789 error -101 [ 60.125554][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 60.169604][ T5528] libceph: connect (1)[c::]:6789 error -101 [ 60.172393][ T5528] libceph: mon0 (1)[c::]:6789 connect error [ 60.187308][ T5746] Bluetooth: hci1: command tx timeout [ 60.196993][ T5752] Bluetooth: hci3: command tx timeout [ 60.197038][ T5100] Bluetooth: hci2: command tx timeout [ 60.197467][ T5746] Bluetooth: hci0: command tx timeout [ 60.218259][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 60.222021][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 60.237384][ T5887] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 60.257865][ T5887] usb 6-1: device descriptor read/8, error -71 [ 60.388050][ T55] libceph: connect (1)[c::]:6789 error -101 [ 60.390862][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 60.436311][ T5528] libceph: connect (1)[c::]:6789 error -101 [ 60.438414][ T5528] libceph: mon0 (1)[c::]:6789 connect error [ 60.517122][ T5887] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 60.537501][ T5887] usb 6-1: device descriptor read/8, error -71 [ 60.647253][ T5887] usb usb6-port1: unable to enumerate USB device [ 60.898722][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 60.902877][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 60.944344][ T6043] ceph: No mds server is up or the cluster is laggy [ 60.944445][ T6046] ceph: No mds server is up or the cluster is laggy [ 60.947770][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 60.953919][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 61.327529][ T1045] usb 8-1: USB disconnect, device number 2 [ 61.356960][ T6070] IPVS: fo: FWM 3 0x00000003 - no destination available [ 61.358824][ T6069] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 61.362821][ T5887] IPVS: starting estimator thread 0... [ 61.370178][ T6066] comedi comedi3: unsupported base address 0x2000 [ 61.378481][ T6066] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 61.457035][ T6072] IPVS: using max 31 ests per chain, 74400 per kthread [ 61.576547][ T6088] 8021q: VLANs not supported on lo [ 61.629589][ T6090] binder: 6089:6090 ioctl 4018620d 0 returned -22 [ 61.684000][ T6094] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 62.146109][ T6126] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 62.152007][ T6126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.64'. [ 62.267083][ T5100] Bluetooth: hci3: command tx timeout [ 62.268530][ T5752] Bluetooth: hci1: command tx timeout [ 62.276895][ T5752] Bluetooth: hci0: command tx timeout [ 62.277970][ T5100] Bluetooth: hci2: command tx timeout [ 62.373693][ T6142] capability: warning: `syz.3.68' uses deprecated v2 capabilities in a way that may be insecure [ 62.637479][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'. [ 63.231613][ T6196] evm: overlay not supported [ 63.443187][ T6220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'. [ 63.478727][ T6220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'. [ 63.761594][ T42] kauditd_printk_skb: 245 callbacks suppressed [ 63.761633][ T42] audit: type=1400 audit(1784366502.957:512): avc: denied { bind } for pid=6246 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.771426][ T42] audit: type=1400 audit(1784366502.957:513): avc: denied { name_bind } for pid=6246 comm="syz.1.96" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 63.781423][ T42] audit: type=1400 audit(1784366502.957:514): avc: denied { node_bind } for pid=6246 comm="syz.1.96" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 63.790229][ T42] audit: type=1400 audit(1784366502.967:515): avc: denied { read } for pid=6246 comm="syz.1.96" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.796463][ T42] audit: type=1400 audit(1784366502.977:516): avc: denied { allowed } for pid=6250 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.806850][ T42] audit: type=1400 audit(1784366502.987:517): avc: denied { setopt } for pid=6250 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.818212][ T42] audit: type=1400 audit(1784366503.007:518): avc: denied { map } for pid=6250 comm="syz.2.97" path="socket:[10949]" dev="sockfs" ino=10949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.837519][ T42] audit: type=1400 audit(1784366503.007:519): avc: denied { read } for pid=6250 comm="syz.2.97" path="socket:[10949]" dev="sockfs" ino=10949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.880048][ T6259] overlay: Unknown parameter 'smackfsdef' [ 63.899303][ T42] audit: type=1400 audit(1784366503.097:520): avc: denied { read } for pid=6258 comm="syz.2.99" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.901879][ T6259] input: syz0 as /devices/virtual/input/input6 [ 63.917362][ T42] audit: type=1400 audit(1784366503.097:521): avc: denied { open } for pid=6258 comm="syz.2.99" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.218385][ T6284] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 64.407402][ T6309] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 64.460257][ T6294] tipc: MTU too low for tipc bearer [ 64.505345][ T6321] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 64.508021][ T6321] netlink: 756 bytes leftover after parsing attributes in process `syz.1.116'. [ 64.538435][ T6324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.542183][ T6324] block device autoloading is deprecated and will be removed. [ 64.582498][ T6330] ptrace attach of "/syz-executor exec"[5748] was attempted by "/syz-executor exec"[6330] [ 64.585796][ T6331] ptrace attach of "/syz-executor exec"[5748] was attempted by "/syz-executor exec"[6331] [ 64.613576][ T6334] block nbd3: NBD_DISCONNECT [ 64.625865][ T6334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 64.628026][ T6334] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.632583][ T6334] vhci_hcd vhci_hcd.0: Device attached [ 64.664610][ T6342] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 64.673290][ T6342] bridge1: port 1(geneve2) entered blocking state [ 64.675547][ T6342] bridge1: port 1(geneve2) entered disabled state [ 64.679907][ T6342] geneve2: entered allmulticast mode [ 64.682669][ T6342] geneve2: entered promiscuous mode [ 64.736892][ T847] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.790109][ T6332] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 64.897402][ T847] usb 5-1: Using ep0 maxpacket: 8 [ 64.900884][ T847] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 64.903868][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.915222][ T847] pvrusb2: Hardware description: Terratec Grabster AV400 [ 64.917454][ T5897] usb 44-1: SetAddress Request (2) to port 0 [ 64.920705][ T847] pvrusb2: ********** [ 64.922698][ T5897] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 64.926331][ T847] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 64.930812][ T847] pvrusb2: Important functionality might not be entirely working. [ 64.933960][ T847] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 64.938707][ T847] pvrusb2: ********** [ 65.116208][ T2523] pvrusb2: Invalid write control endpoint [ 65.153127][ T2523] pvrusb2: Invalid write control endpoint [ 65.155297][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 65.159652][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 65.161661][ T6338] vhci_hcd: connection reset by peer [ 65.163369][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 65.167064][ T13] vhci_hcd vhci_hcd.3: stop threads [ 65.169713][ T2523] pvrusb2: Device being rendered inoperable [ 65.171281][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 65.172868][ T13] vhci_hcd vhci_hcd.3: release socket [ 65.175375][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 65.179248][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 65.185029][ T2523] pvrusb2: Attached sub-driver cx25840 [ 65.191254][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 65.196219][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 65.282974][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 65.285930][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 65.296719][ T6373] ntfs3(sr0): Primary boot signature is not NTFS. [ 65.299574][ T6373] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 65.322011][ T6294] dvmrp0: entered allmulticast mode [ 65.325532][ T1045] usb 5-1: USB disconnect, device number 2 [ 65.343469][ C0] sd 0:0:0:0: [sda] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 65.347804][ C0] sd 0:0:0:0: [sda] tag#20 CDB: Test Unit Ready [ 65.355255][ T6375] 9p: Could not find request transport: virtioÿ [ 65.385708][ T6375] syzkaller1: entered promiscuous mode [ 65.389756][ T6375] syzkaller1: entered allmulticast mode [ 65.486666][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.134'. [ 65.543018][ T6384] capability: warning: `syz.2.136' uses 32-bit capabilities (legacy support in use) [ 65.903517][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 66.435988][ T6423] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 66.464178][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.483064][ T6423] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 66.614872][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 66.618836][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 66.660025][ T6426] warning: `syz.1.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.667501][ T6432] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 66.742765][ T6437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.978850][ T6456] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 67.015277][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.776935][ T5839] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.946801][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 67.950019][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 67.953869][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 67.958121][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 67.961277][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 67.964731][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 67.970003][ T5839] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 67.973009][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.975688][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.979676][ T5839] usb 8-1: Product: syz [ 67.981071][ T5839] usb 8-1: Manufacturer: syz [ 67.982615][ T5839] usb 8-1: SerialNumber: syz [ 67.994096][ T5839] usb 8-1: config 0 descriptor?? [ 67.995918][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.009927][ T6469] __nla_validate_parse: 32 callbacks suppressed [ 68.009943][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.162'. [ 68.105108][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 68.151637][ T6478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6478 comm=syz.1.165 [ 68.200502][ T6486] netlink: 'syz.1.167': attribute type 2 has an invalid length. [ 68.215259][ T6486] kAFS: No cell specified [ 68.220577][ T6486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.167'. [ 68.338879][ T6499] No source specified [ 68.403316][ T6492] 9p: Bad value for 'wfdno' [ 68.626859][ T5528] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.776825][ T5528] usb 7-1: Using ep0 maxpacket: 8 [ 68.781893][ T5528] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.785149][ T5528] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.790100][ T5528] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 68.792914][ T5528] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.795500][ T5528] usb 7-1: Product: syz [ 68.797290][ T5528] usb 7-1: Manufacturer: syz [ 68.798965][ T5528] usb 7-1: SerialNumber: syz [ 68.804129][ T5528] usb 7-1: config 0 descriptor?? [ 69.138146][ T5100] Bluetooth: hci1: Malformed LE Event: 0x1b [ 69.151055][ T6507] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.211094][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 69.211191][ T42] audit: type=1400 audit(1784366508.407:586): avc: denied { create } for pid=6509 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.223938][ T42] audit: type=1400 audit(1784366508.407:587): avc: denied { connect } for pid=6509 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.228689][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -110 [ 69.233514][ T5839] input input7: Device does not respond to id packet M [ 69.235938][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.242841][ T5839] input input7: Device does not respond to id packet P [ 69.249357][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.251914][ T5839] input input7: Device does not respond to id packet B [ 69.255126][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.258808][ T5839] input input7: Device does not respond to id packet N [ 69.262061][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.264919][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.269014][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.271289][ T5839] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 69.279662][ T5839] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 69.291235][ T42] audit: type=1400 audit(1784366508.487:588): avc: denied { read } for pid=5134 comm="acpid" name="js0" dev="devtmpfs" ino=3007 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.298369][ T42] audit: type=1400 audit(1784366508.487:589): avc: denied { open } for pid=5134 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3007 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.305675][ T42] audit: type=1400 audit(1784366508.487:590): avc: denied { ioctl } for pid=5134 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3007 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.369327][ T6522] netlink: 164 bytes leftover after parsing attributes in process `syz.0.177'. [ 69.416174][ T6526] IPv6: Can't replace route, no match found [ 69.433401][ T9] usb 8-1: USB disconnect, device number 3 [ 69.477423][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 69.521601][ T42] audit: type=1400 audit(1784366508.717:591): avc: denied { create } for pid=6532 comm="syz.1.180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.529771][ T42] audit: type=1400 audit(1784366508.717:592): avc: denied { mounton } for pid=6532 comm="syz.1.180" path="/49/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.591434][ T42] audit: type=1400 audit(1784366508.787:593): avc: denied { ioctl } for pid=6519 comm="syz.0.177" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.628268][ T42] audit: type=1804 audit(1784366508.827:594): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.180" name="/newroot/49/file0" dev="fuse" ino=1 res=1 errno=0 [ 69.949328][ T5897] usb 44-1: device descriptor read/8, error -110 [ 70.061652][ T42] audit: type=1800 audit(1784366509.257:595): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.186" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 70.134787][ T6558] overlay: ./file0 is not a directory [ 70.213919][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 70.238825][ T6561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6561 comm=syz.3.188 [ 70.282708][ T6563] Bluetooth: MGMT ver 1.23 [ 70.296172][ T6563] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 70.358693][ T5897] usb usb44-port1: attempt power cycle [ 70.671433][ T5831] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.840106][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.844328][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.848720][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.853758][ T5831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.857945][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.864139][ T5831] usb 6-1: config 0 descriptor?? [ 70.937862][ T5897] usb usb44-port1: unable to enumerate USB device [ 71.172301][ T5839] usb 7-1: USB disconnect, device number 3 [ 71.203206][ T6586] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.207413][ T6586] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270628][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.198'. [ 71.271199][ T847] libceph: connect (1)[c::]:6789 error -101 [ 71.282238][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 71.290977][ T847] libceph: connect (1)[c::]:6789 error -101 [ 71.297333][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 71.315028][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 71.319983][ T5831] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.380931][ T6593] ceph: No mds server is up or the cluster is laggy [ 71.538820][ T6568] sit0: entered promiscuous mode [ 71.543742][ T6568] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 71.546211][ T6568] netlink: 1 bytes leftover after parsing attributes in process `syz.1.190'. [ 71.552885][ T1045] usb 6-1: USB disconnect, device number 6 [ 71.583750][ T6621] tls_set_device_offload_rx: netdev not found [ 71.618913][ T6625] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 71.674978][ T6630] fuse: Bad value for 'fd' [ 71.809573][ T6641] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 71.812883][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.949353][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.951760][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.020430][ T6655] IPv6: Can't replace route, no match found [ 72.213544][ T6662] uprobe: syz.1.214:6662 failed to unregister, leaking uprobe [ 72.232013][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 72.256969][ T6550] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.280107][ T6689] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 72.313541][ T6696] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.326031][ T6696] syzkaller0: entered promiscuous mode [ 72.329968][ T6696] syzkaller0: entered allmulticast mode [ 72.430495][ T6550] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.434177][ T6550] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 72.437254][ T6550] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 72.439860][ T6550] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 72.442734][ T6550] usb 5-1: config 129 has no interface number 0 [ 72.444780][ T6550] usb 5-1: config 129 has no interface number 1 [ 72.447743][ T6550] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 72.451872][ T6550] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 72.455284][ T6550] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 72.464875][ T6550] usb 5-1: config 129 interface 135 has no altsetting 0 [ 72.469189][ T6550] usb 5-1: config 129 interface 5 has no altsetting 0 [ 72.475134][ T6550] usb 5-1: string descriptor 0 read error: -22 [ 72.479439][ T6550] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 72.483393][ T6550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.525695][ T6550] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.530791][ T6704] usb usb9: usbfs: process 6704 (syz.1.224) did not claim interface 0 before use [ 72.530874][ T6550] usb 5-1: MIDIStreaming interface descriptor not found [ 72.705187][ T6659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6659 comm=syz.0.213 [ 72.710791][ T6550] usb 5-1: USB disconnect, device number 3 [ 72.919625][ T6715] kernel profiling enabled (shift: 63) [ 72.923534][ T6715] profiling shift: 63 too large [ 73.065731][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 73.070622][ T5100] CPU: 2 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.070654][ T5100] Tainted: [L]=SOFTLOCKUP [ 73.070660][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.070699][ T5100] Workqueue: hci2 hci_rx_work [ 73.070958][ T5100] Call Trace: [ 73.070972][ T5100] [ 73.070980][ T5100] dump_stack_lvl+0x100/0x190 [ 73.071008][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 73.071037][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 73.071074][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.071100][ T5100] ? find_held_lock+0x2b/0x80 [ 73.071128][ T5100] ? kobject_add_internal+0x25f/0x930 [ 73.071200][ T5100] ? kobject_add_internal+0x25f/0x930 [ 73.071227][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.071255][ T5100] kobject_add_internal+0x2c8/0x930 [ 73.071283][ T5100] kobject_add+0x16a/0x1e0 [ 73.071307][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 73.071328][ T5100] ? class_to_subsys+0x10f/0x150 [ 73.071377][ T5100] ? kobject_put+0xb9/0x640 [ 73.071398][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 73.071457][ T5100] device_add+0x294/0x1970 [ 73.071482][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 73.071509][ T5100] ? __pfx_device_add+0x10/0x10 [ 73.071534][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 73.071594][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 73.071617][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 73.071654][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 73.071685][ T5100] ? hci_event_packet+0x186/0xcd0 [ 73.071713][ T5100] ? hci_event_packet+0x186/0xcd0 [ 73.071748][ T5100] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 73.071781][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 73.071927][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 73.071948][ T5100] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 73.071987][ T5100] hci_event_packet+0x51c/0xcd0 [ 73.072016][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 73.072032][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 73.072060][ T5100] ? kcov_remote_start+0x384/0x670 [ 73.072079][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 73.072112][ T5100] hci_rx_work+0x451/0xfc0 [ 73.072142][ T5100] process_one_work+0xa23/0x1940 [ 73.072171][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 73.072196][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 73.072223][ T5100] worker_thread+0x5ef/0xe50 [ 73.072247][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 73.072265][ T5100] ? kthread+0x13a/0x450 [ 73.072288][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 73.072303][ T5100] kthread+0x370/0x450 [ 73.072325][ T5100] ? __pfx_kthread+0x10/0x10 [ 73.072351][ T5100] ret_from_fork+0x72b/0xd50 [ 73.072399][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 73.072422][ T5100] ? __switch_to+0x800/0x10f0 [ 73.072438][ T5100] ? __pfx_kthread+0x10/0x10 [ 73.072466][ T5100] ret_from_fork_asm+0x1a/0x30 [ 73.072505][ T5100] [ 73.072562][ T5100] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.084292][ T6724] __nla_validate_parse: 5 callbacks suppressed [ 73.084303][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 73.086070][ T5100] Bluetooth: hci2: failed to register connection device [ 73.088344][ T6724] openvswitch: netlink: Flow actions attr not present in new flow. [ 73.715125][ T6756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 73.718147][ T6756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.727006][ T6756] vhci_hcd vhci_hcd.0: Device attached [ 73.745160][ T6760] vhci_hcd: connection closed [ 73.746393][ T13] vhci_hcd vhci_hcd.1: stop threads [ 73.750298][ T13] vhci_hcd vhci_hcd.1: release socket [ 73.752866][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 73.778263][ T6765] netlink: 'syz.0.238': attribute type 2 has an invalid length. [ 73.886459][ T6771] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 [ 74.003802][ T6780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=200 sclass=netlink_route_socket pid=6780 comm=syz.3.240 [ 74.011180][ T6780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6780 comm=syz.3.240 [ 74.016322][ T6780] netlink: 750 bytes leftover after parsing attributes in process `syz.3.240'. [ 74.286513][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 74.286527][ T42] audit: type=1400 audit(1784366513.477:643): avc: denied { append } for pid=6796 comm="syz.2.245" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.379649][ T6804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6804 comm=syz.2.247 [ 74.431695][ T42] audit: type=1400 audit(1784366513.627:644): avc: denied { bind } for pid=6808 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.442018][ T42] audit: type=1400 audit(1784366513.637:645): avc: denied { listen } for pid=6808 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.448618][ T42] audit: type=1400 audit(1784366513.637:646): avc: denied { accept } for pid=6808 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.495018][ T42] audit: type=1400 audit(1784366513.687:647): avc: denied { write } for pid=6808 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.679471][ T6830] tmpfs: Bad value for 'mpol' [ 74.755803][ T42] audit: type=1400 audit(1784366513.947:648): avc: denied { shutdown } for pid=6821 comm="syz.3.252" laddr=::ac14:14aa lport=53316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.769026][ T6824] erspan0: entered promiscuous mode [ 74.771768][ T6824] erspan0: left promiscuous mode [ 74.776279][ T42] audit: type=1400 audit(1784366513.967:649): avc: denied { ioctl } for pid=6822 comm="syz.2.253" path="/dev/ptp1" dev="devtmpfs" ino=1289 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.986492][ T42] audit: type=1400 audit(1784366514.177:650): avc: denied { read } for pid=6858 comm="syz.2.263" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.001875][ T42] audit: type=1400 audit(1784366514.177:651): avc: denied { open } for pid=6858 comm="syz.2.263" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.158749][ T6864] hub 4-0:1.0: USB hub found [ 75.162246][ T6864] hub 4-0:1.0: 2 ports detected [ 75.301811][ T42] audit: type=1400 audit(1784366514.497:652): avc: denied { create } for pid=6868 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.818039][ T6859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.821688][ T6859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.833280][ T6859] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.837925][ T6859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.840734][ T6859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.845717][ T6859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.852912][ T6859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.856204][ T6859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.863144][ T6859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.868925][ T6859] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.872536][ T6859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.875167][ T6859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.895284][ T6859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.941724][ T6873] openvswitch: netlink: Key type 94 is out of range max 32 [ 76.072194][ T6887] process 'syz.1.272' launched './file0' with NULL argv: empty string added [ 76.189909][ T6898] input: syz1 as /devices/virtual/input/input8 [ 76.213824][ T6880] mmap: syz.2.269 (6880) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.393436][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6911 comm=syz.1.276 [ 76.400502][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 76.403883][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 76.407435][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 76.413079][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 76.563670][ T6928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.572278][ T6928] xt_socket: unknown flags 0x4c [ 76.581486][ T6928] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 76.584082][ T6928] netlink: 'syz.3.284': attribute type 2 has an invalid length. [ 76.602977][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6928 comm=syz.3.284 [ 76.648075][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 76.651907][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 76.686978][ T847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.774827][ T6938] netlink: 72 bytes leftover after parsing attributes in process `syz.2.287'. [ 76.785611][ T6938] i2c i2c-1: dtv_property_process_set: SET cmd 0x5fcfc808 undefined [ 76.795088][ T6938] trusted_key: encrypted_key: key trusted:syz not found [ 76.846864][ T847] usb 5-1: Using ep0 maxpacket: 32 [ 76.852813][ T847] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.856443][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 76.860096][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.865302][ T847] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 76.868428][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.871100][ T847] usb 5-1: Product: syz [ 76.872643][ T847] usb 5-1: Manufacturer: syz [ 76.874412][ T847] usb 5-1: SerialNumber: syz [ 76.883751][ T847] usb 5-1: config 0 descriptor?? [ 76.886611][ T6913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.891657][ T847] hub 5-1:0.0: bad descriptor, ignoring hub [ 76.894406][ T847] hub 5-1:0.0: probe with driver hub failed with error -5 [ 76.900974][ T847] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 77.002049][ T6945] cdrom: dropping to single frame dma [ 77.084924][ T6949] loop8: detected capacity change from 0 to 7 [ 77.092150][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.093924][ T4399] usb 5-1: USB disconnect, device number 4 [ 77.094079][ C3] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 77.095290][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.105783][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.110023][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.113597][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.117092][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.120964][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.125097][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.136838][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.140860][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.144571][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.148044][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.151278][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.152314][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.154399][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.154479][ T6949] ldm_validate_partition_table(): Disk read failed. [ 77.154600][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.163781][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.166616][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.169650][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.176827][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.177262][ T6951] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 77.180237][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.191657][ T6949] Dev loop8: unable to read RDB block 0 [ 77.195310][ T6949] loop8: unable to read partition table [ 77.198194][ T6949] loop8: partition table beyond EOD, truncated [ 77.200967][ T6949] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 77.340594][ T6964] syzkaller0: entered promiscuous mode [ 77.342846][ T6964] syzkaller0: entered allmulticast mode [ 77.351864][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 77.700547][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6970 comm=syz.0.295 [ 77.809693][ T6977] CIFS: iocharset name too long [ 77.867014][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.867113][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.942739][ T6984] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.956994][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.067102][ T6993] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 78.179813][ T6998] input: syz0 as /devices/virtual/input/input10 [ 78.326521][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 78.786408][ T7015] netlink: 'syz.3.305': attribute type 12 has an invalid length. [ 79.048108][ T55] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.238097][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.241833][ T55] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 79.245841][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.251229][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.254916][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.258009][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.260771][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.264089][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.267715][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.270649][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.274008][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.276716][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.281616][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.286877][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.291527][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.295199][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.299840][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.303784][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.307528][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.311970][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.319424][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.323009][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.327503][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.331392][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.335081][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.339570][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.344556][ T55] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.348666][ T55] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.352271][ T55] usb 8-1: Product: syz [ 79.354066][ T55] usb 8-1: Manufacturer: syz [ 79.356022][ T55] usb 8-1: SerialNumber: syz [ 79.371095][ T55] usb 8-1: config 0 descriptor?? [ 79.446125][ T55] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.660290][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 79.660332][ T42] audit: type=1326 audit(1784366518.857:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7025 comm="syz.2.309" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1ce99de99 code=0x0 [ 79.671364][ T5752] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 79.946967][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.947283][ T5100] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.027007][ T5100] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.209078][ T42] audit: type=1400 audit(1784366519.407:673): avc: denied { append } for pid=7036 comm="syz.0.311" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.274345][ T7039] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 80.556921][ T847] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.706854][ T847] usb 5-1: Using ep0 maxpacket: 8 [ 80.710330][ T847] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 80.713937][ T847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.717653][ T847] usb 5-1: config 1 has no interface number 0 [ 80.719685][ T847] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 80.723312][ T847] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 80.727130][ T847] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 80.732286][ T847] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 80.735370][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.738154][ T847] usb 5-1: Product: syz [ 80.739581][ T847] usb 5-1: Manufacturer: syz [ 80.740443][ T42] audit: type=1400 audit(1784366519.937:674): avc: denied { setopt } for pid=7047 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.741159][ T847] usb 5-1: SerialNumber: syz [ 80.926274][ T42] audit: type=1400 audit(1784366520.117:675): avc: denied { name_bind } for pid=7060 comm="syz.2.319" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 80.978720][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 81.013276][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.025571][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.033399][ T7065] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.183260][ T847] usb 5-1: USB disconnect, device number 5 [ 81.205687][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.630911][ C1] usb 8-1: yurex_control_callback - control failed: -2 [ 81.633967][ C1] usb 8-1: yurex_control_callback - control failed: -32 [ 81.638939][ T55] usb 8-1: USB disconnect, device number 4 [ 81.659061][ T55] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 81.684758][ T42] audit: type=1400 audit(1784366520.877:676): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.030522][ T5100] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.030537][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.041006][ T42] audit: type=1400 audit(1784366521.237:677): avc: denied { create } for pid=7089 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.047432][ T42] audit: type=1400 audit(1784366521.237:678): avc: denied { connect } for pid=7089 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.058387][ T42] audit: type=1400 audit(1784366521.237:679): avc: denied { bind } for pid=7089 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.106898][ T5100] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.160259][ T7076] netlink: 'syz.0.323': attribute type 29 has an invalid length. [ 82.210741][ T10] cfg80211: failed to load regulatory.db [ 82.245710][ T7097] overlayfs: failed lookup in lower (newroot/78, name='bus', err=-40): overlapping layers [ 82.561897][ T7114] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 82.619181][ T7114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.333'. [ 82.629732][ T7114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.333'. [ 82.760386][ T42] audit: type=1400 audit(1784366521.957:680): avc: denied { map } for pid=7121 comm="syz.2.336" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.820161][ T42] audit: type=1400 audit(1784366522.017:681): avc: denied { create } for pid=7124 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 82.862159][ T7128] fuse: Bad value for 'group_id' [ 82.864208][ T7128] fuse: Bad value for 'group_id' [ 82.881780][ T7128] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.970446][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7133 comm=syz.2.340 [ 83.003738][ T7133] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 83.072582][ T7133] bond2: (slave bridge4): making interface the new active one [ 83.076181][ T7133] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 83.317020][ T847] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.356370][ T7151] tmpfs: Unknown parameter 'úRvà' [ 83.393090][ T7153] netlink: 'syz.0.350': attribute type 30 has an invalid length. [ 83.422642][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 83.444841][ T7159] netlink: 'syz.0.350': attribute type 30 has an invalid length. [ 83.486835][ T847] usb 7-1: Using ep0 maxpacket: 16 [ 83.492934][ T847] usb 7-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 83.506962][ T847] usb 7-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 83.510186][ T847] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.513991][ T847] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.517232][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.519655][ T847] usb 7-1: Product: syz [ 83.520957][ T847] usb 7-1: Manufacturer: syz [ 83.522377][ T847] usb 7-1: SerialNumber: syz [ 83.525946][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.529437][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.566479][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'. [ 83.607183][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 83.610772][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'. [ 83.631338][ T7173] SELinux: ebitmap: high bit 1536 is not equal to the expected value 768 [ 83.634361][ T7173] SELinux: invalid class [ 83.641098][ T7173] SELinux: failed to load policy [ 83.700508][ T7179] syzkaller0: entered promiscuous mode [ 83.703082][ T7179] syzkaller0: entered allmulticast mode [ 83.708475][ T5100] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.714430][ T5100] Bluetooth: hci0: Injecting HCI hardware error event [ 83.719394][ T5100] Bluetooth: hci0: hardware error 0x00 [ 83.719482][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 83.727646][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 83.733402][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 83.741312][ T847] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 83.742059][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 83.748481][ T847] usb 7-1: USB disconnect, device number 4 [ 83.751519][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 83.758155][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7179 comm=syz.0.356 [ 84.118558][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.155980][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 84.654507][ T7228] Cannot find map_set index 135 as target [ 84.657506][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.715045][ T7234] netlink: 'syz.2.372': attribute type 12 has an invalid length. [ 84.803421][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 84.803441][ T42] audit: type=1326 audit(1784366523.997:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.2.373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ce99de99 code=0x0 [ 84.807231][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 84.821010][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 84.827311][ T5830] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.831346][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.834898][ T5830] usb 5-1: Product: syz [ 84.836709][ T5830] usb 5-1: Manufacturer: syz [ 84.839156][ T5830] usb 5-1: SerialNumber: syz [ 84.843870][ T5830] usb 5-1: config 0 descriptor?? [ 84.845981][ T7214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.849359][ T5830] hub 5-1:0.0: bad descriptor, ignoring hub [ 84.851710][ T5830] hub 5-1:0.0: probe with driver hub failed with error -5 [ 85.116873][ T7252] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 85.180131][ T7252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.351599][ T5887] usb 5-1: USB disconnect, device number 6 [ 85.372840][ T42] audit: type=1400 audit(1784366524.567:686): avc: denied { ioctl } for pid=7257 comm="syz.2.378" path="socket:[17853]" dev="sockfs" ino=17853 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.448793][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 85.608072][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 85.612101][ T7265] block nbd0: Unsupported socket: should be TCP or UNIX. [ 85.780191][ T7277] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.788902][ T5100] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 85.958782][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 86.070592][ T7291] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 86.076808][ T7291] dlm: no locking on control device [ 86.130075][ T42] audit: type=1400 audit(1784366525.327:687): avc: denied { watch watch_reads } for pid=7296 comm="syz.1.390" path="/80" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.139418][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 86.142321][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 86.156552][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.162875][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.169359][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.176490][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.271460][ T7302] overlayfs: workdir and upperdir must reside under the same mount [ 86.309081][ T7304] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.502526][ T7314] input: syz0 as /devices/virtual/input/input11 [ 86.525966][ T7314] overlay: Bad value for 'workdir' [ 86.551993][ T7316] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 86.660683][ T42] audit: type=1400 audit(1784366525.857:688): avc: denied { ioctl } for pid=7320 comm="syz.0.399" path="socket:[18654]" dev="sockfs" ino=18654 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.683416][ T42] audit: type=1400 audit(1784366525.877:689): avc: denied { mounton } for pid=7320 comm="syz.0.399" path="/100/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.744586][ T42] audit: type=1400 audit(1784366525.937:690): avc: denied { sqpoll } for pid=7329 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.817507][ T42] audit: type=1400 audit(1784366526.017:691): avc: denied { read } for pid=7333 comm="syz.2.402" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.828299][ T42] audit: type=1326 audit(1784366526.017:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.0.401" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ed859de99 code=0x0 [ 86.838597][ T42] audit: type=1400 audit(1784366526.017:693): avc: denied { open } for pid=7333 comm="syz.2.402" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.849566][ T7336] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 86.851903][ T42] audit: type=1400 audit(1784366526.037:694): avc: denied { ioctl } for pid=7333 comm="syz.2.402" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.144889][ T7372] syzkaller0: entered promiscuous mode [ 87.146629][ T7372] syzkaller0: entered allmulticast mode [ 87.425004][ T7396] FAULT_INJECTION: forcing a failure. [ 87.425004][ T7396] name failslab, interval 1, probability 0, space 0, times 1 [ 87.429275][ T7396] CPU: 2 UID: 0 PID: 7396 Comm: syz.3.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.429293][ T7396] Tainted: [L]=SOFTLOCKUP [ 87.429297][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.429328][ T7396] Call Trace: [ 87.429333][ T7396] [ 87.429338][ T7396] dump_stack_lvl+0x100/0x190 [ 87.429430][ T7396] should_fail_ex.cold+0x5/0xa [ 87.429444][ T7396] should_failslab+0xc2/0x120 [ 87.429457][ T7396] __kmalloc_noprof+0xfc/0x820 [ 87.429468][ T7396] ? rcu_is_watching+0x12/0xc0 [ 87.429484][ T7396] ? tomoyo_realpath_from_path+0xb6/0x690 [ 87.429509][ T7396] tomoyo_realpath_from_path+0xb6/0x690 [ 87.429528][ T7396] tomoyo_path_number_perm+0x23c/0x580 [ 87.429542][ T7396] ? tomoyo_path_number_perm+0x22e/0x580 [ 87.429556][ T7396] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.429583][ T7396] ? find_held_lock+0x2b/0x80 [ 87.429598][ T7396] ? __fget_files+0x215/0x3d0 [ 87.429607][ T7396] ? hook_file_ioctl_common+0x140/0x440 [ 87.429617][ T7396] ? __fget_files+0x215/0x3d0 [ 87.429629][ T7396] ? __fget_files+0x21f/0x3d0 [ 87.429640][ T7396] security_file_ioctl+0xd3/0x230 [ 87.429656][ T7396] __x64_sys_ioctl+0xb7/0x210 [ 87.429673][ T7396] do_syscall_64+0x115/0x870 [ 87.429792][ T7396] ? clear_bhb_loop+0x40/0x90 [ 87.429805][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.429816][ T7396] RIP: 0033:0x7f323eb9de99 [ 87.429830][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.429840][ T7396] RSP: 002b:00007f323fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.429851][ T7396] RAX: ffffffffffffffda RBX: 00007f323ee25fa0 RCX: 00007f323eb9de99 [ 87.429858][ T7396] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 87.429864][ T7396] RBP: 00007f323fa14090 R08: 0000000000000000 R09: 0000000000000000 [ 87.429870][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.429876][ T7396] R13: 00007f323ee26038 R14: 00007f323ee25fa0 R15: 00007ffc25147718 [ 87.429889][ T7396] [ 87.429894][ T7396] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.488421][ T7402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.707621][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.791153][ T7424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7424 comm=syz.0.426 [ 87.805377][ T7424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7424 comm=syz.0.426 [ 88.095518][ T7441] ptrace attach of "/syz-executor exec"[7444] was attempted by "/syz-executor exec"[7441] [ 88.315302][ T7455] binder: 7446:7455 ioctl c0306201 200000000640 returned -14 [ 88.315659][ T7457] ufs: You didn't specify the type of your ufs filesystem [ 88.315659][ T7457] [ 88.315659][ T7457] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 88.315659][ T7457] [ 88.315659][ T7457] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 88.344713][ T7459] netlink: 'syz.3.438': attribute type 19 has an invalid length. [ 88.359138][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.362239][ T7459] netlink: 'syz.3.438': attribute type 19 has an invalid length. [ 88.364914][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.368987][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.373813][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.430784][ T5897] bridge0: entered promiscuous mode [ 88.545662][ T7474] __nla_validate_parse: 8 callbacks suppressed [ 88.545675][ T7474] netlink: 280 bytes leftover after parsing attributes in process `syz.3.442'. [ 88.640557][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 88.662694][ T7478] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 88.709978][ T7484] ISOFS: Unable to identify CD-ROM format. [ 88.722987][ T7484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=7484 comm=syz.1.447 [ 88.727758][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 88.730683][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 89.046607][ T5838] bond0: (slave bond_slave_0): interface is now down [ 89.060551][ T5838] bond0: (slave bond_slave_1): interface is now down [ 89.086089][ T5838] bond0: now running without any active interface! [ 89.118561][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.130274][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.151516][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.172045][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.189076][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.197871][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.206120][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.219724][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.248709][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.256513][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.262931][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.268250][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.273386][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.281302][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.286659][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.293094][ T7518] syzkaller0: entered promiscuous mode [ 89.295155][ T7518] syzkaller0: entered allmulticast mode [ 89.297490][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.298169][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.298489][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.317631][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.321319][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.327341][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.337408][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.341301][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.347346][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.358615][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.361708][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.368723][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.376387][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.391785][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.397825][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.408011][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.415740][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.424151][ T7512] 9pnet_fd: p9_fd_create_tcp (7512): problem binding to privport [ 89.491863][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 89.502026][ T7525] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 89.535243][ T7527] netlink: 64 bytes leftover after parsing attributes in process `syz.1.459'. [ 89.828074][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 89.828128][ T42] audit: type=1400 audit(1784366529.027:708): avc: denied { write } for pid=7542 comm="syz.2.464" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.732999][ T7551] pim6reg1: entered promiscuous mode [ 90.736882][ T7551] pim6reg1: entered allmulticast mode [ 90.854692][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 90.867491][ T5752] Bluetooth: hci2: unexpected event for opcode 0x202d [ 90.897141][ T7565] fuse: Unknown parameter 'C' [ 90.933935][ T7569] usb 2-1: USB disconnect, device number 2 [ 91.450262][ T7586] erspan1: entered promiscuous mode [ 91.516371][ T42] audit: type=1400 audit(1784366530.707:709): avc: denied { create } for pid=7589 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 91.612797][ T7592] ceph: No mds server is up or the cluster is laggy [ 91.630020][ T7601] netlink: 52 bytes leftover after parsing attributes in process `syz.0.478'. [ 91.640601][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 91.644496][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 91.671427][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.675432][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.697468][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.701471][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.704879][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.708020][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.716436][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.720010][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.812423][ T7605] netlink: 'syz.1.479': attribute type 8 has an invalid length. [ 91.821011][ T7605] bond0: entered promiscuous mode [ 91.823169][ T7605] bond_slave_0: entered promiscuous mode [ 91.825667][ T7605] bond_slave_1: entered promiscuous mode [ 91.831658][ T7605] gretap0: entered promiscuous mode [ 91.835118][ T7605] team0: entered promiscuous mode [ 91.837900][ T7605] team_slave_0: entered promiscuous mode [ 91.840230][ T7605] team_slave_1: entered promiscuous mode [ 91.847850][ T7605] hsr1: entered promiscuous mode [ 91.978780][ T5823] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 92.050481][ T5816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.055519][ T5816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.085426][ T42] audit: type=1400 audit(1784366531.277:710): avc: denied { execute } for pid=7606 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 92.093628][ T42] audit: type=1400 audit(1784366531.277:711): avc: denied { execute_no_trans } for pid=7606 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 92.143823][ T5823] usb 5-1: not running at top speed; connect to a high speed hub [ 92.145533][ T5816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.151367][ T5816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.157939][ T5823] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 92.166663][ T5823] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 92.170510][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.173930][ T5823] usb 5-1: Product: syz [ 92.175663][ T5823] usb 5-1: Manufacturer: syz [ 92.177811][ T5823] usb 5-1: SerialNumber: syz [ 92.209450][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.215365][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.219987][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.229421][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.236030][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.247761][ T5816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.251080][ T5816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.348443][ T5816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.352888][ T5816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.426249][ T5823] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.437346][ T5823] usb 5-1: MIDIStreaming interface descriptor not found [ 92.534387][ T5823] usb 5-1: USB disconnect, device number 7 [ 92.728256][ T5816] bridge_slave_1: left allmulticast mode [ 92.735853][ T5816] bridge_slave_1: left promiscuous mode [ 92.741589][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.757340][ T5816] bridge_slave_0: left allmulticast mode [ 92.766823][ T5816] bridge_slave_0: left promiscuous mode [ 92.768844][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.047281][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.072061][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.082640][ T5816] bond0 (unregistering): Released all slaves [ 93.178105][ T42] audit: type=1400 audit(1784366532.377:712): avc: denied { write } for pid=7642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.220865][ T7635] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 93.225122][ T7644] raw_sendmsg: syz.2.488 forgot to set AF_INET. Fix it! [ 93.266692][ T42] audit: type=1400 audit(1784366532.457:713): avc: denied { write } for pid=7649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.338737][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.540835][ T7655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7655 comm=syz.2.490 [ 93.550354][ T7655] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 93.552834][ T7655] __nla_validate_parse: 7 callbacks suppressed [ 93.552844][ T7655] netlink: 46 bytes leftover after parsing attributes in process `syz.2.490'. [ 93.554957][ T42] audit: type=1400 audit(1784366532.747:714): avc: denied { write } for pid=7656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.654128][ T42] audit: type=1400 audit(1784366532.847:715): avc: denied { write } for pid=7666 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.655248][ T7668] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 93.673673][ T7668] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 93.856805][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.863169][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.883129][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.886712][ T7613] bridge_slave_0: entered allmulticast mode [ 93.898750][ T7613] bridge_slave_0: entered promiscuous mode [ 93.905861][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.910239][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.912822][ T7613] bridge_slave_1: entered allmulticast mode [ 93.922582][ T7613] bridge_slave_1: entered promiscuous mode [ 93.960136][ T7678] syzkaller0: entered promiscuous mode [ 93.968089][ T7678] syzkaller0: entered allmulticast mode [ 94.003477][ T42] audit: type=1400 audit(1784366533.197:716): avc: denied { watch } for pid=7685 comm="syz.2.496" path="/130/file0" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.015792][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.025721][ T5816] hsr_slave_0: left promiscuous mode [ 94.029661][ T5816] hsr_slave_1: left promiscuous mode [ 94.033907][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.039035][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.056037][ T5816] veth1_macvtap: left promiscuous mode [ 94.059003][ T5816] veth0_macvtap: left promiscuous mode [ 94.061222][ T5816] veth1_vlan: left promiscuous mode [ 94.063247][ T5816] veth0_vlan: left promiscuous mode [ 94.216834][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 94.226323][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 94.266924][ T5752] Bluetooth: hci2: command tx timeout [ 95.989233][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.074051][ T7689] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 96.083139][ T7613] team0: Port device team_slave_0 added [ 96.087549][ T7613] team0: Port device team_slave_1 added [ 96.135952][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.147100][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.169682][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.176652][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.182763][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.199664][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.201951][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.222868][ T42] audit: type=1400 audit(1784366535.417:717): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.234437][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.248816][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.259946][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.271911][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.274597][ T7613] hsr_slave_0: entered promiscuous mode [ 96.276242][ T42] audit: type=1400 audit(1784366535.467:718): avc: denied { write } for pid=7708 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.279423][ T7613] hsr_slave_1: entered promiscuous mode [ 96.289916][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.295998][ T7697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7697 comm=syz.2.500 [ 96.302645][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.307284][ T7697] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 96.307737][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.316419][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.0.501 [ 96.356857][ T5752] Bluetooth: hci2: command tx timeout [ 96.362667][ T7697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.378339][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.442428][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 96.480469][ T5816] IPVS: stop unused estimator thread 0... [ 96.498310][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 96.555228][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 96.580936][ T42] audit: type=1400 audit(1784366535.777:719): avc: denied { write } for pid=7729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.610567][ T7613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.627921][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.636224][ T7613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.650165][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.653618][ T7613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.665438][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.675069][ T7613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.691583][ T42] audit: type=1400 audit(1784366535.887:720): avc: denied { write } for pid=7738 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.699108][ T7613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.749123][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.815874][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.831580][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.841009][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.843411][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.849981][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.852342][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.899833][ T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.046894][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 97.051221][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.057482][ T56] usb 5-1: string descriptor 0 read error: -22 [ 97.059993][ T56] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.063286][ T56] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 97.077694][ T56] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 97.082364][ T56] dw2102: su3000_power_ctrl: 1, initialized 0 [ 97.084747][ T56] dvb-usb: bulk message failed: -22 (2/0) [ 97.104182][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.108256][ T56] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 97.111349][ T56] usb 5-1: media controller created [ 97.113582][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.115780][ T56] dw2102: i2c transfer failed. [ 97.122907][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.125750][ T56] dw2102: i2c transfer failed. [ 97.128100][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.130203][ T56] dw2102: i2c transfer failed. [ 97.132524][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.135136][ T56] dw2102: i2c transfer failed. [ 97.136715][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.139388][ T56] dw2102: i2c transfer failed. [ 97.139787][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.140880][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 97.146140][ T56] dw2102: i2c transfer failed. [ 97.147768][ T56] dvb-usb: MAC address: 02:02:02:02:02:02 [ 97.157872][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.173331][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 97.177760][ T56] dw2102: command 0x0e transfer failed. [ 97.179686][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 97.181551][ T56] dw2102: command 0x0e transfer failed. [ 97.325885][ T7613] veth0_vlan: entered promiscuous mode [ 97.330576][ T7613] veth1_vlan: entered promiscuous mode [ 97.345578][ T7778] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 97.345635][ T7778] UDF-fs: Scanning with blocksize 2048 failed [ 97.346434][ T7778] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 97.346446][ T7778] UDF-fs: Scanning with blocksize 4096 failed [ 97.353859][ T7613] veth0_macvtap: entered promiscuous mode [ 97.360863][ T7613] veth1_macvtap: entered promiscuous mode [ 97.371249][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.415543][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.423735][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.428119][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.434521][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.437897][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.500177][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 97.502800][ T56] dw2102: command 0x0e transfer failed. [ 97.507503][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 97.516692][ T56] dw2102: command 0x0e transfer failed. [ 97.519545][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 97.522096][ T56] dw2102: command 0x51 transfer failed. [ 97.527270][ T7731] dvb-usb: bulk message failed: -22 (38/0) [ 97.528032][ T7205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.531289][ T7731] dw2102: i2c transfer failed. [ 97.535850][ T7731] i2c i2c-2: Invalid block size returned: 34 [ 97.536900][ T7205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.568708][ T56] DVB: Unable to find symbol ds3000_attach() [ 97.572340][ T56] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 97.595352][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.604055][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.616859][ T42] audit: type=1400 audit(1784366536.807:721): avc: denied { mounton } for pid=7613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 97.624955][ T42] audit: type=1400 audit(1784366536.817:722): avc: denied { mounton } for pid=7613 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.633181][ T56] rc_core: IR keymap rc-su3000 not found [ 97.635366][ T56] Registered IR keymap rc-empty [ 97.645972][ T56] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 97.656698][ T56] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input14 [ 97.663146][ T42] audit: type=1400 audit(1784366536.857:723): avc: denied { setopt } for pid=7789 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.678169][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 97.678194][ T56] dw2102: su3000_power_ctrl: 0, initialized 1 [ 97.678208][ T56] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 97.696228][ T56] usb 5-1: USB disconnect, device number 8 [ 97.766059][ T56] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 97.841121][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.841221][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.841712][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 97.843687][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.849049][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.851533][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.853917][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.856287][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.859030][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.861551][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 97.863914][ T5752] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 98.084445][ T7810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 98.084522][ T42] audit: type=1400 audit(1784366537.277:724): avc: denied { map } for pid=7808 comm="syz.0.517" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.173216][ T42] audit: type=1400 audit(1784366537.367:725): avc: denied { create } for pid=7812 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 98.437164][ T5752] Bluetooth: hci2: command tx timeout [ 98.456990][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 98.505518][ T7826] netlink: 'syz.1.524': attribute type 11 has an invalid length. [ 98.512590][ T42] audit: type=1400 audit(1784366537.707:726): avc: denied { ioctl } for pid=7825 comm="syz.1.524" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.606956][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 98.610349][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.614881][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.618959][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.623680][ T5887] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 98.627072][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.631887][ T5887] usb 9-1: config 0 descriptor?? [ 98.806884][ T34] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 98.839488][ T7830] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 98.936873][ T34] usb 6-1: device descriptor read/64, error -71 [ 99.053228][ T5887] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 99.056123][ T5887] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 99.058975][ T5887] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 99.062694][ T5887] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 99.065152][ T5887] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 99.093985][ T5887] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 99.129772][ T7840] xt_hashlimit: size too large, truncated to 1048576 [ 99.169048][ T5887] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 99.172499][ T5887] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 99.202185][ T34] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 99.278339][ T7820] befs: (nbd4): unable to read superblock [ 99.291805][ T7820] openvswitch: netlink: Message has 24 unknown bytes. [ 99.337707][ T34] usb 6-1: device descriptor read/64, error -71 [ 99.448084][ T34] usb usb6-port1: attempt power cycle [ 99.787203][ T34] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 99.807674][ T34] usb 6-1: device descriptor read/8, error -71 [ 99.818473][ T29] usb 9-1: USB disconnect, device number 2 [ 99.826000][ T5839] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 99.847593][ T5839] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 99.865264][ T5839] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 99.878210][ T5839] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.066894][ T34] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 100.099329][ T34] usb 6-1: device descriptor read/8, error -71 [ 100.219427][ T34] usb usb6-port1: unable to enumerate USB device [ 100.506972][ T5752] Bluetooth: hci2: command tx timeout [ 100.637131][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 100.808208][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 100.811439][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.815272][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.818969][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.823176][ T29] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 100.826338][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.830393][ T29] usb 7-1: config 0 descriptor?? [ 100.844326][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 100.853793][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.859877][ T7911] overlayfs: failed lookup in lower (newroot/130, name='bus', err=-40): overlapping layers [ 100.867516][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.871477][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.885547][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.892887][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.901380][ T5921] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.920850][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 100.924639][ T5134] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 101.035779][ T7918] macvtap0: entered allmulticast mode [ 101.037891][ T7918] veth0_macvtap: entered allmulticast mode [ 101.062914][ T7909] netlink: 36 bytes leftover after parsing attributes in process `syz.2.536'. [ 101.069286][ T7909] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 101.089397][ T5897] usb 7-1: USB disconnect, device number 5 [ 101.239442][ T7940] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.242942][ T7940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.247141][ T7940] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.249679][ T7940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 101.299703][ T7943] overlayfs: workdir and upperdir must be separate subtrees [ 101.519514][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 101.519570][ T42] audit: type=1400 audit(1784366540.717:732): avc: denied { getopt } for pid=7950 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.542734][ T7953] selinux_netlink_send: 24 callbacks suppressed [ 101.542747][ T7953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7953 comm=syz.0.549 [ 101.551451][ T7951] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 101.636227][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 101.779185][ T42] audit: type=1400 audit(1784366540.977:733): avc: denied { ioctl } for pid=7968 comm="syz.0.553" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.864395][ T7973] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 102.065658][ T42] audit: type=1400 audit(1784366541.257:734): avc: denied { mmap_zero } for pid=7984 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 102.233202][ T7990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.559'. [ 102.257170][ T42] audit: type=1400 audit(1784366541.447:735): avc: denied { block_suspend } for pid=7986 comm="syz.2.558" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.371552][ T8000] netlink: 280 bytes leftover after parsing attributes in process `syz.4.561'. [ 102.376202][ T42] audit: type=1400 audit(1784366541.567:736): avc: denied { append } for pid=7999 comm="syz.4.561" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.392249][ T8002] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 102.396635][ T42] audit: type=1400 audit(1784366541.587:737): avc: denied { relabelto } for pid=8001 comm="syz.0.562" name="143" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 102.407306][ T42] audit: type=1400 audit(1784366541.587:738): avc: denied { associate } for pid=8001 comm="syz.0.562" name="143" dev="tmpfs" ino=787 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 102.447219][ T8000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.449516][ T8000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.452145][ T8000] ================================================================== [ 102.454721][ T8000] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock_bh+0x33/0x40 [ 102.457353][ T8000] Read of size 1 at addr ffff8880344d05a0 by task syz.4.561/8000 [ 102.460740][ T8000] [ 102.461834][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.461853][ T8000] Tainted: [L]=SOFTLOCKUP [ 102.461859][ T8000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.461898][ T8000] Call Trace: [ 102.461904][ T8000] [ 102.461910][ T8000] dump_stack_lvl+0x100/0x190 [ 102.461930][ T8000] print_report+0x13d/0x4b0 [ 102.461949][ T8000] ? __virt_addr_valid+0x239/0x430 [ 102.461965][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.461983][ T8000] kasan_report+0xdf/0x1c0 [ 102.461997][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.462014][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.462031][ T8000] __kasan_check_byte+0x36/0x50 [ 102.462045][ T8000] lock_acquire+0x132/0x370 [ 102.462057][ T8000] ? do_raw_spin_lock+0x128/0x260 [ 102.462074][ T8000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.462090][ T8000] _raw_spin_lock_bh+0x33/0x40 [ 102.462104][ T8000] ? bt_accept_unlink+0x64/0x370 [ 102.462166][ T8000] bt_accept_unlink+0x64/0x370 [ 102.462183][ T8000] ? __local_bh_enable_ip+0x9e/0x120 [ 102.462199][ T8000] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 102.462238][ T8000] l2cap_chan_del+0xa6/0x920 [ 102.462257][ T8000] l2cap_conn_del+0x34f/0x6b0 [ 102.462300][ T8000] l2cap_connect_cfm+0x97b/0xf20 [ 102.462320][ T8000] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 102.462340][ T8000] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 102.462355][ T8000] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 102.462373][ T8000] hci_conn_failed+0x18c/0x370 [ 102.462411][ T8000] hci_abort_conn_sync+0x7d9/0xb20 [ 102.462430][ T8000] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 102.462446][ T8000] ? find_held_lock+0x2b/0x80 [ 102.462462][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.462480][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.462497][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.462514][ T8000] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 102.462538][ T8000] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 102.462553][ T8000] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 102.462569][ T8000] hci_suspend_sync+0x8b7/0xa70 [ 102.462584][ T8000] ? __pfx_hci_suspend_sync+0x10/0x10 [ 102.462600][ T8000] ? mgmt_pending_find+0x13e/0x1a0 [ 102.462621][ T8000] hci_suspend_dev+0x31d/0x540 [ 102.462641][ T8000] ? __pfx_hci_suspend_dev+0x10/0x10 [ 102.462659][ T8000] ? kobject_get+0xbb/0x150 [ 102.462674][ T8000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.462687][ T8000] hci_suspend_notifier+0x21e/0x330 [ 102.462698][ T8000] notifier_call_chain+0x99/0x3f0 [ 102.462716][ T8000] blocking_notifier_call_chain_robust+0xc8/0x160 [ 102.462734][ T8000] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 102.462752][ T8000] ? pin_hibernation_swap_type+0x145/0x1a0 [ 102.462767][ T8000] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.462782][ T8000] pm_notifier_call_chain_robust+0x27/0x60 [ 102.462795][ T8000] snapshot_open+0x189/0x2b0 [ 102.462805][ T8000] ? __pfx_snapshot_open+0x10/0x10 [ 102.462816][ T8000] misc_open+0x26d/0x450 [ 102.462857][ T8000] ? __pfx_misc_open+0x10/0x10 [ 102.462874][ T8000] chrdev_open+0x234/0x6a0 [ 102.462886][ T8000] ? __pfx_chrdev_open+0x10/0x10 [ 102.462897][ T8000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 102.462913][ T8000] do_dentry_open+0x6ab/0x14d0 [ 102.462930][ T8000] ? __pfx_chrdev_open+0x10/0x10 [ 102.462943][ T8000] vfs_open+0x82/0x3f0 [ 102.462956][ T8000] path_openat+0x2873/0x4280 [ 102.462969][ T8000] ? __pfx_path_openat+0x10/0x10 [ 102.462981][ T8000] do_file_open+0x20e/0x430 [ 102.462991][ T8000] ? __pfx_do_file_open+0x10/0x10 [ 102.463007][ T8000] ? alloc_fd+0x471/0x7a0 [ 102.463017][ T8000] ? do_getname+0x191/0x390 [ 102.463030][ T8000] do_sys_openat2+0x10f/0x1e0 [ 102.463042][ T8000] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.463055][ T8000] ? fput+0x79/0x100 [ 102.463067][ T8000] __x64_sys_openat+0x12d/0x210 [ 102.463079][ T8000] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.463095][ T8000] do_syscall_64+0x115/0x870 [ 102.463105][ T8000] ? clear_bhb_loop+0x40/0x90 [ 102.463118][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.463130][ T8000] RIP: 0033:0x7fae2e59de99 [ 102.463141][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.463154][ T8000] RSP: 002b:00007fae2f414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.463167][ T8000] RAX: ffffffffffffffda RBX: 00007fae2e825fa0 RCX: 00007fae2e59de99 [ 102.463175][ T8000] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 102.463182][ T8000] RBP: 00007fae2e633eaf R08: 0000000000000000 R09: 0000000000000000 [ 102.463189][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.463195][ T8000] R13: 00007fae2e826038 R14: 00007fae2e825fa0 R15: 00007ffd08dcbf98 [ 102.463206][ T8000] [ 102.463211][ T8000] [ 102.498178][ T8002] binder: 8001:8002 ioctl 40046205 0 returned -22 [ 102.498245][ T8000] Allocated by task 7613: [ 102.617007][ T8000] kasan_save_stack+0x30/0x50 [ 102.618515][ T8000] kasan_save_track+0x14/0x30 [ 102.619997][ T8000] __kasan_kmalloc+0xaa/0xb0 [ 102.621489][ T8000] __kmalloc_noprof+0x322/0x820 [ 102.623034][ T8000] ops_init+0x77/0x5f0 [ 102.624512][ T8000] setup_net+0x118/0x3a0 [ 102.625870][ T8000] copy_net_ns+0x46f/0x7c0 [ 102.627313][ T8000] create_new_namespaces+0x3ea/0xac0 [ 102.629066][ T8000] unshare_nsproxy_namespaces+0xf2/0x220 [ 102.630826][ T8000] ksys_unshare+0x438/0xab0 [ 102.632293][ T8000] __x64_sys_unshare+0x31/0x40 [ 102.633853][ T8000] do_syscall_64+0x115/0x870 [ 102.635297][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.637288][ T8000] [ 102.638147][ T8000] The buggy address belongs to the object at ffff8880344d0000 [ 102.638147][ T8000] which belongs to the cache kmalloc-2k of size 2048 [ 102.642446][ T8000] The buggy address is located 384 bytes to the right of [ 102.642446][ T8000] allocated 1056-byte region [ffff8880344d0000, ffff8880344d0420) [ 102.647182][ T8000] [ 102.647963][ T8000] The buggy address belongs to the physical page: [ 102.650010][ T8000] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880344d1000 pfn:0x344d0 [ 102.653141][ T8000] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.655799][ T8000] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 102.658449][ T8000] page_type: f5(slab) [ 102.659712][ T8000] raw: 00fff00000000240 ffff88801bc42f00 ffffea0000ab6010 ffffea0000aa4810 [ 102.662377][ T8000] raw: ffff8880344d1000 0000000800080005 00000000f5000000 0000000000000000 [ 102.665050][ T8000] head: 00fff00000000240 ffff88801bc42f00 ffffea0000ab6010 ffffea0000aa4810 [ 102.667778][ T8000] head: ffff8880344d1000 0000000800080005 00000000f5000000 0000000000000000 [ 102.670441][ T8000] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 102.673148][ T8000] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 102.675798][ T8000] page dumped because: kasan: bad access detected [ 102.677859][ T8000] page_owner tracks the page as allocated [ 102.679636][ T8000] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5738, tgid 5738 (syz-executor), ts 54723853250, free_ts 50742550098 [ 102.686587][ T8000] post_alloc_hook+0xfd/0x120 [ 102.688143][ T8000] get_page_from_freelist+0xf48/0x3530 [ 102.689869][ T8000] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 102.691759][ T8000] new_slab+0xa2/0x650 [ 102.693075][ T8000] refill_objects+0xe3/0x410 [ 102.694559][ T8000] __pcs_replace_empty_main+0x376/0x680 [ 102.696331][ T8000] __kmalloc_cache_noprof+0x479/0x6c0 [ 102.698046][ T8000] rtnl_newlink+0x126/0x2380 [ 102.699457][ T8000] rtnetlink_rcv_msg+0x95e/0xe90 [ 102.701070][ T8000] netlink_rcv_skb+0x159/0x420 [ 102.702651][ T8000] netlink_unicast+0x585/0x850 [ 102.704439][ T8000] netlink_sendmsg+0x8b0/0xda0 [ 102.706097][ T8000] __sys_sendto+0x48b/0x4e0 [ 102.707802][ T8000] __x64_sys_sendto+0xe0/0x1c0 [ 102.709366][ T8000] do_syscall_64+0x115/0x870 [ 102.710854][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.712749][ T8000] page last free pid 5664 tgid 5664 stack trace: [ 102.714971][ T8000] __free_frozen_pages+0x79f/0x1090 [ 102.716741][ T8000] __folio_put+0x3b4/0x5f0 [ 102.718236][ T8000] skb_release_data+0x649/0x8e0 [ 102.719722][ T8000] skb_attempt_defer_free+0x2ed/0x830 [ 102.721424][ T8000] tcp_recvmsg_locked+0x11ed/0x2a30 [ 102.723056][ T8000] tcp_recvmsg+0x141/0x630 [ 102.724760][ T8000] inet_recvmsg+0xd5/0x4c0 [ 102.726212][ T8000] sock_recvmsg+0x1b8/0x220 [ 102.727921][ T8000] sock_read_iter+0x2b0/0x3a0 [ 102.729556][ T8000] vfs_read+0x960/0xb40 [ 102.730939][ T8000] ksys_read+0x1f8/0x250 [ 102.732335][ T8000] do_syscall_64+0x115/0x870 [ 102.733893][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.735728][ T8000] [ 102.736513][ T8000] Memory state around the buggy address: [ 102.738626][ T8000] ffff8880344d0480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.741142][ T8000] ffff8880344d0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.743907][ T8000] >ffff8880344d0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.747105][ T8000] ^ [ 102.748989][ T8000] ffff8880344d0600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.752021][ T8000] ffff8880344d0680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.754556][ T8000] ================================================================== [ 102.757305][ T8000] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.759575][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.762867][ T8000] Tainted: [L]=SOFTLOCKUP [ 102.764231][ T8000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.767334][ T8000] Call Trace: [ 102.768375][ T8000] [ 102.769320][ T8000] dump_stack_lvl+0x100/0x190 [ 102.770818][ T8000] vpanic+0x552/0x970 [ 102.772086][ T8000] ? __pfx_vpanic+0x10/0x10 [ 102.773532][ T8000] ? mark_held_locks+0x40/0x70 [ 102.775049][ T8000] ? irqentry_exit+0x24d/0xa00 [ 102.776566][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.778169][ T8000] panic+0xd1/0xe0 [ 102.779319][ T8000] ? __pfx_panic+0x10/0x10 [ 102.780741][ T8000] check_panic_on_warn.cold+0x19/0x34 [ 102.782454][ T8000] end_report.part.0+0x3a/0x90 [ 102.783909][ T8000] kasan_report.cold+0xe/0x18 [ 102.785321][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.786832][ T8000] ? _raw_spin_lock_bh+0x33/0x40 [ 102.788317][ T8000] __kasan_check_byte+0x36/0x50 [ 102.789829][ T8000] lock_acquire+0x132/0x370 [ 102.791296][ T8000] ? do_raw_spin_lock+0x128/0x260 [ 102.792882][ T8000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.794537][ T8000] _raw_spin_lock_bh+0x33/0x40 [ 102.796025][ T8000] ? bt_accept_unlink+0x64/0x370 [ 102.797563][ T8000] bt_accept_unlink+0x64/0x370 [ 102.799040][ T8000] ? __local_bh_enable_ip+0x9e/0x120 [ 102.800645][ T8000] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 102.802271][ T8000] l2cap_chan_del+0xa6/0x920 [ 102.803729][ T8000] l2cap_conn_del+0x34f/0x6b0 [ 102.805210][ T8000] l2cap_connect_cfm+0x97b/0xf20 [ 102.806740][ T8000] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 102.808436][ T8000] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 102.810232][ T8000] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 102.811872][ T8000] hci_conn_failed+0x18c/0x370 [ 102.813351][ T8000] hci_abort_conn_sync+0x7d9/0xb20 [ 102.814938][ T8000] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 102.816618][ T8000] ? find_held_lock+0x2b/0x80 [ 102.818011][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.820139][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.822335][ T8000] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 102.824538][ T8000] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 102.826675][ T8000] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 102.828962][ T8000] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 102.830639][ T8000] hci_suspend_sync+0x8b7/0xa70 [ 102.832101][ T8000] ? __pfx_hci_suspend_sync+0x10/0x10 [ 102.833756][ T8000] ? mgmt_pending_find+0x13e/0x1a0 [ 102.835292][ T8000] hci_suspend_dev+0x31d/0x540 [ 102.836842][ T8000] ? __pfx_hci_suspend_dev+0x10/0x10 [ 102.838469][ T8000] ? kobject_get+0xbb/0x150 [ 102.839880][ T8000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.841744][ T8000] hci_suspend_notifier+0x21e/0x330 [ 102.843364][ T8000] notifier_call_chain+0x99/0x3f0 [ 102.844935][ T8000] blocking_notifier_call_chain_robust+0xc8/0x160 [ 102.846867][ T8000] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 102.849216][ T8000] ? pin_hibernation_swap_type+0x145/0x1a0 [ 102.851390][ T8000] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.853172][ T8000] pm_notifier_call_chain_robust+0x27/0x60 [ 102.855308][ T8000] snapshot_open+0x189/0x2b0 [ 102.856849][ T8000] ? __pfx_snapshot_open+0x10/0x10 [ 102.858456][ T8000] misc_open+0x26d/0x450 [ 102.859815][ T8000] ? __pfx_misc_open+0x10/0x10 [ 102.861335][ T8000] chrdev_open+0x234/0x6a0 [ 102.862779][ T8000] ? __pfx_chrdev_open+0x10/0x10 [ 102.864342][ T8000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 102.866421][ T8000] do_dentry_open+0x6ab/0x14d0 [ 102.868308][ T8000] ? __pfx_chrdev_open+0x10/0x10 [ 102.870192][ T8000] vfs_open+0x82/0x3f0 [ 102.871509][ T8000] path_openat+0x2873/0x4280 [ 102.872936][ T8000] ? __pfx_path_openat+0x10/0x10 [ 102.874528][ T8000] do_file_open+0x20e/0x430 [ 102.876381][ T8000] ? __pfx_do_file_open+0x10/0x10 [ 102.878453][ T8000] ? alloc_fd+0x471/0x7a0 [ 102.880133][ T8000] ? do_getname+0x191/0x390 [ 102.881917][ T8000] do_sys_openat2+0x10f/0x1e0 [ 102.883744][ T8000] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.885839][ T8000] ? fput+0x79/0x100 [ 102.887379][ T8000] __x64_sys_openat+0x12d/0x210 [ 102.889451][ T8000] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.891670][ T8000] do_syscall_64+0x115/0x870 [ 102.893622][ T8000] ? clear_bhb_loop+0x40/0x90 [ 102.895576][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.898021][ T8000] RIP: 0033:0x7fae2e59de99 [ 102.899867][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.907818][ T8000] RSP: 002b:00007fae2f414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.911234][ T8000] RAX: ffffffffffffffda RBX: 00007fae2e825fa0 RCX: 00007fae2e59de99 [ 102.914481][ T8000] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 102.917665][ T8000] RBP: 00007fae2e633eaf R08: 0000000000000000 R09: 0000000000000000 [ 102.921009][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.924299][ T8000] R13: 00007fae2e826038 R14: 00007fae2e825fa0 R15: 00007ffd08dcbf98 [ 102.927614][ T8000] [ 102.929833][ T8000] Kernel Offset: disabled [ 102.931670][ T8000] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:22:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8259a831 RDX=0000000000000000 RSI=0000000000000000 RDI=00000000fffffff4 RBP=0000000000000000 RSP=ffffc900007ef7e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0000d174c0 R13=ffffc900007efb60 R14=00000000000345d3 R15=dffffc0000000000 RIP=ffffffff8209d71a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5de7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae2f35da08 CR3=000000001384a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd08dcc486 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd08dcc486 00007ffd08dcc48c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae2e634492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae2e6344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae2e634636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae2e6344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2c7a5 RDI=ffffffff9b9fcb40 RBP=ffffffff9b9fcb00 RSP=ffffc90003b0eb98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b6ef22c R15=ffffffff85a2c740 RIP=ffffffff85a2c7cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fae2f4146c0 ffffffff 00c00000 GS =0000 ffff8880d5ee7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000051db7000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000fcf802fe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed67f5be0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e460296 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e460296 00007ffd6e46029c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed8634492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed86344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed8634636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed86344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed87f05f8 00007f3ed87f05c8 00007f3ed87f0600 00007f3ed87f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fd46fd RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88801feb2540 RBP=ffff88806a543500 RSP=ffffc90000707870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a86a1 R14=0000000000000001 R15=ffff88806a63c880 RIP=ffffffff8209d590 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fe7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c436951 CR3=000000000e992000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed935d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed87f0600 00007f3ed87f05e0 00007f3ed87f05e8 00007f3ed87f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ed87f05f8 00007f3ed87f05c8 00007f3ed87f0600 00007f3ed87f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000009dbe7 RBX=ffff88801eeca540 RCX=ffffffff8bb9e2d5 RDX=0000000000000000 RSI=ffffffff8e1a474f RDI=ffffffff8c401280 RBP=ffffed1003dd94a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bb9c89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3ed67d4ff8 CR3=0000000050065000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fe000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc0032a96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc0032a96 00007ffcc0032a9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55ec34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55ec344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55ec34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa55ec344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000