last executing test programs: 8m12.830106684s ago: executing program 32 (id=790): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000340)={{0x7, 0x4, 0x0, 0x9}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fcdbdf250100000008000300010000000800003000068014000400fe800000e3ffffffffffffff000000bb060005004e2200001c0006800800060009000000060001000a000000080006000c000000080004000400000008000200040000baca8ee1040008000400fcffffff0800020002000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000100}, 0x801) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bind$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000900}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4, 0x80}}, './file0\x00'}) memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 6m25.37735074s ago: executing program 33 (id=2587): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465f984d896b901b5d30000000000000000000000000000000000000004"], 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800200026bd7000fedbdf250a80000010000208276465762f766964656fa3000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) 6m16.286053242s ago: executing program 34 (id=2711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) 6m4.359810722s ago: executing program 35 (id=2852): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500002000000061100400000000001d00ef02c400000004000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x39169d3d71a10152, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x15b2c1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmmsg(r3, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x7}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x12, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x8, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c3, 0xf7, 0x10, 0x2bf, 0x6c6, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x7f, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x2, 0x3, 0x9, 0x48c93692, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0x6, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0x7f, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x4, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0xd9, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0x212, 0x2, 0x14c, 0x2003, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0xa, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x280000, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={0x0}}, 0x40000) 5m3.682915238s ago: executing program 3 (id=3808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = dup(r4) setns(r5, 0x10000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m3.595200708s ago: executing program 3 (id=3810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x500, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4a804}, 0x84) 5m3.533445975s ago: executing program 3 (id=3812): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0xffff, 0x966, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x230}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m3.349915973s ago: executing program 3 (id=3818): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000006b00240012800b0001ee617269646765000014000280080002000600000005"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x4, 0x10101, 0xffffffff, 0x64}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x3, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x511069da3a52db2b, {0x0, r5}}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r7) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="5a100000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000036"], 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x10000050) 5m3.275840018s ago: executing program 3 (id=3822): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 5m2.7896714s ago: executing program 3 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}]}, 0x24}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000001c0)={0x0}) r3 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) (async) accept$ax25(r3, &(0x7f0000000300)={{0x3, @null}, [@remote, @null, @bcast, @netrom, @bcast, @netrom, @null, @null]}, &(0x7f0000000480)=0x48) (async) sendmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000004c0)='M', 0x1}], 0x2, &(0x7f0000001500)=ANY=[], 0x98, 0x20000000}, 0x40000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r5, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x33}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008010}, 0x810) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) 5m2.695330232s ago: executing program 36 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}]}, 0x24}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000001c0)={0x0}) r3 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) (async) accept$ax25(r3, &(0x7f0000000300)={{0x3, @null}, [@remote, @null, @bcast, @netrom, @bcast, @netrom, @null, @null]}, &(0x7f0000000480)=0x48) (async) sendmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000004c0)='M', 0x1}], 0x2, &(0x7f0000001500)=ANY=[], 0x98, 0x20000000}, 0x40000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r5, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x33}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008010}, 0x810) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) 4m9.45009438s ago: executing program 6 (id=4570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4011) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000001c0)=0x1, 0x4) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x60000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/166}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000003c0)={0x29, 0x1}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r5 = dup3(r4, r3, 0x80000) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x434, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfc, {0x10, 0x1, 0x0, [0x3, 0x5, 0xdd2d, 0xfb, 0x4, 0x6e8, 0x8, 0x8, 0x10, 0x5, 0xb, 0x4, 0x1c, 0x1, 0xcae, 0x800, 0x1, 0x6, 0x2, 0x0, 0x7f, 0x1, 0x6, 0x200, 0x84ff, 0x0, 0xffff, 0x80000000, 0x101, 0x8000, 0x5, 0x1000, 0x6, 0x6, 0xfff, 0x14d80000, 0x8000, 0xfffffffa, 0x5f, 0x9, 0x3, 0x8, 0xf26, 0x6, 0x6, 0x4, 0x4, 0x2, 0x5, 0x5, 0x8001, 0xf, 0x6, 0x2, 0x81, 0x7f, 0x400, 0x5, 0x3ff, 0x2, 0xc, 0x7, 0x9, 0x833], [0x0, 0x7, 0x4, 0x8, 0x7, 0x0, 0x9, 0xfff, 0xfff, 0x3ff, 0x2, 0x5, 0xc0000000, 0x8, 0x2e, 0x2fd6, 0xac, 0x2, 0x9, 0x5, 0x7, 0x7, 0x4000, 0xd, 0x4, 0x43d, 0x4, 0x2, 0x7, 0xcc6, 0x9, 0x2, 0xfff, 0x40, 0x80000001, 0x7, 0x40, 0x4, 0x4, 0x6, 0x5, 0x1, 0x6e4015a8, 0x8, 0x2, 0xb, 0x6, 0x1, 0x4, 0x0, 0x4, 0xc47, 0xb, 0x8000, 0x5, 0x6, 0x2, 0x4, 0x9, 0x4, 0x8, 0x3, 0x0, 0x9], [0x2, 0x80, 0x6, 0xfff, 0x95d51c15, 0x4, 0x8, 0x8, 0x3, 0xfffff001, 0x400, 0x44, 0x0, 0x5, 0x5, 0x9, 0x3, 0x5eb, 0x5, 0xfffffff8, 0x9, 0x9, 0x80000000, 0x8, 0x3, 0x1, 0x5, 0x3, 0x0, 0x80000000, 0x6, 0x2, 0x0, 0x2d47, 0xec6, 0x2c, 0xb8d8, 0x1, 0x0, 0xff, 0x7, 0x5, 0xf18, 0x600000, 0x6, 0x6, 0x7, 0x3, 0x101, 0x8, 0xb, 0x2, 0x8001, 0xfff, 0x3, 0x380, 0x9, 0x0, 0x8000, 0xffff, 0x3ff, 0x7, 0x10000], [0xffffffff, 0xfffffff8, 0x401, 0xfffffffa, 0x3, 0x2, 0xbc, 0xf7, 0x3, 0x9, 0x8, 0xffffffff, 0x6, 0x63, 0x7, 0x324, 0x7fffffff, 0x8, 0x80000001, 0x3, 0x8247, 0x7, 0xfff, 0x9, 0x10000, 0xd, 0x9, 0x6e4, 0x66ac, 0x7, 0xfff, 0x7, 0xffffffff, 0xffff8001, 0x0, 0x43, 0x7, 0x7, 0x2, 0x4, 0x100, 0x7fffffff, 0x8, 0x7, 0x4a, 0x3, 0xff, 0x10ac, 0x3, 0x4, 0x3, 0x4, 0x8, 0x9, 0x6, 0xb, 0x99f, 0x3ff, 0x6, 0x7, 0x7f, 0xc, 0x12, 0x6b00000], 0x13, ['{\x00', '\xac(\xf1$}![:\x00', '*\x00', '\x00', '\x00', '%\x00', '\xff\xff']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x41}, 0x8014) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000940)={0x7, &(0x7f0000000900)=[{0x3, 0x5, 0x7f, 0x3}, {0x7f, 0x2, 0x0, 0x6}, {0xff8a, 0x4, 0x8, 0x9}, {0xba4c, 0xf4, 0x9, 0x8}, {0x5, 0x7, 0xf9, 0x4}, {0x0, 0x5, 0x2, 0x7}, {0x2, 0x3, 0xc, 0x7ff}]}, 0x10) socket$inet6(0xa, 0x2, 0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000a00)={0x16, 0x98, 0xfa00, {&(0x7f00000009c0)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xf, 0x5, {"111e9712b551d4a12730357e66bf1837"}, 0x97db, 0x5, 0x80000000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000ac0)={0x11, 0x10, 0xfa00, {&(0x7f0000000980), r6}}, 0x18) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000b00)=0x6) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000b40)={'team_slave_1\x00', 0x400}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000000f80)={0x3, 0x1, 0x3, 0x7, 0x1d3, &(0x7f0000000b80)}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000fc0)={0x3, r5}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001000)={'macvtap0\x00'}) connect$rose(r5, &(0x7f0000001040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$COMEDI_UNLOCK(r5, 0x6406) ioctl$KDENABIO(r5, 0x4b36) 4m9.322313392s ago: executing program 6 (id=4571): pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="3a7d78172866533683f024f442568892", 0x10}], 0x1, 0x2ffffc, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b9b}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x100025cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x16, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x436, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x0, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x7, 0x3, 0xd500, 0x8, 0x77, 0x8, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x2000040, 0xfd, 0x1005, 0x1, 0x7, 0x1e, 0x5, 0x81, 0x3, 0x9d86, 0xfffffff8, 0xfffffff7, 0x8, 0x140f2, 0x2005396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xffffffc0, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x0, 0x3, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0xfbc}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r6}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2bc001, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x2007}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x404000, 0x54, 0x1d}, 0x18) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000002c0)={{0xf20f, 0x10, 0x10, 0x80}, 'syz0\x00', 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000001, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}}}, 0x24}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 4m8.990291347s ago: executing program 6 (id=4575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000300300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 4m8.819758518s ago: executing program 6 (id=4577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x102) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 4m8.819526711s ago: executing program 6 (id=4578): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967", 0xad}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0xffff, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x230}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m8.508022881s ago: executing program 6 (id=4580): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m8.393733914s ago: executing program 37 (id=4580): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m7.316776539s ago: executing program 7 (id=4610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04f5ff00000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000400208000240000000060900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 4m7.316548404s ago: executing program 7 (id=4612): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r1, 0x80047437, 0xfffffffffffeffff) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0xd, 0x20}, &(0x7f0000000500)=0xc) 4m7.244135385s ago: executing program 7 (id=4613): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x1, "da7f5b4c103ebf993ddeaeb558fd61f55a215d92e4b39cdd8152b94fa92da377", 0x0, 0x1}) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x1, "da7f5b4c103ebf993ddeaeb558fd61f55a215d92e4b39cdd8152b94fa92da377", 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x200000ad, 0x800) (async) r4 = eventfd2(0x200000ad, 0x800) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r4}) r5 = dup2(r2, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRESDEC=r3, @ANYRES8=r2, @ANYRESOCT=r5, @ANYRES16=r6, @ANYRESHEX=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff5366"], 0x10) syz_open_dev$cec(0x0, 0x0, 0x0) (async) syz_open_dev$cec(0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x101140, 0x0) ioctl$COMEDI_CMD(r10, 0x80506409, &(0x7f00000010c0)={0x1, 0x40, 0xffffffff, 0x6dd, 0x20, 0x3e7, 0x0, 0x2, 0x20, 0x1, 0x20, 0x7, &(0x7f0000000240)=[0x3], 0x1, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff8d}}]}}, 0x0) syz_usb_control_io(r12, 0x0, 0x0) (async) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_disconnect(r12) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="ff000060efe4f438356f00000000086a059a004000010203010224000101094081090400bc01030101020921b6000201221703090581"], 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4m5.835403775s ago: executing program 7 (id=4624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mount$bind(0x0, 0x0, 0x0, 0x1544a0, 0xfffffffffffff000) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000001d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(r5, r6) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0xf, 0x0, 0x3, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x2}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r0, r4, 0x25, 0x14, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m5.771812856s ago: executing program 7 (id=4627): ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{0x212, 0x0, 0xb03}, {0xbf5, 0x0, 0x1000}, {0xbc3, 0x0, 0xf632}, {0x184, 0x0, 0x2}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x660}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x27, 0x4, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="793488f9846ff6cb93947ab591a9320d802f3719b6613214a11b8451a3f0839e4b174b3da4fb346ecd54d8205ef6d4ad8ca51b7d5c9f1cbfcf5b2f3c5eab7bc30b9e9ae453a9d9bd1d1ef55ce8bb9161bb316e20dce8bbb2b2cd7463765931f79e04b799f7302010505ac0a8ae29a0b749fee6dcad0cdc71d8054eac35e8764485e181d3"], 0x58}}, 0x8000) 4m5.322989738s ago: executing program 7 (id=4637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0x40000099, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x80000000}, {0x39d, 0x0, 0x6}, {0x899, 0x0, 0x79e}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m5.218277835s ago: executing program 38 (id=4637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0x40000099, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x80000000}, {0x39d, 0x0, 0x6}, {0x899, 0x0, 0x79e}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m58.220585716s ago: executing program 0 (id=4726): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m58.137475038s ago: executing program 0 (id=4729): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 3m54.905529065s ago: executing program 0 (id=4796): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00030026bdf0fefcdbdf250400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3m54.780206217s ago: executing program 0 (id=4797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) (async) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) (async, rerun: 32) shutdown(r1, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r4, &(0x7f00000024c0)={0x2020}, 0x2020) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) (async) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", "8c0a9892", "0200", "fcffffff", ["5089986400005cacf10000b6", "8efeffff6000000200", "0c436d743c97c443084000", "ff81000000008000"]}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000600)=""/4096) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000180)=0xf) 3m54.780088329s ago: executing program 0 (id=4798): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="ad432bbd7000ffa6000002f000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20048810) 3m54.351611862s ago: executing program 0 (id=4803): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m54.250158229s ago: executing program 39 (id=4803): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m48.110620874s ago: executing program 8 (id=6039): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async, rerun: 32) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.310392148s ago: executing program 8 (id=6040): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x60, 0x4a804}, 0x84) 2m43.236181967s ago: executing program 8 (id=6122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x7f, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380ffe0054000100040000000000000807000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 2m43.236037606s ago: executing program 8 (id=6123): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000009500"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb, 0x0, 0x0, @generic=0x3}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000002c0)=0x7) setpgid(0x0, r3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m43.148506768s ago: executing program 8 (id=6124): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1, 0x3}}, 0x30) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) 2m41.534699538s ago: executing program 8 (id=6146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bb07000fcdbdf2503000000080002000200000008000100030000000800020002000800"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x2006, 0x2, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x20008084) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (rerun: 32) 2m41.496898373s ago: executing program 40 (id=6146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bb07000fcdbdf2503000000080002000200000008000100030000000800020002000800"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x2006, 0x2, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x20008084) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (rerun: 32) 45.655966962s ago: executing program 5 (id=8488): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x5, 0x7b77}, 0x15}, 0x10) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000240)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="0ee7dac8ff0a89bdfad59af1302446efd9f9d61d86921012d0e078847f97fe01ff16e6a6d5ca49b41f8bb54b036957084bddb7a1b82bb86eda69948ee782b61141825110dfebf74d5fad990694", 0x4d, r1) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x69) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 45.553891393s ago: executing program 5 (id=8491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e000000100000000000000000000000020010000000000000000000020000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$nl_route(0x10, 0x3, 0x0) 45.48896118s ago: executing program 5 (id=8494): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0xffff, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x230}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 45.243012s ago: executing program 5 (id=8501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x7f, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000e1000000000000000ffe00000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 45.242877901s ago: executing program 5 (id=8502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000003f0002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000400208000240000000060900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 45.17747732s ago: executing program 5 (id=8503): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x800}, 0xc) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) (async, rerun: 32) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x6044841}, 0x8080) 29.11868778s ago: executing program 41 (id=8503): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x800}, 0xc) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) (async, rerun: 32) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x6044841}, 0x8080) 4.062870003s ago: executing program 2 (id=9418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x15b2c1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080003008e"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x7}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0xf, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x8, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c3, 0xf7, 0x10, 0x2bf, 0x6c6, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93692, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0x6, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xfffffffd, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x4, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0xd9, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x2003, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0xa, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x280000, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r4, 0x0, 0x40) 3.965752453s ago: executing program 2 (id=9419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000025c0), 0x101000, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, &(0x7f0000002600)={0xc}) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000002c00)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000001340)="f075", 0x2}], 0x1, &(0x7f0000003c40)=ANY=[], 0x138}}], 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000480)=0xfffffeff, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='i2c_write\x00', r5, 0x0, 0x10000}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.96557232s ago: executing program 9 (id=9420): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x94}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x96, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x82, 0x0, @opaque="87fc4f59a62c5eadc88f3aa9e2df2e42c413481ed8b4b413ad0b87968879dff2940d80b7147f9bf0e76c4e7e4ba1983424ed389c5355ce2bd1e909e11536c5a1b02c3e52b6257a6ecee2538f66e677156ec259fe39320f95371d1a37fae1f742b2f2d8f616165f5fab0d0f4f9c51046185130e6f7bc3cec0fee9"}}}, 0xa4) 3.891396345s ago: executing program 2 (id=9421): r0 = syz_open_procfs(0x0, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x25dfdbfe, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r8, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x3436324d}) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) (async) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000a8, &(0x7f0000000400)=ANY=[@ANYBLOB='max=00000000000010000000,']) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r12 = dup(r11) ioctl$BLKGETSIZE64(r12, 0x80081272, &(0x7f0000000240)) (async, rerun: 64) r13 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r13, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async) bind$alg(r13, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0x0) 3.890849132s ago: executing program 2 (id=9423): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe1, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x238}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.926868172s ago: executing program 1 (id=9435): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000580)='1\x00', 0x2) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) (async, rerun: 32) write$sysctl(r7, &(0x7f00000000c0)='2\x00', 0x2) (async, rerun: 64) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000300)=0x8) (async, rerun: 64) ptrace(0x10, r1) (async, rerun: 32) ptrace$setopts(0x4200, r1, 0x80e96, 0x100011) (rerun: 32) r8 = syz_open_procfs(r1, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d0000"], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) (async) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 2.704433702s ago: executing program 1 (id=9436): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x721100, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002300)={[0x35, 0x7, 0x0, 0x180, 0x5fffffffffffffff, 0x10, 0xf4, 0x3ff, 0x80, 0x2, 0x6, 0x8001, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.805955193s ago: executing program 4 (id=9440): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe1, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x238}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.677412332s ago: executing program 1 (id=9441): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0xffff, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x230}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.677067322s ago: executing program 9 (id=9442): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x10) socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x6c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 1.603168066s ago: executing program 9 (id=9443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000060300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000400208000240000000060900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 1.602922508s ago: executing program 9 (id=9444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000025c0), 0x101000, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, &(0x7f0000002600)={0xc}) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000002c00)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000001340)="f075", 0x2}], 0x1, &(0x7f0000003c40)=ANY=[], 0x138}}], 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000480)=0xfffffeff, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='i2c_write\x00', r5, 0x0, 0x10000}, 0x18) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x8100000000, 0x0, 0x20, 0x9, 0x0, 0x2004c5, 0x7000, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.496217306s ago: executing program 4 (id=9445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1, @local, 0x7, 0x4}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.436842149s ago: executing program 4 (id=9446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000001400000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1.435745248s ago: executing program 1 (id=9447): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34", 0x73}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x7, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x230}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.239437137s ago: executing program 1 (id=9448): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x147040, 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x10200014}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x201, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 786.273634ms ago: executing program 4 (id=9449): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xe}, @fwd={0xa}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/147, 0x34, 0x93, 0x1, 0x4}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x5, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a4625316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000180)=r1, 0x4) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) socket$inet6(0xa, 0x6, 0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xe}, @fwd={0xa}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/147, 0x34, 0x93, 0x1, 0x4}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x5, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a4625316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000180)=r1, 0x4) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) (async) socket$inet6(0xa, 0x6, 0x7fffffff) (async) 786.094861ms ago: executing program 4 (id=9450): r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x810, &(0x7f0000000000)=@nl=@unspec={0x0, 0x700, 0x100000, 0x80fe}, 0x80) 523.011436ms ago: executing program 4 (id=9451): r0 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xd2, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 485.043777ms ago: executing program 42 (id=9451): r0 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xd2, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 436.412772ms ago: executing program 9 (id=9453): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x10}}], 0x70) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x10) 319.61949ms ago: executing program 1 (id=9454): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x7) close_range(r3, r4, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {0x1, 0xe, 0x9, 0x7}, 0x6, [0x5, 0x4, 0x100000, 0xffff7fff, 0x81, 0x1, 0xffff, 0x9, 0x4, 0x10001, 0xbdcf, 0x6, 0xfffffff9, 0x5, 0x5, 0x1, 0x1, 0x5, 0x1b, 0x9, 0xa8, 0x8000, 0x7f, 0x2, 0x40, 0x6, 0x6, 0x8, 0x7, 0x8, 0xfffffffe, 0x9, 0x7ff, 0x0, 0x5, 0x2, 0x0, 0x6, 0xc5, 0xb, 0xf06, 0x7, 0x8, 0x0, 0x1ff, 0x1, 0x9, 0x9, 0x7fff, 0x4, 0x0, 0xc, 0x850, 0x1, 0xa76, 0x0, 0x6, 0x4, 0x5, 0x8, 0x162, 0x101, 0x2, 0x3], [0x6, 0x35, 0x8, 0xfffffffa, 0x2, 0x7e, 0x8, 0x101, 0xffffffff, 0x1, 0x3, 0x0, 0x8, 0xfffffffa, 0x4, 0x3, 0x0, 0x0, 0x81, 0x2, 0xfffffff7, 0xfffffff9, 0x7f, 0x5, 0x9, 0x0, 0x5, 0x2, 0x4, 0xe106, 0x4a4, 0x71, 0x9, 0x8000000, 0xd82, 0x1c3, 0x468e, 0x23, 0x5, 0x9, 0x5, 0x200, 0x1, 0x871, 0x6, 0x10000, 0x100, 0xc, 0x1000, 0x6, 0x80000000, 0xd663, 0x7, 0x6, 0x8, 0x2, 0x40, 0xf3, 0xd, 0x3, 0x3, 0xc8, 0xc71, 0x7], [0x5, 0x4, 0x7, 0x8001, 0x3, 0x8, 0x50dc, 0x0, 0x6, 0x26, 0x10000, 0x842c, 0x2, 0x6, 0x100, 0x8, 0x7, 0x1, 0xc774, 0x7, 0xb, 0x7fff, 0x3, 0x2, 0xea2e, 0x40000, 0x7ff, 0x0, 0x2b, 0x814, 0x3dd, 0x7fff, 0x2, 0x80000000, 0x7a2de192, 0x2, 0x3, 0x9, 0x2, 0xa, 0x4, 0x3, 0x6, 0x9, 0x1, 0x6, 0x6, 0x1000, 0x1000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xe, 0xffff, 0x6, 0xe, 0x3, 0x100, 0x9, 0x6, 0x6, 0x2], [0x6, 0x4, 0x4, 0x8, 0xe12dc20e, 0x8000, 0x6, 0x9, 0x233afcb6, 0x0, 0xffff, 0xfe7, 0xc, 0x7ff, 0x80000000, 0x1, 0x7fff, 0x9, 0x4, 0x2, 0x5, 0x5, 0x6, 0x802, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1000, 0x4d1, 0x64, 0xfffffff7, 0xf19f, 0x2, 0x1, 0x3, 0xb3, 0x76, 0x4, 0xfffffdef, 0x6, 0xe3fc, 0x80, 0x3, 0x8, 0xffff8000, 0x2, 0xffffff80, 0x6, 0xa, 0x26, 0x800, 0xa5f1, 0xd, 0xc, 0x3f6d378b, 0x7fff, 0xad3, 0x4, 0x0, 0x4, 0x2, 0x4]}, 0x45c) 134.860418ms ago: executing program 2 (id=9424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 51.324443ms ago: executing program 2 (id=9455): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x190, 0x29, 0x36, {0x5e, 0x2e, '\x00', [@pad1, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0xffff, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x3, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 9 (id=9456): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x7) close_range(r3, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f00000008c0)) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {0x1, 0xe, 0x9, 0x7}, 0x6, [0x5, 0x4, 0x100000, 0xffff7fff, 0x81, 0x1, 0xffff, 0x9, 0x4, 0x10001, 0xbdcf, 0x6, 0xfffffff9, 0x5, 0x5, 0x1, 0x1, 0x5, 0x1b, 0x9, 0xa8, 0x8000, 0x7f, 0x2, 0x40, 0x6, 0x6, 0x8, 0x7, 0x8, 0xfffffffe, 0x9, 0x7ff, 0x0, 0x5, 0x2, 0x0, 0x6, 0xc5, 0xb, 0xf06, 0x7, 0x8, 0x0, 0x1ff, 0x1, 0x9, 0x9, 0x7fff, 0x4, 0x0, 0xc, 0x850, 0x1, 0xa76, 0x0, 0x6, 0x4, 0x5, 0x8, 0x162, 0x101, 0x2, 0x3], [0x6, 0x35, 0x8, 0xfffffffa, 0x2, 0x7e, 0x8, 0x101, 0xffffffff, 0x1, 0x3, 0x0, 0x8, 0xfffffffa, 0x4, 0x3, 0x0, 0x0, 0x81, 0x2, 0xfffffff7, 0xfffffff9, 0x7f, 0x5, 0x9, 0x0, 0x5, 0x2, 0x4, 0xe106, 0x4a4, 0x71, 0x9, 0x8000000, 0xd82, 0x1c3, 0x468e, 0x23, 0x5, 0x9, 0x5, 0x200, 0x1, 0x871, 0x6, 0x10000, 0x100, 0xc, 0x1000, 0x6, 0x80000000, 0xd663, 0x7, 0x6, 0x8, 0x2, 0x40, 0xf3, 0xd, 0x3, 0x3, 0xc8, 0xc71, 0x7], [0x5, 0x4, 0x7, 0x8001, 0x3, 0x8, 0x50dc, 0x0, 0x6, 0x26, 0x10000, 0x842c, 0x2, 0x6, 0x100, 0x8, 0x7, 0x1, 0xc774, 0x7, 0xb, 0x7fff, 0x3, 0x2, 0xea2e, 0x40000, 0x7ff, 0x0, 0x2b, 0x814, 0x3dd, 0x7fff, 0x2, 0x80000000, 0x7a2de192, 0x2, 0x3, 0x9, 0x2, 0xa, 0x4, 0x3, 0x6, 0x9, 0x1, 0x6, 0x6, 0x1000, 0x1000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xe, 0xffff, 0x6, 0xe, 0x3, 0x100, 0x9, 0x6, 0x6, 0x2], [0x6, 0x4, 0x4, 0x8, 0xe12dc20e, 0x8000, 0x6, 0x9, 0x233afcb6, 0x0, 0xffff, 0xfe7, 0xc, 0x7ff, 0x80000000, 0x1, 0x7fff, 0x9, 0x4, 0x2, 0x5, 0x5, 0x6, 0x802, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1000, 0x4d1, 0x64, 0xfffffff7, 0xf19f, 0x2, 0x1, 0x3, 0xb3, 0x76, 0x4, 0xfffffdef, 0x6, 0xe3fc, 0x80, 0x3, 0x8, 0xffff8000, 0x2, 0xffffff80, 0x6, 0xa, 0x26, 0x800, 0xa5f1, 0xd, 0xc, 0x3f6d378b, 0x7fff, 0xad3, 0x4, 0x0, 0x4, 0x2, 0x4]}, 0x45c) kernel console output (not intermixed with test programs): .2.8225': attribute type 10 has an invalid length. [ 533.006437][T29869] team0: Device veth1_macvtap failed to register rx_handler [ 533.025431][T29873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.096762][T29883] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 533.102274][T29892] xt_l2tp: missing protocol rule (udp|l2tpip) [ 533.281470][T29912] FAULT_INJECTION: forcing a failure. [ 533.281470][T29912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.281791][ T40] audit: type=1400 audit(1766307278.284:3240): avc: denied { ioctl } for pid=29910 comm="syz.2.8239" path="socket:[270509]" dev="sockfs" ino=270509 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 533.293109][T29914] program syz.2.8239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.293620][T29912] CPU: 1 UID: 0 PID: 29912 Comm: syz.1.8240 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.293642][T29912] Tainted: [L]=SOFTLOCKUP [ 533.293647][T29912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.293655][T29912] Call Trace: [ 533.293660][T29912] [ 533.293665][T29912] dump_stack_lvl+0x16c/0x1f0 [ 533.293693][T29912] should_fail_ex+0x512/0x640 [ 533.293716][T29912] _copy_from_user+0x2e/0xd0 [ 533.293737][T29912] drm_ioctl+0x4fb/0xc30 [ 533.293760][T29912] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 533.293786][T29912] ? __pfx_drm_ioctl+0x10/0x10 [ 533.293816][T29912] ? selinux_file_ioctl+0x180/0x270 [ 533.293837][T29912] ? selinux_file_ioctl+0xb4/0x270 [ 533.293859][T29912] ? __pfx_drm_ioctl+0x10/0x10 [ 533.293883][T29912] __x64_sys_ioctl+0x18e/0x210 [ 533.293904][T29912] do_syscall_64+0xcd/0xf80 [ 533.293927][T29912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.293945][T29912] RIP: 0033:0x7fa837d8f7c9 [ 533.293959][T29912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.293975][T29912] RSP: 002b:00007fa838bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.293991][T29912] RAX: ffffffffffffffda RBX: 00007fa837fe5fa0 RCX: 00007fa837d8f7c9 [ 533.294002][T29912] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000012 [ 533.294012][T29912] RBP: 00007fa838bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 533.294022][T29912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.294033][T29912] R13: 00007fa837fe6038 R14: 00007fa837fe5fa0 R15: 00007ffce2886b28 [ 533.294057][T29912] [ 533.401508][T29914] MTD: Couldn't look up './bus': -15 [ 533.514247][T29931] netlink: 'syz.1.8248': attribute type 10 has an invalid length. [ 533.517903][T29931] team0: Device veth1_macvtap failed to register rx_handler [ 533.576147][T29939] pim6reg: left allmulticast mode [ 533.582818][ T6076] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 533.746094][ T6076] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.750580][ T6076] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.755009][ T6076] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.758823][ T6076] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.776934][T29917] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 533.782580][ T6076] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 533.794582][T29952] FAULT_INJECTION: forcing a failure. [ 533.794582][T29952] name failslab, interval 1, probability 0, space 0, times 0 [ 533.800605][T29952] CPU: 0 UID: 0 PID: 29952 Comm: syz.1.8257 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.800623][T29952] Tainted: [L]=SOFTLOCKUP [ 533.800627][T29952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.800633][T29952] Call Trace: [ 533.800637][T29952] [ 533.800641][T29952] dump_stack_lvl+0x16c/0x1f0 [ 533.800659][T29952] should_fail_ex+0x512/0x640 [ 533.800675][T29952] ? __kmalloc_cache_noprof+0x5f/0x800 [ 533.800693][T29952] should_failslab+0xc2/0x120 [ 533.800712][T29952] __kmalloc_cache_noprof+0x80/0x800 [ 533.800731][T29952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.800743][T29952] ? drm_atomic_state_alloc+0xb8/0x120 [ 533.800761][T29952] ? drm_atomic_state_alloc+0xb8/0x120 [ 533.800776][T29952] drm_atomic_state_alloc+0xb8/0x120 [ 533.800792][T29952] drm_mode_atomic_ioctl+0x393/0x2640 [ 533.800810][T29952] ? avc_has_extended_perms+0x33a/0x1090 [ 533.800829][T29952] ? avc_has_extended_perms+0x47c/0x1090 [ 533.800847][T29952] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 533.800863][T29952] ? __lock_acquire+0x436/0x2890 [ 533.800876][T29952] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 533.800900][T29952] ? drm_is_current_master+0x2c/0x40 [ 533.800917][T29952] ? do_raw_spin_unlock+0x172/0x230 [ 533.800934][T29952] drm_ioctl_kernel+0x1f4/0x3e0 [ 533.800952][T29952] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 533.800972][T29952] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 533.800991][T29952] drm_ioctl+0x5c9/0xc30 [ 533.801011][T29952] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 533.801028][T29952] ? __pfx_drm_ioctl+0x10/0x10 [ 533.801048][T29952] ? selinux_file_ioctl+0x180/0x270 [ 533.801062][T29952] ? selinux_file_ioctl+0xb4/0x270 [ 533.801076][T29952] ? __pfx_drm_ioctl+0x10/0x10 [ 533.801091][T29952] __x64_sys_ioctl+0x18e/0x210 [ 533.801104][T29952] do_syscall_64+0xcd/0xf80 [ 533.801119][T29952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.801129][T29952] RIP: 0033:0x7fa837d8f7c9 [ 533.801138][T29952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.801149][T29952] RSP: 002b:00007fa838bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.801159][T29952] RAX: ffffffffffffffda RBX: 00007fa837fe5fa0 RCX: 00007fa837d8f7c9 [ 533.801165][T29952] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000012 [ 533.801171][T29952] RBP: 00007fa838bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 533.801177][T29952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.801183][T29952] R13: 00007fa837fe6038 R14: 00007fa837fe5fa0 R15: 00007ffce2886b28 [ 533.801196][T29952] [ 533.997395][ T40] audit: type=1400 audit(1766307278.948:3241): avc: denied { block_suspend } for pid=29955 comm="syz.1.8259" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 534.074859][ T6076] usb 14-1: USB disconnect, device number 18 [ 534.234654][ T6017] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 534.280026][T29977] __nla_validate_parse: 10 callbacks suppressed [ 534.280042][T29977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8267'. [ 534.312173][T29977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8267'. [ 534.384920][ T6017] usb 7-1: device descriptor read/64, error -71 [ 534.457417][T29989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8270'. [ 534.563381][T30001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8275'. [ 534.596923][T30005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8276'. [ 534.625116][T30005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8276'. [ 534.662316][ T6017] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 534.802155][ T6017] usb 7-1: device descriptor read/64, error -71 [ 534.836257][T30030] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8287'. [ 534.890145][T30037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8290'. [ 534.912394][T30037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8290'. [ 534.925477][ T40] audit: type=1400 audit(1766307279.818:3242): avc: denied { write } for pid=30039 comm="syz.5.8291" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 534.934335][ T6017] usb usb7-port1: attempt power cycle [ 534.992356][T17917] nci: nci_ntf_packet: unknown ntf opcode 0x100 [ 534.999901][T30049] lo: left promiscuous mode [ 535.007362][T30049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.066746][T30054] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 535.303875][ T6017] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 535.326040][ T6017] usb 7-1: device descriptor read/8, error -71 [ 535.581920][ T6017] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 535.603945][ T6017] usb 7-1: device descriptor read/8, error -71 [ 535.721517][ T6017] usb usb7-port1: unable to enumerate USB device [ 535.843864][T30060] nfs4: Bad value for 'source' [ 535.894160][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8298'. [ 536.230787][T30078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.415859][ T6089] usb 14-1: new full-speed USB device number 19 using dummy_hcd [ 536.563620][ T40] audit: type=1326 audit(1766307281.351:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30104 comm="syz.5.8310" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0e98f7c9 code=0x0 [ 536.589223][ T6089] usb 14-1: config 0 has an invalid interface number: 199 but max is 1 [ 536.592696][ T6089] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.596971][ T6089] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 536.601048][ T6089] usb 14-1: config 0 has no interface number 0 [ 536.603097][ T6089] usb 14-1: config 0 interface 199 has no altsetting 0 [ 536.605329][ T6089] usb 14-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 536.608188][ T6089] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.614729][ T6089] usb 14-1: config 0 descriptor?? [ 536.840177][ T6089] usb 14-1: string descriptor 0 read error: -71 [ 536.844105][ T6089] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 536.846305][ T6089] dvb-usb: bulk message failed: -22 (3/0) [ 536.851285][ T6089] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 536.854819][ T6089] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 536.857254][ T6089] usb 14-1: media controller created [ 536.860040][ T6089] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.865716][ T6089] dvb-usb: bulk message failed: -22 (6/0) [ 536.867739][ T6089] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 536.871487][ T6089] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input33 [ 536.876749][ T6089] dvb-usb: schedule remote query interval to 150 msecs. [ 536.879287][ T6089] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 536.882630][ T6089] usb 14-1: USB disconnect, device number 19 [ 536.890369][ T6089] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 537.123171][T30119] bond2: entered promiscuous mode [ 537.125760][T30119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.410287][ T4043] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 537.570789][ T4043] usb 6-1: Using ep0 maxpacket: 8 [ 537.577328][ T4043] usb 6-1: config 0 has no interfaces? [ 537.579682][ T4043] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.583920][ T4043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.590301][ T4043] usb 6-1: config 0 descriptor?? [ 537.622502][ T40] audit: type=1400 audit(1766307282.343:3244): avc: denied { getopt } for pid=30133 comm="syz.9.8320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 537.809809][ T40] audit: type=1400 audit(1766307282.520:3245): avc: denied { append } for pid=30118 comm="syz.1.8315" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 537.878169][T30148] FAULT_INJECTION: forcing a failure. [ 537.878169][T30148] name failslab, interval 1, probability 0, space 0, times 0 [ 537.882689][T30148] CPU: 3 UID: 0 PID: 30148 Comm: syz.9.8325 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.882706][T30148] Tainted: [L]=SOFTLOCKUP [ 537.882710][T30148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.882716][T30148] Call Trace: [ 537.882719][T30148] [ 537.882724][T30148] dump_stack_lvl+0x16c/0x1f0 [ 537.882741][T30148] should_fail_ex+0x512/0x640 [ 537.882757][T30148] ? fs_reclaim_acquire+0xae/0x150 [ 537.882773][T30148] should_failslab+0xc2/0x120 [ 537.882787][T30148] __kmalloc_noprof+0xeb/0x910 [ 537.882804][T30148] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 537.882822][T30148] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 537.882836][T30148] tomoyo_realpath_from_path+0xc2/0x6e0 [ 537.882851][T30148] ? tomoyo_profile+0x47/0x60 [ 537.882868][T30148] tomoyo_path_number_perm+0x245/0x580 [ 537.882880][T30148] ? tomoyo_path_number_perm+0x237/0x580 [ 537.882893][T30148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.882918][T30148] ? find_held_lock+0x2b/0x80 [ 537.882951][T30148] ? find_held_lock+0x2b/0x80 [ 537.882969][T30148] ? hook_file_ioctl_common+0x144/0x410 [ 537.882992][T30148] ? __fget_files+0x20e/0x3c0 [ 537.883009][T30148] security_file_ioctl+0x9b/0x240 [ 537.883024][T30148] __x64_sys_ioctl+0xb7/0x210 [ 537.883038][T30148] do_syscall_64+0xcd/0xf80 [ 537.883052][T30148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.883063][T30148] RIP: 0033:0x7f25b378f7c9 [ 537.883072][T30148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.883082][T30148] RSP: 002b:00007f25b45c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.883092][T30148] RAX: ffffffffffffffda RBX: 00007f25b39e5fa0 RCX: 00007f25b378f7c9 [ 537.883098][T30148] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 537.883104][T30148] RBP: 00007f25b45c3090 R08: 0000000000000000 R09: 0000000000000000 [ 537.883110][T30148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.883116][T30148] R13: 00007f25b39e6038 R14: 00007f25b39e5fa0 R15: 00007ffda5b8e708 [ 537.883130][T30148] [ 537.883165][T30148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.035458][T30119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.039408][T30119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.047667][ T9] usb 6-1: USB disconnect, device number 36 [ 538.104257][T30169] netlink: 'syz.9.8333': attribute type 29 has an invalid length. [ 538.107767][T30169] netlink: 'syz.9.8333': attribute type 3 has an invalid length. [ 538.358132][T30185] FAULT_INJECTION: forcing a failure. [ 538.358132][T30185] name failslab, interval 1, probability 0, space 0, times 0 [ 538.363709][T30188] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.363880][T30188] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.368645][T30185] CPU: 0 UID: 0 PID: 30185 Comm: syz.9.8340 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.368662][T30185] Tainted: [L]=SOFTLOCKUP [ 538.368666][T30185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.368673][T30185] Call Trace: [ 538.368677][T30185] [ 538.368681][T30185] dump_stack_lvl+0x16c/0x1f0 [ 538.368699][T30185] should_fail_ex+0x512/0x640 [ 538.368715][T30185] ? fs_reclaim_acquire+0xae/0x150 [ 538.368731][T30185] should_failslab+0xc2/0x120 [ 538.368746][T30185] __kmalloc_noprof+0xeb/0x910 [ 538.368763][T30185] ? tomoyo_encode2+0x100/0x3e0 [ 538.368780][T30185] ? tomoyo_encode2+0x100/0x3e0 [ 538.368794][T30185] tomoyo_encode2+0x100/0x3e0 [ 538.368810][T30185] tomoyo_encode+0x29/0x50 [ 538.368823][T30185] tomoyo_realpath_from_path+0x18f/0x6e0 [ 538.368842][T30185] tomoyo_path_number_perm+0x245/0x580 [ 538.368854][T30185] ? tomoyo_path_number_perm+0x237/0x580 [ 538.368867][T30185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 538.368880][T30185] ? find_held_lock+0x2b/0x80 [ 538.368908][T30185] ? find_held_lock+0x2b/0x80 [ 538.368923][T30185] ? hook_file_ioctl_common+0x144/0x410 [ 538.368942][T30185] ? __fget_files+0x20e/0x3c0 [ 538.368959][T30185] security_file_ioctl+0x9b/0x240 [ 538.368974][T30185] __x64_sys_ioctl+0xb7/0x210 [ 538.368987][T30185] do_syscall_64+0xcd/0xf80 [ 538.369002][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.369013][T30185] RIP: 0033:0x7f25b378f7c9 [ 538.369022][T30185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.369032][T30185] RSP: 002b:00007f25b45c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.369042][T30185] RAX: ffffffffffffffda RBX: 00007f25b39e5fa0 RCX: 00007f25b378f7c9 [ 538.369049][T30185] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 538.369055][T30185] RBP: 00007f25b45c3090 R08: 0000000000000000 R09: 0000000000000000 [ 538.369061][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.369066][T30185] R13: 00007f25b39e6038 R14: 00007f25b39e5fa0 R15: 00007ffda5b8e708 [ 538.369080][T30185] [ 538.369091][T30185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.515564][T30204] usb usb8: usbfs: process 30204 (syz.2.8346) did not claim interface 0 before use [ 538.558907][ T40] audit: type=1400 audit(1766307283.222:3246): avc: denied { override_creds } for pid=30203 comm="syz.2.8346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 538.676838][T30224] netlink: 'syz.1.8354': attribute type 10 has an invalid length. [ 538.680622][T30224] team0: Device veth1_macvtap failed to register rx_handler [ 538.698813][T30221] erspan1: entered promiscuous mode [ 538.712435][T30226] support for the xor transformation has been removed. [ 538.924168][T30242] FAULT_INJECTION: forcing a failure. [ 538.924168][T30242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.929935][T30242] CPU: 3 UID: 0 PID: 30242 Comm: syz.2.8362 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.929961][T30242] Tainted: [L]=SOFTLOCKUP [ 538.929967][T30242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.929978][T30242] Call Trace: [ 538.929983][T30242] [ 538.929991][T30242] dump_stack_lvl+0x16c/0x1f0 [ 538.930017][T30242] should_fail_ex+0x512/0x640 [ 538.930045][T30242] _copy_from_user+0x2e/0xd0 [ 538.930070][T30242] drm_ioctl+0x4fb/0xc30 [ 538.930097][T30242] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 538.930124][T30242] ? __pfx_drm_ioctl+0x10/0x10 [ 538.930156][T30242] ? selinux_file_ioctl+0x180/0x270 [ 538.930178][T30242] ? selinux_file_ioctl+0xb4/0x270 [ 538.930200][T30242] ? __pfx_drm_ioctl+0x10/0x10 [ 538.930222][T30242] __x64_sys_ioctl+0x18e/0x210 [ 538.930245][T30242] do_syscall_64+0xcd/0xf80 [ 538.930267][T30242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.930284][T30242] RIP: 0033:0x7f38be18f7c9 [ 538.930298][T30242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.930314][T30242] RSP: 002b:00007f38bf0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.930330][T30242] RAX: ffffffffffffffda RBX: 00007f38be3e5fa0 RCX: 00007f38be18f7c9 [ 538.930340][T30242] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 538.930350][T30242] RBP: 00007f38bf0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 538.930359][T30242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.930369][T30242] R13: 00007f38be3e6038 R14: 00007f38be3e5fa0 R15: 00007ffcc8ecd678 [ 538.930393][T30242] [ 539.473305][T30291] FAULT_INJECTION: forcing a failure. [ 539.473305][T30291] name failslab, interval 1, probability 0, space 0, times 0 [ 539.478599][T30291] CPU: 1 UID: 0 PID: 30291 Comm: syz.1.8380 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.478627][T30291] Tainted: [L]=SOFTLOCKUP [ 539.478631][T30291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 539.478637][T30291] Call Trace: [ 539.478646][T30291] [ 539.478651][T30291] dump_stack_lvl+0x16c/0x1f0 [ 539.478682][T30291] should_fail_ex+0x512/0x640 [ 539.478705][T30291] ? __kmalloc_cache_noprof+0x5f/0x800 [ 539.478724][T30291] should_failslab+0xc2/0x120 [ 539.478738][T30291] __kmalloc_cache_noprof+0x80/0x800 [ 539.478755][T30291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.478766][T30291] ? drm_atomic_state_alloc+0xb8/0x120 [ 539.478784][T30291] ? drm_atomic_state_alloc+0xb8/0x120 [ 539.478799][T30291] drm_atomic_state_alloc+0xb8/0x120 [ 539.478815][T30291] drm_mode_atomic_ioctl+0x393/0x2640 [ 539.478834][T30291] ? avc_has_extended_perms+0x33a/0x1090 [ 539.478854][T30291] ? avc_has_extended_perms+0x47c/0x1090 [ 539.478872][T30291] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.478888][T30291] ? __lock_acquire+0x436/0x2890 [ 539.478901][T30291] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 539.478925][T30291] ? drm_is_current_master+0x2c/0x40 [ 539.478943][T30291] ? do_raw_spin_unlock+0x172/0x230 [ 539.478959][T30291] drm_ioctl_kernel+0x1f4/0x3e0 [ 539.478973][T30291] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.478990][T30291] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 539.479009][T30291] drm_ioctl+0x5c9/0xc30 [ 539.479024][T30291] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.479041][T30291] ? __pfx_drm_ioctl+0x10/0x10 [ 539.479061][T30291] ? selinux_file_ioctl+0x180/0x270 [ 539.479074][T30291] ? selinux_file_ioctl+0xb4/0x270 [ 539.479088][T30291] ? __pfx_drm_ioctl+0x10/0x10 [ 539.479103][T30291] __x64_sys_ioctl+0x18e/0x210 [ 539.479117][T30291] do_syscall_64+0xcd/0xf80 [ 539.479131][T30291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.479141][T30291] RIP: 0033:0x7fa837d8f7c9 [ 539.479150][T30291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.479161][T30291] RSP: 002b:00007fa838bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.479171][T30291] RAX: ffffffffffffffda RBX: 00007fa837fe5fa0 RCX: 00007fa837d8f7c9 [ 539.479178][T30291] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 539.479184][T30291] RBP: 00007fa838bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 539.479190][T30291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.479196][T30291] R13: 00007fa837fe6038 R14: 00007fa837fe5fa0 R15: 00007ffce2886b28 [ 539.479209][T30291] [ 539.719683][T30312] netlink: 'syz.9.8388': attribute type 10 has an invalid length. [ 539.729337][T30312] team0: Device veth1_macvtap failed to register rx_handler [ 539.766118][ T40] audit: type=1400 audit(1766307284.354:3247): avc: denied { nlmsg_write } for pid=30313 comm="syz.9.8389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 539.902099][T30322] random: crng reseeded on system resumption [ 539.929096][T30324] FAULT_INJECTION: forcing a failure. [ 539.929096][T30324] name failslab, interval 1, probability 0, space 0, times 0 [ 539.933193][T30324] CPU: 0 UID: 0 PID: 30324 Comm: syz.5.8393 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.933209][T30324] Tainted: [L]=SOFTLOCKUP [ 539.933213][T30324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 539.933219][T30324] Call Trace: [ 539.933224][T30324] [ 539.933228][T30324] dump_stack_lvl+0x16c/0x1f0 [ 539.933247][T30324] should_fail_ex+0x512/0x640 [ 539.933262][T30324] ? kmem_cache_alloc_noprof+0x62/0x770 [ 539.933275][T30324] should_failslab+0xc2/0x120 [ 539.933289][T30324] kmem_cache_alloc_noprof+0x83/0x770 [ 539.933300][T30324] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 539.933317][T30324] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 539.933336][T30324] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 539.933357][T30324] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 539.933378][T30324] mmu_topup_memory_caches+0x25/0x170 [ 539.933393][T30324] kvm_mmu_load+0xd6/0x2390 [ 539.933405][T30324] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 539.933420][T30324] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 539.933438][T30324] ? __pfx_kvm_mmu_load+0x10/0x10 [ 539.933449][T30324] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 539.933466][T30324] ? kvm_check_and_inject_events+0x63d/0x1050 [ 539.933482][T30324] vcpu_run+0x39d2/0x5a80 [ 539.933500][T30324] ? __pfx_vcpu_run+0x10/0x10 [ 539.933517][T30324] ? rcu_is_watching+0x12/0xc0 [ 539.933530][T30324] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 539.933543][T30324] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 539.933559][T30324] kvm_vcpu_ioctl+0x76d/0x16d0 [ 539.933577][T30324] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 539.933606][T30324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.933620][T30324] ? do_vfs_ioctl+0x128/0x14f0 [ 539.933633][T30324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 539.933644][T30324] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 539.933664][T30324] ? hook_file_ioctl_common+0x144/0x410 [ 539.933690][T30324] ? selinux_file_ioctl+0x180/0x270 [ 539.933707][T30324] ? selinux_file_ioctl+0xb4/0x270 [ 539.933727][T30324] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 539.933749][T30324] __x64_sys_ioctl+0x18e/0x210 [ 539.933767][T30324] do_syscall_64+0xcd/0xf80 [ 539.933788][T30324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.933798][T30324] RIP: 0033:0x7fdb0e98f7c9 [ 539.933808][T30324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.933817][T30324] RSP: 002b:00007fdb0f7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.933828][T30324] RAX: ffffffffffffffda RBX: 00007fdb0ebe5fa0 RCX: 00007fdb0e98f7c9 [ 539.933834][T30324] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 539.933840][T30324] RBP: 00007fdb0f7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 539.933846][T30324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.933852][T30324] R13: 00007fdb0ebe6038 R14: 00007fdb0ebe5fa0 R15: 00007ffd6799d598 [ 539.933866][T30324] [ 540.080268][T30332] FAULT_INJECTION: forcing a failure. [ 540.080268][T30332] name failslab, interval 1, probability 0, space 0, times 0 [ 540.088118][T30332] CPU: 2 UID: 0 PID: 30332 Comm: syz.2.8396 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.088145][T30332] Tainted: [L]=SOFTLOCKUP [ 540.088151][T30332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.088160][T30332] Call Trace: [ 540.088166][T30332] [ 540.088172][T30332] dump_stack_lvl+0x16c/0x1f0 [ 540.088198][T30332] should_fail_ex+0x512/0x640 [ 540.088220][T30332] ? __kmalloc_noprof+0xca/0x910 [ 540.088245][T30332] should_failslab+0xc2/0x120 [ 540.088266][T30332] __kmalloc_noprof+0xeb/0x910 [ 540.088288][T30332] ? drm_atomic_state_init+0xec/0x540 [ 540.088314][T30332] ? drm_atomic_state_init+0xec/0x540 [ 540.088335][T30332] drm_atomic_state_init+0xec/0x540 [ 540.088355][T30332] ? kasan_save_track+0x14/0x30 [ 540.088404][T30332] drm_atomic_state_alloc+0xd3/0x120 [ 540.088432][T30332] drm_mode_atomic_ioctl+0x393/0x2640 [ 540.088460][T30332] ? avc_has_extended_perms+0x33a/0x1090 [ 540.088487][T30332] ? avc_has_extended_perms+0x47c/0x1090 [ 540.088513][T30332] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 540.088535][T30332] ? __lock_acquire+0x436/0x2890 [ 540.088553][T30332] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 540.088588][T30332] ? drm_is_current_master+0x2c/0x40 [ 540.088612][T30332] ? do_raw_spin_unlock+0x172/0x230 [ 540.088635][T30332] drm_ioctl_kernel+0x1f4/0x3e0 [ 540.088655][T30332] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 540.088678][T30332] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 540.088705][T30332] drm_ioctl+0x5c9/0xc30 [ 540.088728][T30332] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 540.088751][T30332] ? __pfx_drm_ioctl+0x10/0x10 [ 540.088781][T30332] ? selinux_file_ioctl+0x180/0x270 [ 540.088800][T30332] ? selinux_file_ioctl+0xb4/0x270 [ 540.088820][T30332] ? __pfx_drm_ioctl+0x10/0x10 [ 540.088841][T30332] __x64_sys_ioctl+0x18e/0x210 [ 540.088861][T30332] do_syscall_64+0xcd/0xf80 [ 540.088882][T30332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.088897][T30332] RIP: 0033:0x7f38be18f7c9 [ 540.088911][T30332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.088924][T30332] RSP: 002b:00007f38bf0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.088940][T30332] RAX: ffffffffffffffda RBX: 00007f38be3e5fa0 RCX: 00007f38be18f7c9 [ 540.088951][T30332] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 540.088960][T30332] RBP: 00007f38bf0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 540.088969][T30332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.088978][T30332] R13: 00007f38be3e6038 R14: 00007f38be3e5fa0 R15: 00007ffcc8ecd678 [ 540.089000][T30332] [ 540.116643][ T4043] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 540.118393][ T40] audit: type=1400 audit(1766307284.681:3248): avc: denied { map } for pid=30335 comm="syz.9.8398" path="socket:[274674]" dev="sockfs" ino=274674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 540.210707][T30340] usb usb8: usbfs: process 30340 (syz.9.8400) did not claim interface 0 before use [ 540.218004][ T40] audit: type=1400 audit(1766307284.756:3249): avc: denied { view } for pid=30339 comm="syz.2.8407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 540.280349][ T4043] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.281133][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.283053][ T4043] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 540.283066][ T4043] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.299510][ T4043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 540.301489][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.303678][ T4043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 540.308795][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.314633][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.318356][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.318497][ T4043] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.326316][ T4043] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.330018][ T4043] usb 6-1: Product: syz [ 540.331825][ T4043] usb 6-1: Manufacturer: syz [ 540.338543][ T4043] cdc_wdm 6-1:1.0: skipping garbage [ 540.342923][ T4043] cdc_wdm 6-1:1.0: skipping garbage [ 540.351009][ T4043] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 540.353282][ T4043] cdc_wdm 6-1:1.0: Unknown control protocol [ 540.380479][T30346] __nla_validate_parse: 22 callbacks suppressed [ 540.380490][T30346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8401'. [ 540.461990][T30342] chnl_net:caif_netlink_parms(): no params data found [ 540.591268][ T6017] usb 6-1: USB disconnect, device number 37 [ 540.613387][T30342] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.616330][T30342] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.619185][T30342] bridge_slave_0: entered allmulticast mode [ 540.622193][T30342] bridge_slave_0: entered promiscuous mode [ 540.627936][T30364] sp0: Synchronizing with TNC [ 540.628203][T30342] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.636088][T30342] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.639413][T30342] bridge_slave_1: entered allmulticast mode [ 540.643379][T30342] bridge_slave_1: entered promiscuous mode [ 540.681779][T30366] CIFS mount error: No usable UNC path provided in device string! [ 540.681779][T30366] [ 540.685135][T30366] smb3_fs_context_validate: 55 callbacks suppressed [ 540.685144][T30366] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 540.688480][T30342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.695678][T30342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.725806][T26611] syz_tun (unregistering): left allmulticast mode [ 540.745354][T30342] team0: Port device team_slave_0 added [ 540.750660][T30342] team0: Port device team_slave_1 added [ 540.759167][ T40] audit: type=1400 audit(1766307285.279:3250): avc: denied { append } for pid=30369 comm="syz.9.8410" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 540.759993][T30370] netlink: 'syz.9.8410': attribute type 10 has an invalid length. [ 540.789267][T30370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.792613][T30342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.794926][T30342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.803392][T30342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.808686][T30342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.811370][T30342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.820512][T30342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.843693][T30342] hsr_slave_0: entered promiscuous mode [ 540.846280][T30342] hsr_slave_1: entered promiscuous mode [ 540.848855][T30342] debugfs: 'hsr0' already exists in 'hsr' [ 540.850726][T30342] Cannot create hsr debugfs directory [ 540.950543][T30342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.954095][T30342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.048897][T30342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.053078][T30342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.102464][T30384] netlink: 'syz.9.8415': attribute type 10 has an invalid length. [ 541.105534][T30384] team0: Device veth1_macvtap failed to register rx_handler [ 541.156265][T30342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.160810][T30342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.165724][T30390] FAULT_INJECTION: forcing a failure. [ 541.165724][T30390] name failslab, interval 1, probability 0, space 0, times 0 [ 541.169911][T30390] CPU: 1 UID: 0 PID: 30390 Comm: syz.2.8418 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.169927][T30390] Tainted: [L]=SOFTLOCKUP [ 541.169931][T30390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 541.169938][T30390] Call Trace: [ 541.169942][T30390] [ 541.169947][T30390] dump_stack_lvl+0x16c/0x1f0 [ 541.169963][T30390] should_fail_ex+0x512/0x640 [ 541.169979][T30390] ? kmem_cache_alloc_noprof+0x62/0x770 [ 541.169991][T30390] should_failslab+0xc2/0x120 [ 541.170005][T30390] kmem_cache_alloc_noprof+0x83/0x770 [ 541.170015][T30390] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 541.170032][T30390] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 541.170051][T30390] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 541.170068][T30390] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 541.170089][T30390] mmu_topup_memory_caches+0x25/0x170 [ 541.170104][T30390] kvm_mmu_load+0xd6/0x2390 [ 541.170116][T30390] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 541.170132][T30390] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 541.170149][T30390] ? __pfx_kvm_mmu_load+0x10/0x10 [ 541.170160][T30390] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 541.170182][T30390] ? kvm_check_and_inject_events+0x63d/0x1050 [ 541.170197][T30390] vcpu_run+0x39d2/0x5a80 [ 541.170216][T30390] ? __pfx_vcpu_run+0x10/0x10 [ 541.170233][T30390] ? rcu_is_watching+0x12/0xc0 [ 541.170245][T30390] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 541.170258][T30390] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 541.170275][T30390] kvm_vcpu_ioctl+0x76d/0x16d0 [ 541.170292][T30390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 541.170308][T30390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.170322][T30390] ? do_vfs_ioctl+0x128/0x14f0 [ 541.170334][T30390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 541.170345][T30390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 541.170364][T30390] ? hook_file_ioctl_common+0x144/0x410 [ 541.170385][T30390] ? selinux_file_ioctl+0x180/0x270 [ 541.170397][T30390] ? selinux_file_ioctl+0xb4/0x270 [ 541.170411][T30390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 541.170428][T30390] __x64_sys_ioctl+0x18e/0x210 [ 541.170441][T30390] do_syscall_64+0xcd/0xf80 [ 541.170455][T30390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.170466][T30390] RIP: 0033:0x7f38be18f7c9 [ 541.170475][T30390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.170485][T30390] RSP: 002b:00007f38bf0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.170496][T30390] RAX: ffffffffffffffda RBX: 00007f38be3e5fa0 RCX: 00007f38be18f7c9 [ 541.170502][T30390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 541.170508][T30390] RBP: 00007f38bf0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 541.170514][T30390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.170520][T30390] R13: 00007f38be3e6038 R14: 00007f38be3e5fa0 R15: 00007ffcc8ecd678 [ 541.170534][T30390] [ 541.173444][T30392] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8419'. [ 541.181709][ T40] audit: type=1326 audit(1766307285.672:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30394 comm="syz.9.8420" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b378f7c9 code=0x0 [ 541.327704][T30342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.331037][T30342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.375247][T30403] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8423'. [ 541.436491][T30413] netlink: 'syz.2.8427': attribute type 10 has an invalid length. [ 541.442102][T30413] team0: Device veth1_macvtap failed to register rx_handler [ 541.455678][T21749] bridge_slave_1: left allmulticast mode [ 541.457613][T21749] bridge_slave_1: left promiscuous mode [ 541.459538][T21749] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.464315][T21749] bridge_slave_0: left allmulticast mode [ 541.466212][T21749] bridge_slave_0: left promiscuous mode [ 541.468200][T21749] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.479005][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.483319][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.492902][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.496775][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.500337][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.506092][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.509757][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8428'. [ 541.796436][T21749] bond0 (unregistering): left promiscuous mode [ 541.799005][T21749] bond_slave_0: left promiscuous mode [ 541.801294][T21749] bond_slave_1: left promiscuous mode [ 541.805194][T21749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.810901][T21749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.816972][T21749] bond0 (unregistering): Released all slaves [ 541.823667][T21749] bond1 (unregistering): Released all slaves [ 541.833756][T21749] bond2 (unregistering): Released all slaves [ 541.937461][T21749] bond3 (unregistering): Released all slaves [ 541.992106][T30342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 541.997065][T30342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.002236][T30342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.009939][T30342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.108477][T30342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.120750][T30342] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.129413][T21747] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.132021][T21747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.160953][ T40] audit: type=1400 audit(1766307286.589:3252): avc: denied { watch } for pid=30446 comm="syz.9.8438" path="/416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 542.175985][ T40] audit: type=1400 audit(1766307286.589:3253): avc: denied { watch_sb } for pid=30446 comm="syz.9.8438" path="/416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.182750][T21747] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.192705][T21747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.350487][T30462] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 542.386955][T30342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.424460][T30471] ata1.00: invalid multi_count 128 ignored [ 542.524100][ T5938] Bluetooth: hci3: command tx timeout [ 542.595594][T30342] veth0_vlan: entered promiscuous mode [ 542.623563][T30342] veth1_vlan: entered promiscuous mode [ 542.646768][T30342] veth0_macvtap: entered promiscuous mode [ 542.657203][T30342] veth1_macvtap: entered promiscuous mode [ 542.672067][T30342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.679857][T30342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.740762][ T90] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.743831][ T90] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.748897][ T90] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.752677][ T90] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.807340][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.810145][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.830490][T21748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.835325][T21748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.992016][ T5936] Bluetooth: hci3: hardware error 0x03 [ 543.080074][T30525] netlink: ct family unspecified [ 543.127374][T30530] netlink: 'syz.1.8465': attribute type 10 has an invalid length. [ 543.136665][T30530] team0: Device veth1_macvtap failed to register rx_handler [ 543.169664][T30537] FAULT_INJECTION: forcing a failure. [ 543.169664][T30537] name failslab, interval 1, probability 0, space 0, times 0 [ 543.179428][T30537] CPU: 2 UID: 0 PID: 30537 Comm: syz.1.8468 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.179446][T30537] Tainted: [L]=SOFTLOCKUP [ 543.179450][T30537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 543.179457][T30537] Call Trace: [ 543.179461][T30537] [ 543.179466][T30537] dump_stack_lvl+0x16c/0x1f0 [ 543.179499][T30537] should_fail_ex+0x512/0x640 [ 543.179526][T30537] ? fs_reclaim_acquire+0xae/0x150 [ 543.179542][T30537] should_failslab+0xc2/0x120 [ 543.179556][T30537] __kmalloc_noprof+0xeb/0x910 [ 543.179573][T30537] ? tomoyo_encode2+0x100/0x3e0 [ 543.179602][T30537] ? tomoyo_encode2+0x100/0x3e0 [ 543.179615][T30537] tomoyo_encode2+0x100/0x3e0 [ 543.179631][T30537] tomoyo_encode+0x29/0x50 [ 543.179644][T30537] tomoyo_realpath_from_path+0x18f/0x6e0 [ 543.179663][T30537] tomoyo_path_number_perm+0x245/0x580 [ 543.179674][T30537] ? tomoyo_path_number_perm+0x237/0x580 [ 543.179688][T30537] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.179701][T30537] ? find_held_lock+0x2b/0x80 [ 543.179729][T30537] ? find_held_lock+0x2b/0x80 [ 543.179744][T30537] ? hook_file_ioctl_common+0x144/0x410 [ 543.179763][T30537] ? __fget_files+0x20e/0x3c0 [ 543.179780][T30537] security_file_ioctl+0x9b/0x240 [ 543.179795][T30537] __x64_sys_ioctl+0xb7/0x210 [ 543.179808][T30537] do_syscall_64+0xcd/0xf80 [ 543.179823][T30537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.179834][T30537] RIP: 0033:0x7fa837d8f7c9 [ 543.179843][T30537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.179853][T30537] RSP: 002b:00007fa838bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.179864][T30537] RAX: ffffffffffffffda RBX: 00007fa837fe5fa0 RCX: 00007fa837d8f7c9 [ 543.179870][T30537] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 543.179876][T30537] RBP: 00007fa838bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 543.179882][T30537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.179888][T30537] R13: 00007fa837fe6038 R14: 00007fa837fe5fa0 R15: 00007ffce2886b28 [ 543.179902][T30537] [ 543.179915][T30537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.229439][ T5938] Bluetooth: hci4: hardware error 0x03 [ 543.336981][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 543.336992][ T40] audit: type=1400 audit(1766307287.692:3255): avc: denied { getopt } for pid=30548 comm="syz.9.8473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 543.485253][ T40] audit: type=1400 audit(1766307287.833:3256): avc: denied { remount } for pid=30559 comm="syz.9.8478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 543.734720][T30587] XFS (nbd5): SB validate failed with error -5. [ 543.799743][ T40] audit: type=1400 audit(1766307288.122:3257): avc: denied { read } for pid=30596 comm="syz.1.8490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 543.816059][ T40] audit: type=1400 audit(1766307288.141:3258): avc: denied { getopt } for pid=30600 comm="syz.2.8492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 543.899885][T30610] netlink: 'syz.2.8496': attribute type 10 has an invalid length. [ 543.911440][T30610] team0: Device veth1_macvtap failed to register rx_handler [ 544.059013][T30625] FAULT_INJECTION: forcing a failure. [ 544.059013][T30625] name failslab, interval 1, probability 0, space 0, times 0 [ 544.063533][T30625] CPU: 0 UID: 0 PID: 30625 Comm: syz.1.8499 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.063550][T30625] Tainted: [L]=SOFTLOCKUP [ 544.063554][T30625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.063560][T30625] Call Trace: [ 544.063568][T30625] [ 544.063572][T30625] dump_stack_lvl+0x16c/0x1f0 [ 544.063604][T30625] should_fail_ex+0x512/0x640 [ 544.063641][T30625] ? __kmalloc_cache_noprof+0x5f/0x800 [ 544.063659][T30625] should_failslab+0xc2/0x120 [ 544.063673][T30625] __kmalloc_cache_noprof+0x80/0x800 [ 544.063690][T30625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.063701][T30625] ? drm_atomic_state_alloc+0xb8/0x120 [ 544.063719][T30625] ? drm_atomic_state_alloc+0xb8/0x120 [ 544.063734][T30625] drm_atomic_state_alloc+0xb8/0x120 [ 544.063750][T30625] drm_mode_atomic_ioctl+0x393/0x2640 [ 544.063768][T30625] ? avc_has_extended_perms+0x33a/0x1090 [ 544.063787][T30625] ? avc_has_extended_perms+0x47c/0x1090 [ 544.063805][T30625] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 544.063822][T30625] ? __lock_acquire+0x436/0x2890 [ 544.063835][T30625] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 544.063858][T30625] ? drm_is_current_master+0x2c/0x40 [ 544.063875][T30625] ? do_raw_spin_unlock+0x172/0x230 [ 544.063891][T30625] drm_ioctl_kernel+0x1f4/0x3e0 [ 544.063906][T30625] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 544.063922][T30625] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 544.063941][T30625] drm_ioctl+0x5c9/0xc30 [ 544.063957][T30625] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 544.063973][T30625] ? __pfx_drm_ioctl+0x10/0x10 [ 544.064002][T30625] ? selinux_file_ioctl+0x180/0x270 [ 544.064016][T30625] ? selinux_file_ioctl+0xb4/0x270 [ 544.064030][T30625] ? __pfx_drm_ioctl+0x10/0x10 [ 544.064044][T30625] __x64_sys_ioctl+0x18e/0x210 [ 544.064058][T30625] do_syscall_64+0xcd/0xf80 [ 544.064073][T30625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.064083][T30625] RIP: 0033:0x7fa837d8f7c9 [ 544.064092][T30625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.064102][T30625] RSP: 002b:00007fa838bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.064113][T30625] RAX: ffffffffffffffda RBX: 00007fa837fe5fa0 RCX: 00007fa837d8f7c9 [ 544.064119][T30625] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 544.064125][T30625] RBP: 00007fa838bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 544.064131][T30625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.064137][T30625] R13: 00007fa837fe6038 R14: 00007fa837fe5fa0 R15: 00007ffce2886b28 [ 544.064151][T30625] [ 544.309190][T21749] batadv0: left promiscuous mode [ 544.330931][T21749] hsr_slave_0: left promiscuous mode [ 544.334156][T21749] hsr_slave_1: left promiscuous mode [ 544.337000][T21749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.341138][T21749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.345805][T21749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.348889][T21749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.373248][T21749] veth0_macvtap: left promiscuous mode [ 544.375806][T21749] veth1_vlan: left promiscuous mode [ 544.378110][T21749] veth0_vlan: left promiscuous mode [ 545.078042][ T40] audit: type=1326 audit(1766307289.320:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30665 comm="syz.9.8515" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b378f7c9 code=0x0 [ 545.173182][ T5936] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 545.209439][T30675] FAULT_INJECTION: forcing a failure. [ 545.209439][T30675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.214100][T30675] CPU: 1 UID: 0 PID: 30675 Comm: syz.2.8518 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.214124][T30675] Tainted: [L]=SOFTLOCKUP [ 545.214129][T30675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 545.214138][T30675] Call Trace: [ 545.214144][T30675] [ 545.214151][T30675] dump_stack_lvl+0x16c/0x1f0 [ 545.214175][T30675] should_fail_ex+0x512/0x640 [ 545.214203][T30675] _copy_to_user+0x32/0xd0 [ 545.214230][T30675] simple_read_from_buffer+0xcb/0x170 [ 545.214254][T30675] proc_fail_nth_read+0x197/0x240 [ 545.214271][T30675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.214287][T30675] ? rw_verify_area+0xcf/0x6c0 [ 545.214305][T30675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.214320][T30675] vfs_read+0x1e4/0xcf0 [ 545.214342][T30675] ? __pfx___mutex_lock+0x10/0x10 [ 545.214366][T30675] ? __pfx_vfs_read+0x10/0x10 [ 545.214399][T30675] ? __fget_files+0x20e/0x3c0 [ 545.214426][T30675] ksys_read+0x12a/0x250 [ 545.214445][T30675] ? __pfx_ksys_read+0x10/0x10 [ 545.214466][T30675] ? fput+0x70/0xf0 [ 545.214485][T30675] do_syscall_64+0xcd/0xf80 [ 545.214508][T30675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.214524][T30675] RIP: 0033:0x7f38be18e1dc [ 545.214537][T30675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 545.214551][T30675] RSP: 002b:00007f38bf0ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.214565][T30675] RAX: ffffffffffffffda RBX: 00007f38be3e5fa0 RCX: 00007f38be18e1dc [ 545.214576][T30675] RDX: 000000000000000f RSI: 00007f38bf0ed0a0 RDI: 0000000000000012 [ 545.214585][T30675] RBP: 00007f38bf0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 545.214591][T30675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.214597][T30675] R13: 00007f38be3e6038 R14: 00007f38be3e5fa0 R15: 00007ffcc8ecd678 [ 545.214615][T30675] [ 545.332763][T30680] macsec1: entered promiscuous mode [ 545.334773][T30680] macsec1: entered allmulticast mode [ 545.517494][ T5938] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 545.520076][ T5938] Bluetooth: hci4: hardware error 0x03 [ 545.552661][T30696] tipc: Started in network mode [ 545.554303][T30696] tipc: Node identity e27f5454f22, cluster identity 4711 [ 545.556805][T30696] tipc: Enabled bearer , priority 0 [ 545.559676][T30696] syzkaller0: entered promiscuous mode [ 545.561782][T30696] syzkaller0: entered allmulticast mode [ 545.566223][T30696] sch_tbf: peakrate 9 is lower than or equals to rate 7031961925803603175 ! [ 545.571099][T30696] tipc: Resetting bearer [ 545.576357][T30695] tipc: Resetting bearer [ 545.588845][T30695] tipc: Disabling bearer [ 546.057878][T30716] __nla_validate_parse: 30 callbacks suppressed [ 546.057893][T30716] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8532'. [ 546.153443][T30725] overlayfs: failed to clone lowerpath [ 546.187133][T30732] macvtap0: entered allmulticast mode [ 546.189311][T30732] veth0_macvtap: entered allmulticast mode [ 546.255662][T30740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8539'. [ 546.258675][T30740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8539'. [ 546.293232][T30746] ./cgroup: Can't lookup blockdev [ 546.425229][T30764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8550'. [ 546.428916][T30764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8550'. [ 546.515735][ T40] audit: type=1400 audit(1766307290.657:3260): avc: denied { read } for pid=30778 comm="syz.9.8557" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.524810][ T40] audit: type=1400 audit(1766307290.657:3261): avc: denied { open } for pid=30778 comm="syz.9.8557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.535554][ T40] audit: type=1400 audit(1766307290.676:3262): avc: denied { watch_sb } for pid=30781 comm="syz.2.8558" path="/251/file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 546.588407][T30790] overlay: Bad value for 'workdir' [ 546.593298][T30793] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8562'. [ 546.605485][T30793] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8562'. [ 546.650295][ T40] audit: type=1400 audit(1766307290.788:3263): avc: denied { connect } for pid=30794 comm="syz.1.8565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 546.695341][T30808] tmpfs: Bad value for 'mpol' [ 546.699580][ T40] audit: type=1400 audit(1766307290.835:3264): avc: denied { getopt } for pid=30807 comm="syz.2.8569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 546.751290][T30813] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 546.755394][T30813] block device autoloading is deprecated and will be removed. [ 546.796781][T30821] netlink: 'syz.2.8576': attribute type 2 has an invalid length. [ 546.803155][T30824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8575'. [ 546.806091][T30824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8575'. [ 546.837879][T30827] netlink: 'syz.1.8578': attribute type 10 has an invalid length. [ 546.842252][T30827] team0: Device veth1_macvtap failed to register rx_handler [ 546.894884][T30832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8580'. [ 547.068151][T30853] netlink: 'syz.9.8588': attribute type 13 has an invalid length. [ 547.071504][T30853] netlink: 'syz.9.8588': attribute type 13 has an invalid length. [ 547.074976][T30853] netlink: 'syz.9.8588': attribute type 13 has an invalid length. [ 547.258137][ T9] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 547.430509][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 29030, setting to 64 [ 547.433926][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 547.437873][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.440730][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.443225][ T9] usb 6-1: Product: syz [ 547.444535][ T9] usb 6-1: Manufacturer: syz [ 547.445918][ T9] usb 6-1: SerialNumber: syz [ 547.448905][ T9] usb 6-1: config 0 descriptor?? [ 547.454434][ T9] usb 6-1: selecting invalid altsetting 0 [ 547.469381][T30871] IPVS: set_ctl: invalid protocol: 41 172.30.1.10:20001 [ 547.676397][T30847] ptrace attach of "/syz-executor exec"[27226] was attempted by ""[30847] [ 547.680183][T30847] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 547.684075][ T9] usb 6-1: USB disconnect, device number 38 [ 547.740788][ T5938] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 548.268741][T30904] tmpfs: Bad value for 'huge' [ 548.645692][T30931] netlink: 'syz.9.8620': attribute type 25 has an invalid length. [ 548.648237][T30931] netlink: 'syz.9.8620': attribute type 1 has an invalid length. [ 548.650659][T30931] bridge0: port 1(bridge_slave_0) entered learning state [ 549.375029][T30959] netlink: 'syz.9.8631': attribute type 9 has an invalid length. [ 549.378154][T30959] netlink: 'syz.9.8631': attribute type 11 has an invalid length. [ 549.380872][T30959] netlink: 'syz.9.8631': attribute type 12 has an invalid length. [ 549.387713][T30959] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 549.394277][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 549.394290][ T40] audit: type=1400 audit(1766307293.350:3268): avc: denied { execheap } for pid=30958 comm="syz.9.8631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 550.749832][ T40] audit: type=1400 audit(1766307294.622:3269): avc: denied { setopt } for pid=31012 comm="syz.2.8654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 550.935069][ T40] audit: type=1400 audit(1766307294.791:3270): avc: denied { connect } for pid=31025 comm="syz.2.8659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 550.942838][ T40] audit: type=1400 audit(1766307294.791:3271): avc: denied { read } for pid=31025 comm="syz.2.8659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 550.996235][T31026] fuse: Bad value for 'fd' [ 551.000658][T31026] fuse: Bad value for 'fd' [ 551.572021][T31071] fuse: Bad value for 'fd' [ 551.612964][ T40] audit: type=1400 audit(1766307295.427:3272): avc: denied { write } for pid=31073 comm="syz.9.8679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 551.704469][T31084] __nla_validate_parse: 18 callbacks suppressed [ 551.704506][T31084] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8683'. [ 552.043246][T31112] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8694'. [ 552.114310][T31119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8697'. [ 552.118142][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8697'. [ 552.122785][T31119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8697'. [ 552.128771][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8697'. [ 552.216624][T31126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8701'. [ 552.219578][T31127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8701'. [ 552.257019][T31132] macvtap0: refused to change device tx_queue_len [ 552.553882][ T40] audit: type=1400 audit(1766307296.306:3273): avc: denied { setopt } for pid=31164 comm="syz.2.8718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 552.553881][T31165] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20003 [ 552.587843][T31163] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 552.611368][T31169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8718'. [ 552.638217][T31168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8719'. [ 552.667010][ T40] audit: type=1400 audit(1766307296.409:3274): avc: denied { setattr } for pid=31173 comm="syz.1.8721" name="PACKET" dev="sockfs" ino=282828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 552.945311][T31202] netlink: 'syz.1.8728': attribute type 5 has an invalid length. [ 552.948487][T31202] netlink: 'syz.1.8728': attribute type 6 has an invalid length. [ 552.953435][T31202] lo speed is unknown, defaulting to 1000 [ 552.957324][T31202] lo speed is unknown, defaulting to 1000 [ 552.960484][T31202] lo speed is unknown, defaulting to 1000 [ 552.972051][T31202] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 552.986349][T31202] lo speed is unknown, defaulting to 1000 [ 552.989005][T31202] lo speed is unknown, defaulting to 1000 [ 552.991638][T31202] lo speed is unknown, defaulting to 1000 [ 552.994290][T31202] lo speed is unknown, defaulting to 1000 [ 553.001293][T31202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=384 sclass=netlink_route_socket pid=31202 comm=syz.1.8728 [ 553.005452][T31202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=31202 comm=syz.1.8728 [ 553.195078][T31210] macvlan2: entered promiscuous mode [ 553.196808][T31210] macvlan2: entered allmulticast mode [ 553.198960][T31210] bond4: entered promiscuous mode [ 553.201351][T31210] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.206275][T31210] bond4: left promiscuous mode [ 553.438566][ T1328] usb 14-1: new low-speed USB device number 20 using dummy_hcd [ 553.504342][T31270] tmpfs: Bad value for 'huge' [ 553.510553][ T40] audit: type=1326 audit(1766307297.204:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.8737" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38be18f7c9 code=0x0 [ 553.519130][ T40] audit: type=1400 audit(1766307297.204:3276): avc: denied { setattr } for pid=31271 comm="syz.1.8738" path="socket:[280557]" dev="sockfs" ino=280557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 553.572462][T31274] syzkaller0: entered promiscuous mode [ 553.574298][T31274] syzkaller0: entered allmulticast mode [ 553.622053][ T1328] usb 14-1: config 83 has an invalid interface number: 110 but max is 1 [ 553.625284][ T1328] usb 14-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 553.628041][ T1328] usb 14-1: config 83 has an invalid descriptor of length 1, skipping remainder of the config [ 553.631730][ T1328] usb 14-1: config 83 has 1 interface, different from the descriptor's value: 2 [ 553.634579][ T1328] usb 14-1: config 83 has no interface number 0 [ 553.636637][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0xD has invalid maxpacket 23765, setting to 8 [ 553.640084][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0xA is Bulk; changing to Interrupt [ 553.643892][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 8 [ 553.647355][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 553.650501][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 8 [ 553.654271][ T1328] usb 14-1: config 83 interface 110 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 8 [ 553.657679][ T1328] usb 14-1: config 83 interface 110 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 553.661807][ T1328] usb 14-1: config 83 interface 110 has no altsetting 0 [ 553.772169][T31284] fuse: Bad value for 'fd' [ 553.775789][T31285] fuse: Bad value for 'fd' [ 554.638438][ T5938] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 556.382999][ T1328] usb 14-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=13.a0 [ 556.387280][ T1328] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.395106][ T1328] usb 14-1: can't set config #83, error -71 [ 556.398784][ T1328] usb 14-1: USB disconnect, device number 20 [ 556.457853][T31348] kvm: pic: non byte read [ 556.461865][T31348] kvm: pic: level sensitive irq not supported [ 556.462224][T31348] kvm: pic: non byte read [ 556.468627][T31348] kvm: pic: level sensitive irq not supported [ 556.468974][T31348] kvm: pic: non byte read [ 556.474900][T31348] kvm: pic: level sensitive irq not supported [ 556.475478][T31348] kvm: pic: non byte read [ 556.481243][T31348] kvm: pic: level sensitive irq not supported [ 556.481571][T31348] kvm: pic: non byte read [ 556.487444][T31348] kvm: pic: level sensitive irq not supported [ 556.487772][T31348] kvm: pic: non byte read [ 556.493502][T31348] kvm: pic: level sensitive irq not supported [ 556.493824][T31348] kvm: pic: non byte read [ 556.499706][T31348] kvm: pic: level sensitive irq not supported [ 556.500037][T31348] kvm: pic: non byte read [ 556.505936][T31348] kvm: pic: level sensitive irq not supported [ 556.506251][T31348] kvm: pic: non byte read [ 557.118530][T31380] __nla_validate_parse: 9 callbacks suppressed [ 557.118546][T31380] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8772'. [ 557.207847][T31387] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8775'. [ 557.256285][T31389] [U] [ 557.257701][T31389] [U] [ 557.258869][T31389] [U] [ 557.260106][T31389] [U] [ 557.261332][T31389] [U] [ 557.262553][T31389] [U] [ 557.263763][T31389] [U] [ 557.264893][T31389] [U] [ 557.268636][T31389] [U] [ 557.269851][T31389] [U] [ 557.271018][T31389] [U] [ 557.272182][T31389] [U] [ 557.273387][T31389] [U] [ 557.274561][T31389] [U] [ 557.275703][T31389] [U] [ 557.276879][T31389] [U] [ 557.278919][T31389] [U] [ 557.280115][T31389] [U] [ 557.281297][T31389] [U] [ 557.282504][T31389] [U] [ 557.284074][T31389] [U] [ 557.285521][T31389] [U] [ 557.286749][T31389] [U] [ 557.288002][T31389] [U] [ 557.289385][T31389] [U] [ 557.290664][T31389] [U] [ 557.291881][T31389] [U] [ 557.293193][T31389] [U] [ 557.294410][T31389] [U] [ 557.295639][T31389] [U] [ 557.296867][T31389] [U] [ 557.298067][T31389] [U] [ 557.299393][T31389] [U] [ 557.300708][T31389] [U] [ 557.302328][T31389] [U] [ 557.303872][T31389] [U] [ 557.305367][T31389] [U] [ 557.306554][T31389] [U] [ 557.307980][T31389] [U] [ 557.309185][T31389] [U] [ 557.311078][T31389] [U] [ 557.312634][T31389] [U] [ 557.313802][T31389] [U] [ 557.314967][T31389] [U] [ 557.316285][T31389] [U] [ 557.317485][T31389] [U] [ 557.318647][T31389] [U] [ 557.319808][T31389] [U] [ 557.321370][T31389] [U] [ 557.322614][T31389] [U] [ 557.323823][T31389] [U] [ 557.325047][T31389] [U] [ 557.326333][T31389] [U] [ 557.327569][T31389] [U] [ 557.328795][T31389] [U] [ 557.330041][T31389] [U] [ 557.332321][T31389] [U] [ 557.333558][T31389] [U] [ 557.334733][T31389] [U] [ 557.335919][T31389] [U] [ 557.337302][T31389] [U] [ 557.338545][T31389] [U] [ 557.339766][T31389] [U] [ 557.341006][T31389] [U] [ 557.342940][T31389] [U] [ 557.344155][T31389] [U] [ 557.345376][T31389] [U] [ 557.346564][T31389] [U] [ 557.347830][T31389] [U] [ 557.349024][T31389] [U] [ 557.350202][T31389] [U] [ 557.351368][T31389] [U] [ 557.353306][T31389] [U] [ 557.354208][T31389] [U] [ 557.355096][T31389] [U] [ 557.355978][T31389] [U] [ 557.356995][T31389] [U] [ 557.358190][T31389] [U] [ 557.359137][T31389] [U] [ 557.360035][T31389] [U] [ 557.361007][T31389] [U] [ 557.361888][T31389] [U] [ 557.362844][T31389] [U] [ 557.363728][T31389] [U] [ 557.370780][T31389] [U] [ 557.371866][T31389] [U] [ 557.372787][T31389] [U] [ 557.373609][T31389] [U] [ 557.374894][T31389] [U] [ 557.375793][T31389] [U] [ 557.376899][T31389] [U] [ 557.377978][T31389] [U] [ 557.379114][T31389] [U] [ 557.380265][T31389] [U] [ 557.381436][T31389] [U] [ 557.382595][T31389] [U] [ 557.383791][T31389] [U] [ 557.384959][T31389] [U] [ 557.386250][T31389] [U] [ 557.387407][T31389] [U] [ 557.392199][T31389] [U] [ 557.393452][T31389] [U] [ 557.394629][T31389] [U] [ 557.395776][T31389] [U] [ 557.397100][T31389] [U] [ 557.398011][T31389] [U] [ 557.398904][T31389] [U] [ 557.400013][T31389] [U] [ 557.401198][T31389] [U] [ 557.402098][T31389] [U] [ 557.403074][T31389] [U] [ 557.404163][T31389] [U] [ 557.405110][T31389] [U] [ 557.406087][T31389] [U] [ 557.406971][T31389] [U] [ 557.407863][T31389] [U] [ 557.408903][T31389] [U] [ 557.409797][T31389] [U] [ 557.410774][T31389] [U] [ 557.411725][T31389] [U] [ 557.412758][T31389] [U] [ 557.413704][T31389] [U] [ 557.414601][T31389] [U] [ 557.415730][T31389] [U] [ 557.426731][T31389] [U] [ 557.427883][T31389] [U] [ 557.429020][T31389] [U] [ 557.433627][T31388] [U] [ 557.557700][T31429] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 557.561049][T31429] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 557.763660][T31452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8793'. [ 557.838977][T31457] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8795'. [ 557.859389][T31459] netlink: 'syz.2.8796': attribute type 1 has an invalid length. [ 557.884617][T31459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.895754][T31459] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 558.100954][T31506] team0: Device gtp0 is up. Set it down before adding it as a team port [ 558.388066][T31527] nbd: must specify an index to disconnect [ 558.948860][T31542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.951598][T31542] IPv6: NLM_F_CREATE should be set when creating new route [ 559.110773][T31542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.124254][T31542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.197714][T31542] veth0_macvtap: left allmulticast mode [ 559.305541][T21748] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.315215][T21748] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.318784][T21748] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.322096][T21748] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.325170][T21748] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.327924][T21748] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.330803][T21748] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.333953][T21748] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.380246][T31553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8810'. [ 559.385293][T31553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8810'. [ 559.421168][T31555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8811'. [ 559.502929][ T40] audit: type=1400 audit(1766307302.806:3277): avc: denied { lock } for pid=31556 comm="syz.1.8812" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 559.511036][ T40] audit: type=1400 audit(1766307302.806:3278): avc: denied { read } for pid=31561 comm="syz.2.8814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 559.654336][T31573] Cannot find add_set index 0 as target [ 560.317981][T31593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8825'. [ 560.322476][T31593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8825'. [ 560.333823][T31593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=31593 comm=syz.1.8825 [ 560.357429][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.364768][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.369650][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.375710][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.380647][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.404236][T31607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8827'. [ 560.404846][T31595] lo speed is unknown, defaulting to 1000 [ 560.569517][T31595] chnl_net:caif_netlink_parms(): no params data found [ 560.667766][T31595] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.670743][T31595] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.673816][T31595] bridge_slave_0: entered allmulticast mode [ 560.677796][T31595] bridge_slave_0: entered promiscuous mode [ 560.684042][T31595] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.686860][T31595] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.690022][T31595] bridge_slave_1: entered allmulticast mode [ 560.693731][T31595] bridge_slave_1: entered promiscuous mode [ 560.708158][ T40] audit: type=1400 audit(1766307303.928:3279): avc: denied { listen } for pid=31732 comm="syz.2.8834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.718775][T31595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.726017][T31595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.751076][T31595] team0: Port device team_slave_0 added [ 560.756068][T31595] team0: Port device team_slave_1 added [ 560.776732][T31595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.779994][T31595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.790945][T31595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.796780][T31595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.799541][T31595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.810242][T31595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.842757][T31595] hsr_slave_0: entered promiscuous mode [ 560.845483][T31595] hsr_slave_1: entered promiscuous mode [ 560.847942][T31595] debugfs: 'hsr0' already exists in 'hsr' [ 560.850963][T31595] Cannot create hsr debugfs directory [ 561.726695][T31942] netlink: 'syz.9.8850': attribute type 1 has an invalid length. [ 561.828919][ T40] audit: type=1400 audit(1766307304.985:3280): avc: denied { ioctl } for pid=31956 comm="syz.1.8853" path="socket:[288555]" dev="sockfs" ino=288555 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 561.867278][T31957] veth1_to_batadv: entered promiscuous mode [ 561.872918][ T40] audit: type=1400 audit(1766307305.022:3281): avc: denied { setattr } for pid=31944 comm="syz.9.8851" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 562.115130][T31595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.122102][T31595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 562.127215][T31595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 562.140673][T31595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.212817][T31595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.250933][T31595] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.258543][T21749] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.260957][T21749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.269379][T21747] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.272673][T21747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.475111][T32059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 562.481246][T31595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.538035][ T5936] Bluetooth: hci1: command tx timeout [ 562.718514][T31595] veth0_vlan: entered promiscuous mode [ 562.723989][T31595] veth1_vlan: entered promiscuous mode [ 562.747275][T31595] veth0_macvtap: entered promiscuous mode [ 562.753101][T31595] veth1_macvtap: entered promiscuous mode [ 562.767278][T31595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.767601][T32102] __nla_validate_parse: 5 callbacks suppressed [ 562.767614][T32102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8877'. [ 562.775695][T31595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.778880][ T40] audit: type=1400 audit(1766307305.873:3282): avc: denied { read } for pid=32101 comm="syz.2.8877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 562.784506][T21748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.791494][T21748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.800050][T21746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.803674][T21746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.808076][ T6678] libceph: connect (1)[c::]:6789 error -101 [ 562.810741][ T6678] libceph: mon0 (1)[c::]:6789 connect error [ 562.859185][T32104] ceph: No mds server is up or the cluster is laggy [ 562.907683][T17922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.911058][T17922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.936693][T21746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.944267][T21746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.023184][T32148] overlayfs: failed to clone lowerpath [ 563.027094][T32148] overlayfs: failed to clone lowerpath [ 563.056553][T32151] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 563.058717][T32151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 563.069736][T32151] vhci_hcd vhci_hcd.0: Device attached [ 563.074851][T32139] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 563.077611][T32139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 563.080736][T32139] vhci_hcd vhci_hcd.0: Device attached [ 563.182720][T32154] vhci_hcd: connection closed [ 563.182866][T32160] vhci_hcd: connection closed [ 563.187114][T21749] vhci_hcd vhci_hcd.9: stop threads [ 563.193707][T21749] vhci_hcd vhci_hcd.9: release socket [ 563.196118][T21749] vhci_hcd vhci_hcd.9: disconnect device [ 563.198680][T21749] vhci_hcd vhci_hcd.9: stop threads [ 563.207972][T21749] vhci_hcd vhci_hcd.9: release socket [ 563.210389][T21749] vhci_hcd vhci_hcd.9: disconnect device [ 563.275443][T13674] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 563.611302][T32234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58841 sclass=netlink_route_socket pid=32234 comm=syz.2.8908 [ 563.735963][T32244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8911'. [ 564.355557][ T34] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 564.434855][ T40] audit: type=1400 audit(1766307307.416:3283): avc: denied { connect } for pid=32318 comm="syz.2.8933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 564.503980][T32324] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 564.515897][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 564.518814][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 564.522014][ T34] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.525790][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.530195][ T34] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 564.533258][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.538067][ T34] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 564.540460][ T5938] Bluetooth: hci2: hardware error 0x03 [ 564.541212][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.558386][ T6017] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 564.558719][ T34] usb 9-1: Product: syz [ 564.563469][ T34] usb 9-1: Manufacturer: syz [ 564.565398][ T34] usb 9-1: SerialNumber: syz [ 564.568999][ T34] usb 9-1: config 0 descriptor?? [ 564.705213][T32349] netlink: 'syz.1.8941': attribute type 10 has an invalid length. [ 564.709098][T32349] bridge0: port 3(syz_tun) entered disabled state [ 564.711488][T32349] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.714959][T32349] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.722932][T32349] bridge0: port 3(syz_tun) entered blocking state [ 564.725272][T32349] bridge0: port 3(syz_tun) entered forwarding state [ 564.727580][T32349] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.729758][T32349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.732312][T32349] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.734528][T32349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.740248][T32349] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 564.751604][ T6017] usb 14-1: Using ep0 maxpacket: 8 [ 564.756627][ T6017] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.761307][ T6017] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.765635][ T5936] Bluetooth: hci1: command tx timeout [ 564.768111][ T6017] usb 14-1: config 0 interface 0 has no altsetting 0 [ 564.770541][ T6017] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 564.774262][ T6017] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.778333][ T6017] usb 14-1: config 0 descriptor?? [ 564.801519][ T34] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input36 [ 564.807927][ T5323] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 564.815964][ T5323] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 564.820060][ T5323] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 564.823756][ T5323] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 564.839999][T32355] lo speed is unknown, defaulting to 1000 [ 565.012386][T32280] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.017799][ T40] audit: type=1400 audit(1766307307.959:3284): avc: denied { getopt } for pid=32279 comm="syz.4.8925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 565.096622][T32392] QAT: failed to copy from user. [ 565.215840][ T6017] hid_parser_main: 5 callbacks suppressed [ 565.215858][ T6017] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 565.222038][ T6017] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 565.225133][ T6017] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 565.233277][ T6017] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 565.236269][ T6017] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 565.239853][ T6017] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 565.263360][T32400] Cannot find add_set index 65532 as target [ 565.264830][T32399] Cannot find add_set index 65532 as target [ 565.306106][T13674] usb 9-1: USB disconnect, device number 25 [ 565.428699][ T6017] usb 14-1: USB disconnect, device number 21 [ 565.753758][T32440] xt_CT: No such helper "pptp" [ 566.058871][T32450] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8953'. [ 566.092089][T32453] xfrm1: entered allmulticast mode [ 566.194404][T32461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8957'. [ 566.201893][T32461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8957'. [ 566.206689][T32461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8957'. [ 566.210529][T32461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8957'. [ 566.227885][T32469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8961'. [ 566.231321][T32469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8961'. [ 566.264430][ T40] audit: type=1800 audit(1766307309.128:3285): pid=32473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8962" name="bus" dev="overlay" ino=117 res=0 errno=0 [ 566.276373][T32475] vcan0: tx address claim with different name [ 566.303188][ T40] audit: type=1400 audit(1766307309.175:3286): avc: denied { remount } for pid=32474 comm="syz.9.8964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 566.356414][ T40] audit: type=1400 audit(1766307309.221:3287): avc: denied { accept } for pid=32482 comm="syz.2.8967" path="socket:[292880]" dev="sockfs" ino=292880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 566.380795][ T40] audit: type=1400 audit(1766307309.240:3288): avc: denied { write } for pid=32482 comm="syz.2.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 566.486260][ T40] audit: type=1400 audit(1766307309.343:3289): avc: denied { read } for pid=32498 comm="syz.9.8972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 566.570273][T32508] 9pnet_virtio: no channels available for device 127.0.0.1 [ 566.581577][T32511] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8977'. [ 566.743706][ T5938] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 566.996656][ T5938] Bluetooth: hci1: command tx timeout [ 567.257097][T32439] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 567.577062][ T40] audit: type=1326 audit(1766307310.362:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32587 comm="syz.4.9000" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32958f7c9 code=0x0 [ 567.777792][T32608] netlink: 'syz.1.9006': attribute type 64 has an invalid length. [ 567.781192][T32608] netlink: 'syz.1.9006': attribute type 4 has an invalid length. [ 567.786427][T32608] tmpfs: Unknown parameter 'eöer' [ 567.914228][T32626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=32626 comm=syz.2.9013 [ 567.920788][T32626] netlink: 'syz.2.9013': attribute type 64 has an invalid length. [ 567.924240][T32626] netlink: 'syz.2.9013': attribute type 4 has an invalid length. [ 568.643056][T32638] __nla_validate_parse: 9 callbacks suppressed [ 568.643067][T32638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9017'. [ 568.653540][T32638] syzkaller1: entered promiscuous mode [ 568.656730][T32638] syzkaller1: entered allmulticast mode [ 568.908926][T32662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9023'. [ 568.913974][T32662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9023'. [ 569.097694][ T40] audit: type=1400 audit(1766307311.784:3291): avc: denied { create } for pid=32673 comm="syz.9.9026" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 569.124583][ T6017] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 569.156462][T32677] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9027'. [ 569.209961][ T5938] Bluetooth: hci1: command tx timeout [ 569.297040][ T6017] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12576, setting to 64 [ 569.302390][ T6017] usb 9-1: config 0 interface 0 has no altsetting 0 [ 569.313878][ T6017] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.318038][ T6017] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.321457][ T6017] usb 9-1: Product: syz [ 569.323269][ T6017] usb 9-1: Manufacturer: syz [ 569.325025][ T6017] usb 9-1: SerialNumber: syz [ 569.329525][ T6017] usb 9-1: config 0 descriptor?? [ 569.331653][T32651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.337217][ T6017] usb 9-1: selecting invalid altsetting 0 [ 569.400166][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9035'. [ 569.403816][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9035'. [ 569.432091][T32714] veth0_to_bond: entered allmulticast mode [ 569.551570][T32650] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 569.556730][ T6017] usb 9-1: USB disconnect, device number 26 [ 570.269815][ T40] audit: type=1400 audit(1766307312.878:3292): avc: denied { mounton } for pid=322 comm="syz.9.9060" path="/570/file0" dev="tmpfs" ino=2964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 570.309227][ T329] netlink: 72 bytes leftover after parsing attributes in process `syz.9.9062'. [ 570.354912][ T336] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 570.357325][ T336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 570.360048][ T336] vhci_hcd vhci_hcd.0: Device attached [ 570.451773][ T90] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 570.653460][ T6089] usb 56-1: SetAddress Request (2) to port 0 [ 570.655778][ T6089] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 571.261855][ T337] vhci_hcd: connection reset by peer [ 571.264994][T21746] vhci_hcd vhci_hcd.9: stop threads [ 571.267092][T21746] vhci_hcd vhci_hcd.9: release socket [ 571.272437][T21746] vhci_hcd vhci_hcd.9: disconnect device [ 571.305154][ T379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9073'. [ 571.352548][ T40] audit: type=1326 audit(1766307313.888:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=387 comm="syz.2.9077" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38be18f7c9 code=0x0 [ 571.656757][ T412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9084'. [ 571.665679][ T412] syzkaller1: entered promiscuous mode [ 571.668177][ T412] syzkaller1: entered allmulticast mode [ 571.817324][ T429] netlink: 'syz.1.9090': attribute type 7 has an invalid length. [ 571.871501][ T437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9093'. [ 572.312138][ T495] team0: Device gtp0 is up. Set it down before adding it as a team port [ 572.482183][ T6145] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 572.653306][ T6145] usb 6-1: Using ep0 maxpacket: 32 [ 572.656453][ T6145] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 572.660249][ T6145] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 572.664657][ T6145] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.669105][ T6145] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 572.676464][ T6145] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 572.680424][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.683789][ T6145] usb 6-1: Product: syz [ 572.687631][ T6145] usb 6-1: Manufacturer: syz [ 572.690530][ T6145] usb 6-1: SerialNumber: syz [ 572.703458][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 572.708050][ T6145] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input37 [ 572.931366][ T6145] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 572.934082][ T6145] (id 0x00) [ 573.018712][ T6145] rc_core: IR keymap rc-imon-pad not found [ 573.021181][ T6145] Registered IR keymap rc-empty [ 573.023220][ T6145] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 573.027066][ T6145] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 573.040562][ T6145] imon:send_packet: packet tx failed (-71) [ 573.059726][ T6145] imon 6-1:155.0: remote input dev register failed [ 573.063481][ T6145] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 573.083018][ T6145] imon 6-1:155.0: unable to initialize intf0, err 0 [ 573.085568][ T6145] imon:imon_probe: failed to initialize context! [ 573.087997][ T6145] imon 6-1:155.0: unable to register, err -19 [ 573.092648][ T6145] usb 6-1: USB disconnect, device number 39 [ 573.499565][ T599] syzkaller1: entered promiscuous mode [ 573.501903][ T599] syzkaller1: entered allmulticast mode [ 573.705951][ T5936] Bluetooth: hci1: hardware error 0x03 [ 573.760675][ T635] 9pnet_virtio: no channels available for device syz [ 573.789177][ T635] netlink: 'syz.4.9141': attribute type 1 has an invalid length. [ 573.797766][ T634] netlink: 'syz.4.9141': attribute type 1 has an invalid length. [ 573.947920][ T40] audit: type=1326 audit(1766307316.318:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.2.9143" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38be18f7c9 code=0x0 [ 574.052159][ T661] __nla_validate_parse: 3 callbacks suppressed [ 574.052171][ T661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9144'. [ 574.068904][ T661] syzkaller1: entered promiscuous mode [ 574.071385][ T661] syzkaller1: entered allmulticast mode [ 574.257015][ T40] audit: type=1400 audit(1766307316.599:3295): avc: denied { append } for pid=679 comm="syz.4.9148" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.349685][ T692] netlink: 'syz.4.9154': attribute type 1 has an invalid length. [ 574.381216][ T698] netlink: 'syz.1.9155': attribute type 2 has an invalid length. [ 574.384417][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9155'. [ 574.402522][ T699] xt_CT: No such helper "pptp" [ 574.678179][ T722] netlink: 'syz.4.9160': attribute type 1 has an invalid length. [ 574.681449][ T722] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 574.723302][ T724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9161'. [ 574.724350][ T40] audit: type=1400 audit(1766307317.038:3296): avc: denied { create } for pid=723 comm="syz.4.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 574.724658][ T725] gfs2: path_lookup on \\éƒ8< ‘Ô$®$‘&6n @ôMºò<ÖAÛ×¾Y@gÌÊ [ 574.724658][ T725] @£þ%ÉÅÄ–·b§R.£`fdÜ‹rBl{‚\¾A [ 574.724658][ T725] Í='ZŽ±Ãj$vïw–\\¢üã¸Çª returned error -2 [ 574.726271][ T724] openvswitch: netlink: Flow key attr not present in new flow. [ 574.965128][ T752] dlm: non-version read from control device 8224 [ 574.968137][ T752] dlm: no locking on control device [ 575.077682][ T40] audit: type=1326 audit(1766307317.375:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=762 comm="syz.4.9174" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32958f7c9 code=0x0 [ 575.265845][ T769] gtp0: entered promiscuous mode [ 575.268003][ T769] gtp0: entered allmulticast mode [ 575.271993][ T40] audit: type=1400 audit(1766307317.552:3298): avc: denied { read } for pid=768 comm="syz.1.9175" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 575.281451][ T40] audit: type=1400 audit(1766307317.552:3299): avc: denied { open } for pid=768 comm="syz.1.9175" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 575.291815][ T40] audit: type=1400 audit(1766307317.552:3300): avc: denied { ioctl } for pid=768 comm="syz.1.9175" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 575.568990][ T40] audit: type=1400 audit(1766307317.833:3301): avc: denied { create } for pid=780 comm="syz.1.9177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 575.572007][ T781] ceph: Path missing in source [ 575.575562][ T40] audit: type=1400 audit(1766307317.833:3302): avc: denied { setopt } for pid=780 comm="syz.1.9177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 575.682538][ T788] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 575.691624][ T788] comedi comedi0: comedi_bond: 3:0 3:1 attached, 48 channels from 2 devices [ 575.894374][ T5936] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 575.897361][ T5936] Bluetooth: hci1: hardware error 0x03 [ 576.064903][ T6089] usb 56-1: device descriptor read/8, error -110 [ 576.319095][ T876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9206'. [ 576.328556][ T874] can: request_module (can-proto-0) failed. [ 576.356282][ T876] syzkaller1: entered promiscuous mode [ 576.358485][ T876] syzkaller1: entered allmulticast mode [ 576.394210][ T889] lo speed is unknown, defaulting to 1000 [ 576.494425][ T6089] usb usb56-port1: attempt power cycle [ 576.555860][ T934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9217'. [ 576.567002][ T934] loop5: detected capacity change from 0 to 7 [ 576.633775][ T954] nfs: Unknown parameter '' [ 576.809315][ T954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9222'. [ 577.003794][ T1019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9235'. [ 577.049312][ T1027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9238'. [ 577.103001][ T6089] usb usb56-port1: unable to enumerate USB device [ 577.131107][ T1039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9243'. [ 577.140290][ T1039] syzkaller1: entered promiscuous mode [ 577.142744][ T1039] syzkaller1: entered allmulticast mode [ 577.289065][ T1059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9247'. [ 577.366424][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 577.366435][ T40] audit: type=1326 audit(1766307319.507:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1073 comm="syz.1.9252" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa837d8f7c9 code=0x0 [ 577.379644][ T1079] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 577.629402][ T1109] netlink: 'syz.4.9262': attribute type 3 has an invalid length. [ 578.118244][ T5936] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 578.120894][ T5936] Bluetooth: hci1: hardware error 0x03 [ 578.549683][ T40] audit: type=1326 audit(1766307320.619:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.2.9285" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38be18f7c9 code=0x0 [ 578.642439][ T5971] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 578.772441][ T1220] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 578.805091][ T5971] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12576, setting to 64 [ 578.808633][ T5971] usb 9-1: config 0 interface 0 has no altsetting 0 [ 578.812414][ T5971] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 578.815745][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 578.818504][ T5971] usb 9-1: Product: syz [ 578.820200][ T5971] usb 9-1: Manufacturer: syz [ 578.821808][ T5971] usb 9-1: SerialNumber: syz [ 578.826692][ T5971] usb 9-1: config 0 descriptor?? [ 578.829711][ T1189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 578.836580][ T5971] usb 9-1: selecting invalid altsetting 0 [ 578.848668][ T1231] nvme_fabrics: unknown parameter or missing value 'ELF9û' in ctrl creation request [ 579.024088][ T1249] syzkaller1: entered promiscuous mode [ 579.025900][ T1249] syzkaller1: entered allmulticast mode [ 579.049412][ T1186] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 579.052836][ T5971] usb 9-1: USB disconnect, device number 27 [ 579.485946][ T1284] __nla_validate_parse: 7 callbacks suppressed [ 579.485957][ T1284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9300'. [ 579.535121][ T40] audit: type=1400 audit(1766307321.536:3311): avc: denied { read } for pid=1287 comm="syz.1.9302" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 579.593199][ T1291] overlay: Unknown parameter 'dont_appraise' [ 579.613932][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9304'. [ 579.699401][ T40] audit: type=1400 audit(1766307321.694:3312): avc: denied { mounton } for pid=1294 comm="syz.4.9305" path="mnt:[4026532942]" dev="nsfs" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.827399][ T1304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9309'. [ 580.047955][ T1321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9314'. [ 580.103820][ T1325] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 580.232734][ T1336] netlink: 'syz.2.9320': attribute type 29 has an invalid length. [ 580.244608][ T1336] netlink: 'syz.2.9320': attribute type 29 has an invalid length. [ 580.332218][ T5936] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 580.421914][ T1288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.427626][ T1288] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 580.433210][ T688] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 580.435354][ T5940] Bluetooth: hci0: hardware error 0x03 [ 580.512132][ T40] audit: type=1400 audit(1766307322.452:3313): avc: denied { create } for pid=1351 comm="syz.9.9324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 580.525574][ T40] audit: type=1400 audit(1766307322.471:3314): avc: denied { create } for pid=1351 comm="syz.9.9324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 580.706487][ T5971] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 580.829977][ T1383] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9328'. [ 580.879148][ T5971] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 580.888480][ T5971] usb 9-1: config 0 interface 0 has no altsetting 0 [ 580.893392][ T5971] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 580.896335][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 580.900245][ T5971] usb 9-1: Product: syz [ 580.901815][ T5971] usb 9-1: Manufacturer: syz [ 580.903376][ T5971] usb 9-1: SerialNumber: syz [ 580.906369][ T5971] usb 9-1: config 0 descriptor?? [ 580.911255][ T5971] usb 9-1: selecting invalid altsetting 0 [ 580.947560][ T1399] xt_CT: No such helper "pptp" [ 581.133781][ T1328] usb 9-1: USB disconnect, device number 28 [ 581.197566][ T1429] lo speed is unknown, defaulting to 1000 [ 581.340847][ T5938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 581.348795][ T5938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.353492][ T5938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.357298][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.362811][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.392358][ T1461] lo speed is unknown, defaulting to 1000 [ 581.557943][ T1461] chnl_net:caif_netlink_parms(): no params data found [ 581.654678][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.657167][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.659891][ T1461] bridge_slave_0: entered allmulticast mode [ 581.663108][ T1461] bridge_slave_0: entered promiscuous mode [ 581.667765][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.671939][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.675049][ T1461] bridge_slave_1: entered allmulticast mode [ 581.678916][ T1461] bridge_slave_1: entered promiscuous mode [ 581.712713][ T1461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.728673][ T1461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.782512][T17917] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.785793][T17917] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.797099][ T1461] team0: Port device team_slave_0 added [ 581.801931][ T1461] team0: Port device team_slave_1 added [ 581.824546][ T1461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.827806][ T1461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.842043][ T1461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.848413][ T1461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.851655][ T1461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.863530][ T1461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.906892][ T1461] hsr_slave_0: entered promiscuous mode [ 581.909243][ T1461] hsr_slave_1: entered promiscuous mode [ 581.911493][ T1461] debugfs: 'hsr0' already exists in 'hsr' [ 581.913418][ T1461] Cannot create hsr debugfs directory [ 581.928216][T17917] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.931905][T17917] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.094399][T17917] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.098607][T17917] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.192733][T17917] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.197363][T17917] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.350451][T17917] bridge_slave_1: left allmulticast mode [ 582.352461][T17917] bridge_slave_1: left promiscuous mode [ 582.355638][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.361031][T17917] bridge_slave_0: left allmulticast mode [ 582.363081][T17917] bridge_slave_0: left promiscuous mode [ 582.365540][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.642274][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 582.646774][ T1389] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 582.648952][T30634] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 582.844353][T17917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.850130][T17917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.854776][T17917] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 582.861105][T17917] bond0 (unregistering): Released all slaves [ 582.865766][T17917] bond1 (unregistering): Released all slaves [ 582.965140][T17917] IPVS: stopping backup sync thread 27149 ... [ 583.039284][ T40] audit: type=1400 audit(1766307324.817:3315): avc: denied { create } for pid=1847 comm="syz.4.9369" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 583.047809][ T40] audit: type=1400 audit(1766307324.817:3316): avc: denied { read } for pid=1847 comm="syz.4.9369" name="file0" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 583.055110][ T40] audit: type=1400 audit(1766307324.817:3317): avc: denied { open } for pid=1847 comm="syz.4.9369" path="/127/file0" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 583.209485][ T1872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9375'. [ 583.277485][T13674] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 583.438073][T13674] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 583.442005][T13674] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.448347][T13674] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.452065][T13674] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 583.455640][T13674] usb 6-1: Product: syz [ 583.457426][T13674] usb 6-1: Manufacturer: syz [ 583.464519][T13674] usb 6-1: SerialNumber: syz [ 583.469146][T13674] usb 6-1: config 0 descriptor?? [ 583.474981][T13674] usb 6-1: selecting invalid altsetting 0 [ 583.509272][ T1917] openvswitch: netlink: Message has 551 unknown bytes. [ 583.531097][T17917] hsr_slave_0: left promiscuous mode [ 583.541026][T17917] hsr_slave_1: left promiscuous mode [ 583.543878][T17917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.546190][T17917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.558655][T17917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.561903][T17917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.583467][ T5940] Bluetooth: hci5: command tx timeout [ 583.592543][T17917] veth0_macvtap: left promiscuous mode [ 583.595004][T17917] veth1_vlan: left promiscuous mode [ 583.597298][T17917] veth0_vlan: left promiscuous mode [ 583.662061][T17917] pim6reg (unregistering): left allmulticast mode [ 583.689642][T13674] usb 6-1: USB disconnect, device number 40 [ 583.867001][ T1942] ntfs3(nullb0): Primary boot signature is not NTFS. [ 583.888188][ T1942] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 584.040174][T17917] team0 (unregistering): Port device team_slave_1 removed [ 584.069729][T17917] team0 (unregistering): Port device team_slave_0 removed [ 584.455117][ T1461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 584.473604][ T1461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 584.481311][ T1461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 584.517299][ T1461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 584.523762][ T1972] syzkaller1: entered promiscuous mode [ 584.526302][ T1972] syzkaller1: entered allmulticast mode [ 584.611911][ T1461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.621617][ T1461] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.630176][T21749] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.632748][T21749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.650412][T21754] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.653007][T21754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.800518][ T1461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.891455][ T2026] lo speed is unknown, defaulting to 1000 [ 584.946677][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9408'. [ 585.002786][ T1461] veth0_vlan: entered promiscuous mode [ 585.010565][ T2062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9409'. [ 585.011425][ T1461] veth1_vlan: entered promiscuous mode [ 585.030300][ T1461] veth0_macvtap: entered promiscuous mode [ 585.036363][ T1461] veth1_macvtap: entered promiscuous mode [ 585.042007][ T2064] xt_CT: No such helper "pptp" [ 585.048307][ T1461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.105478][T17917] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.123609][ T1461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.131028][ T90] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.133949][ T90] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.171229][ T2075] SELinux: policydb magic number 0x1f does not match expected magic number 0xf97cff8c [ 585.175181][ T2075] SELinux: failed to load policy [ 585.200352][T17917] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.207549][ T90] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.213040][ T90] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.253044][T21745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.259140][T21745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.282863][T21745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.287371][T21745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.320087][T17917] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.360644][ T2106] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9338'. [ 585.414244][ T2111] xt_CT: No such helper "pptp" [ 585.418135][T17917] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.428823][ T2114] syzkaller1: entered promiscuous mode [ 585.430572][ T2114] syzkaller1: entered allmulticast mode [ 585.610816][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.625864][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.630936][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.635998][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.640143][T17917] bridge_slave_1: left allmulticast mode [ 585.642894][T17917] bridge_slave_1: left promiscuous mode [ 585.644880][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.645052][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.652291][T17917] bridge_slave_0: left allmulticast mode [ 585.654763][T17917] bridge_slave_0: left promiscuous mode [ 585.669150][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.732050][ T2163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9428'. [ 585.818740][ T5936] Bluetooth: hci5: command tx timeout [ 585.992839][T17917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.997290][T17917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.001146][T17917] bond0 (unregistering): Released all slaves [ 586.040358][ T2143] lo speed is unknown, defaulting to 1000 [ 586.054125][ T2170] xt_CT: No such helper "pptp" [ 586.068525][ T2193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9431'. [ 586.187516][ T2143] chnl_net:caif_netlink_parms(): no params data found [ 586.320152][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.323160][ T2143] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.326000][ T2143] bridge_slave_0: entered allmulticast mode [ 586.329903][ T2143] bridge_slave_0: entered promiscuous mode [ 586.344299][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.347165][ T2143] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.349992][ T2143] bridge_slave_1: entered allmulticast mode [ 586.353740][ T2143] bridge_slave_1: entered promiscuous mode [ 586.360115][T17917] hsr_slave_0: left promiscuous mode [ 586.362583][T17917] hsr_slave_1: left promiscuous mode [ 586.364797][T17917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.367209][T17917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.370333][T17917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.372747][T17917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.384872][T17917] veth1_macvtap: left promiscuous mode [ 586.387183][T17917] veth0_macvtap: left promiscuous mode [ 586.389021][T17917] veth1_vlan: left promiscuous mode [ 586.390717][T17917] veth0_vlan: left promiscuous mode [ 586.767154][T17917] team0 (unregistering): Port device team_slave_1 removed [ 586.799088][T17917] team0 (unregistering): Port device team_slave_0 removed [ 587.146292][ T2143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.151155][ T2143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.184022][ T2143] team0: Port device team_slave_0 added [ 587.188488][ T2143] team0: Port device team_slave_1 added [ 587.230922][ T2143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.233982][ T2143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.245288][ T2143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.251526][ T2143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.254805][ T2143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.265024][ T2143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.297630][ T2143] hsr_slave_0: entered promiscuous mode [ 587.300158][ T2143] hsr_slave_1: entered promiscuous mode [ 587.698994][ T5936] Bluetooth: hci5: hardware error 0x03 [ 587.786331][T17917] bridge_slave_1: left allmulticast mode [ 587.789389][T17917] bridge_slave_1: left promiscuous mode [ 587.791293][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.792631][ T2501] xt_CT: No such helper "pptp" [ 587.796476][T17917] bridge_slave_0: left allmulticast mode [ 587.799747][T17917] bridge_slave_0: left promiscuous mode [ 587.801669][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.876526][ T5940] Bluetooth: hci3: command tx timeout [ 587.907336][ T2514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9446'. [ 588.392654][T17917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.398050][T17917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.401482][T17917] bond0 (unregistering): Released all slaves [ 588.464594][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.496412][T17917] bond1 (unregistering): Released all slaves [ 588.574946][ T2143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 588.594589][ T2143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 588.601115][ T2143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 588.618602][T17917] tipc: Left network mode [ 588.619036][ T2143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 588.729946][ T2143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.739118][ T2143] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.744091][T21746] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.746377][T21746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.755378][T21743] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.758154][T21743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.907430][ T2564] dlm: no locking on control device [ 588.910844][ T2564] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9453'. [ 588.912802][ T2143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.944536][ T2143] veth0_vlan: entered promiscuous mode [ 588.955314][ T2143] veth1_vlan: entered promiscuous mode [ 588.968909][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.973023][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.977791][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.985597][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.989159][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.994053][ T2143] veth0_macvtap: entered promiscuous mode [ 589.000593][ T2143] veth1_macvtap: entered promiscuous mode [ 589.021111][ T2143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.026821][ T2143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.037265][ T2573] lo speed is unknown, defaulting to 1000 [ 589.044998][T21754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.051180][ T40] audit: type=1326 audit(1766307331.436:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.1.9454" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa837d8f7c9 code=0x0 [ 589.069152][T21754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.073165][T21754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.082187][T21754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.196900][T21745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.202295][T21745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.215700][T21754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.220126][T21754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.226568][ T2573] chnl_net:caif_netlink_parms(): no params data found [ 589.358736][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.362308][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.364436][ T40] audit: type=1326 audit(1766307331.726:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.9.9456" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cc078f7c9 code=0x0 [ 589.365687][ T2573] bridge_slave_0: entered allmulticast mode [ 589.382060][ T2573] bridge_slave_0: entered promiscuous mode [ 589.387419][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.390923][T17917] ------------[ cut here ]------------ [ 589.391082][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.392910][T17917] Have pending ack frames! [ 589.397819][ T2573] bridge_slave_1: entered allmulticast mode [ 589.397815][T17917] WARNING: net/mac80211/main.c:1712 at ieee80211_free_ack_frame+0x14/0x30, CPU#2: kworker/u32:18/17917 [ 589.397859][T17917] Modules linked in: [ 589.402645][ T2573] bridge_slave_1: entered promiscuous mode [ 589.404192][T17917] [ 589.409222][T17917] CPU: 2 UID: 0 PID: 17917 Comm: kworker/u32:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.412949][T17917] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc [ 589.414346][T17917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.417140][ T40] audit: type=1400 audit(1766307331.782:3320): avc: denied { write } for pid=5909 comm="syz-executor" path="pipe:[3477]" dev="pipefs" ino=3477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 589.418009][T17917] Workqueue: netns cleanup_net [ 589.428391][T17917] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30 [ 589.430536][T17917] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 e3 36 dc f6 48 8d 3d 7c 8d b5 05 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 38 02 5e fe 31 c0 [ 589.436688][T17917] RSP: 0018:ffffc90006db7820 EFLAGS: 00010293 [ 589.438612][T17917] RAX: 0000000000000000 RBX: ffff888058b84c80 RCX: ffffffff8b6d8cd3 [ 589.441107][T17917] RDX: ffff8880249924c0 RSI: ffffffff8ae2afad RDI: ffffffff90983d30 [ 589.441952][ T2573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.443591][T17917] RBP: ffff8880277dc030 R08: 0000000000000007 R09: 000000007fffffff [ 589.443600][T17917] R10: 0000000000000001 R11: 0000000000002ba1 R12: dffffc0000000000 [ 589.448856][ T2573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.449831][T17917] R13: ffffffff8ae2afa0 R14: 0000000080000000 R15: 0000000000000000 [ 589.458336][T17917] FS: 0000000000000000(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 589.461388][T17917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.463466][T17917] CR2: 000000110c343d6a CR3: 0000000026363000 CR4: 0000000000352ef0 [ 589.466090][T17917] Call Trace: [ 589.467163][T17917] [ 589.468116][T17917] idr_for_each+0x143/0x270 [ 589.469560][T17917] ? __pfx_idr_for_each+0x10/0x10 [ 589.471150][T17917] ? kfree+0x2f8/0x6e0 [ 589.472481][T17917] ieee80211_free_hw+0x59/0x1d0 [ 589.474034][T17917] hwsim_exit_net+0x7d9/0x1590 [ 589.475555][T17917] ? __pfx_hwsim_exit_net+0x10/0x10 [ 589.477346][T17917] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 589.479072][T17917] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 589.480897][T17917] ? __pfx_hwsim_exit_net+0x10/0x10 [ 589.482562][T17917] ops_undo_list+0x2ee/0xab0 [ 589.484030][T17917] ? __pfx_ops_undo_list+0x10/0x10 [ 589.485641][T17917] ? cleanup_net+0x347/0x830 [ 589.487435][T17917] ? idr_destroy+0x62/0x2e0 [ 589.488891][T17917] cleanup_net+0x41b/0x830 [ 589.490293][T17917] ? __pfx_cleanup_net+0x10/0x10 [ 589.491808][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.493337][T17917] process_one_work+0x9ba/0x1b20 [ 589.494873][T17917] ? __pfx_cleanup_net+0x10/0x10 [ 589.496396][T17917] ? __pfx_process_one_work+0x10/0x10 [ 589.498108][T17917] ? assign_work+0x1a0/0x250 [ 589.499512][T17917] worker_thread+0x6c8/0xf10 [ 589.501248][T17917] ? __kthread_parkme+0x19e/0x250 [ 589.502813][T17917] ? __pfx_worker_thread+0x10/0x10 [ 589.504377][T17917] kthread+0x3c5/0x780 [ 589.505665][T17917] ? __pfx_kthread+0x10/0x10 [ 589.507124][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.508931][T17917] ? __pfx_kthread+0x10/0x10 [ 589.510425][T17917] ret_from_fork+0x983/0xb10 [ 589.512011][T17917] ? __pfx_ret_from_fork+0x10/0x10 [ 589.514110][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.515694][T17917] ? __switch_to+0x7af/0x10d0 [ 589.517316][T17917] ? __pfx_kthread+0x10/0x10 [ 589.518827][T17917] ret_from_fork_asm+0x1a/0x30 [ 589.520685][T17917] [ 589.521728][T17917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.524183][T17917] CPU: 2 UID: 0 PID: 17917 Comm: kworker/u32:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.527643][T17917] Tainted: [L]=SOFTLOCKUP [ 589.529192][T17917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 589.532736][T17917] Workqueue: netns cleanup_net [ 589.534262][T17917] Call Trace: [ 589.535454][T17917] [ 589.536491][T17917] dump_stack_lvl+0x3d/0x1f0 [ 589.538026][T17917] vpanic+0x640/0x6f0 [ 589.539302][T17917] ? ieee80211_free_ack_frame+0x14/0x30 [ 589.541198][T17917] panic+0xca/0xd0 [ 589.542482][T17917] ? __pfx_panic+0x10/0x10 [ 589.543907][T17917] ? check_panic_on_warn+0x1f/0xb0 [ 589.545596][T17917] check_panic_on_warn+0xab/0xb0 [ 589.547228][T17917] __warn+0x108/0x3c0 [ 589.548512][T17917] __report_bug+0x2a0/0x520 [ 589.549973][T17917] ? ieee80211_free_ack_frame+0x14/0x30 [ 589.551745][T17917] ? __pfx___report_bug+0x10/0x10 [ 589.553410][T17917] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.555066][T17917] ? ieee80211_free_ack_frame+0xd/0x30 [ 589.556793][T17917] ? idr_for_each+0x113/0x270 [ 589.558302][T17917] ? ieee80211_free_ack_frame+0x14/0x30 [ 589.560101][T17917] report_bug_entry+0xe1/0x290 [ 589.561616][T17917] ? ieee80211_free_ack_frame+0x14/0x30 [ 589.563475][T17917] handle_bug+0x18a/0x260 [ 589.564910][T17917] exc_invalid_op+0x17/0x50 [ 589.566446][T17917] asm_exc_invalid_op+0x1a/0x20 [ 589.568050][T17917] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30 [ 589.570030][T17917] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 e3 36 dc f6 48 8d 3d 7c 8d b5 05 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 38 02 5e fe 31 c0 [ 589.576100][T17917] RSP: 0018:ffffc90006db7820 EFLAGS: 00010293 [ 589.578123][T17917] RAX: 0000000000000000 RBX: ffff888058b84c80 RCX: ffffffff8b6d8cd3 [ 589.580763][T17917] RDX: ffff8880249924c0 RSI: ffffffff8ae2afad RDI: ffffffff90983d30 [ 589.583293][T17917] RBP: ffff8880277dc030 R08: 0000000000000007 R09: 000000007fffffff [ 589.585823][T17917] R10: 0000000000000001 R11: 0000000000002ba1 R12: dffffc0000000000 [ 589.588319][T17917] R13: ffffffff8ae2afa0 R14: 0000000080000000 R15: 0000000000000000 [ 589.590802][T17917] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 589.592775][T17917] ? idr_for_each+0x113/0x270 [ 589.594288][T17917] ? ieee80211_free_ack_frame+0xd/0x30 [ 589.596001][T17917] idr_for_each+0x143/0x270 [ 589.597512][T17917] ? __pfx_idr_for_each+0x10/0x10 [ 589.599165][T17917] ? kfree+0x2f8/0x6e0 [ 589.600475][T17917] ieee80211_free_hw+0x59/0x1d0 [ 589.602030][T17917] hwsim_exit_net+0x7d9/0x1590 [ 589.603573][T17917] ? __pfx_hwsim_exit_net+0x10/0x10 [ 589.605240][T17917] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 589.606916][T17917] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 589.608736][T17917] ? __pfx_hwsim_exit_net+0x10/0x10 [ 589.610390][T17917] ops_undo_list+0x2ee/0xab0 [ 589.611861][T17917] ? __pfx_ops_undo_list+0x10/0x10 [ 589.613510][T17917] ? cleanup_net+0x347/0x830 [ 589.614966][T17917] ? idr_destroy+0x62/0x2e0 [ 589.616443][T17917] cleanup_net+0x41b/0x830 [ 589.617874][T17917] ? __pfx_cleanup_net+0x10/0x10 [ 589.619439][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.621044][T17917] process_one_work+0x9ba/0x1b20 [ 589.622617][T17917] ? __pfx_cleanup_net+0x10/0x10 [ 589.624281][T17917] ? __pfx_process_one_work+0x10/0x10 [ 589.625968][T17917] ? assign_work+0x1a0/0x250 [ 589.627465][T17917] worker_thread+0x6c8/0xf10 [ 589.628943][T17917] ? __kthread_parkme+0x19e/0x250 [ 589.630542][T17917] ? __pfx_worker_thread+0x10/0x10 [ 589.632304][T17917] kthread+0x3c5/0x780 [ 589.633699][T17917] ? __pfx_kthread+0x10/0x10 [ 589.635184][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.636711][T17917] ? __pfx_kthread+0x10/0x10 [ 589.638183][T17917] ret_from_fork+0x983/0xb10 [ 589.639646][T17917] ? __pfx_ret_from_fork+0x10/0x10 [ 589.641268][T17917] ? rcu_is_watching+0x12/0xc0 [ 589.642791][T17917] ? __switch_to+0x7af/0x10d0 [ 589.644295][T17917] ? __pfx_kthread+0x10/0x10 [ 589.645762][T17917] ret_from_fork_asm+0x1a/0x30 [ 589.647304][T17917] [ 589.648938][T17917] Kernel Offset: disabled [ 589.650303][T17917] Rebooting in 86400 seconds..