last executing test programs: 1m54.805447137s ago: executing program 0 (id=794): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0xa) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x401, 0x80, 0x5, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x10000, 0x40000, 0x5, 0x7f, 0x9, 0x1000000000400003, 0x1, 0x1002], 0x1, 0x287206}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0x4, 0x4b, '\x00', 0x1765}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) socket$unix(0x1, 0x5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}, 0x1, 0x0, 0x0, 0x3dc06331d0ffc133}, 0x0) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f00007e8000/0x4000)=nil, 0x4000}) userfaultfd(0x80000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0xffffffffffffff5f) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000c8d000/0x4000)=nil, 0x4000}, 0x1}) 1m54.739317319s ago: executing program 0 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x4593}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2204c038}, 0x0) 1m54.676780115s ago: executing program 0 (id=800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x420180, 0x0) socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f00000000c0)=[{r0, 0x100}, {r0}, {r1, 0xf523631979430caf}, {r1, 0x208}, {r0, 0x1000}, {r1, 0x82}], 0x6, 0xc00) io_uring_enter(r1, 0x54aa, 0x6e2, 0x30, &(0x7f0000000040), 0x8) getsockopt$inet6_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000080)=0x4f) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) 1m54.601153558s ago: executing program 0 (id=801): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000200)='./file1\x00') r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0xeb54, 0xc, 0xff00, 0x3e, 0x0, 0x6, 0xfffffffffffffffe, 0x9, 0xd304}) 1m53.77018201s ago: executing program 0 (id=811): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) (async) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) r7 = socket(0x18, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000400)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)=@multiplanar_overlay={0x2109, 0x2, 0x4, 0x40, 0x4, {}, {0x5, 0x8, 0x10, 0x8, 0xd, 0xa0, "09bb8c8c"}, 0x10c, 0x3, {&(0x7f0000000080)=[{0x10, 0x40, {0x9}, 0x3}, {0x1, 0x4, {0x9}}]}, 0xbc9e}) 1m53.491105871s ago: executing program 0 (id=814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x8081) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7ff5dbadfddfa697}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x40) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x40004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x162}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa0}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff8e}]}, 0x60}, 0x1, 0x0, 0x0, 0x2e04658e96526e7d}, 0xe3ac7819049069bb) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4020008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) (async) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/69, 0x45}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/47, 0x2f}], 0x3, &(0x7f00000009c0)=""/39, 0x27}, 0x100) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r5) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000c40)={@remote, 0x0}, &(0x7f0000000c80)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={@broadcast, @initdev, 0x0}, &(0x7f0000000d00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'gretap0\x00', &(0x7f0000000d40)={'sit0\x00', 0x0, 0x8, 0x80, 0x5, 0x7, {{0xe, 0x4, 0x0, 0x3a, 0x38, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @broadcast, {[@end, @end, @generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0x1d, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x0, [{@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e80)={@local, 0x0}, &(0x7f0000000ec0)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'tunl0\x00', 0x0, 0x1, 0x20, 0x900, 0x2, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x85, 0x0, 0x7, [0x8, 0x80000000, 0x8, 0x1, 0x7, 0xffffffd2]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x8, [{@loopback, 0xfe4}, {@rand_addr=0x64010102, 0x8001}, {@remote, 0x51}]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001300)={@loopback, 0x0}, &(0x7f0000001340)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001700)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001480)={0x240, r10, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4d82d5bb41dea0fe}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m53.439331941s ago: executing program 32 (id=814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x8081) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7ff5dbadfddfa697}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x40) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x40004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x162}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa0}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff8e}]}, 0x60}, 0x1, 0x0, 0x0, 0x2e04658e96526e7d}, 0xe3ac7819049069bb) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4020008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) (async) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/69, 0x45}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/47, 0x2f}], 0x3, &(0x7f00000009c0)=""/39, 0x27}, 0x100) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r5) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000c40)={@remote, 0x0}, &(0x7f0000000c80)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)={@broadcast, @initdev, 0x0}, &(0x7f0000000d00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'gretap0\x00', &(0x7f0000000d40)={'sit0\x00', 0x0, 0x8, 0x80, 0x5, 0x7, {{0xe, 0x4, 0x0, 0x3a, 0x38, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @broadcast, {[@end, @end, @generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0x1d, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x0, [{@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e80)={@local, 0x0}, &(0x7f0000000ec0)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'tunl0\x00', 0x0, 0x1, 0x20, 0x900, 0x2, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x85, 0x0, 0x7, [0x8, 0x80000000, 0x8, 0x1, 0x7, 0xffffffd2]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x8, [{@loopback, 0xfe4}, {@rand_addr=0x64010102, 0x8001}, {@remote, 0x51}]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001300)={@loopback, 0x0}, &(0x7f0000001340)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001700)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001480)={0x240, r10, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4d82d5bb41dea0fe}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m7.587170568s ago: executing program 3 (id=1304): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) pipe(&(0x7f0000000000)) 1m7.500748074s ago: executing program 3 (id=1305): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x4, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2c, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}}, 0x0) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x40) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x90}}, 0x30) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 1m7.499685859s ago: executing program 3 (id=1307): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1m7.425346432s ago: executing program 3 (id=1310): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') (async) r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$inet6(0xa, 0x80003, 0xff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 64) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/87, 0x57}], 0x3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff", @ANYRESOCT=r4], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec44a74d63090bc9101e92681800000069000b0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x28040000}, 0x4000000) 1m7.270483073s ago: executing program 3 (id=1311): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x1000001, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESHEX=r0]) (async) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe"], 0x24}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000008340)=@newtclass={0x14a4, 0x28, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x0, 0x1}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x1458, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xff, 0x3ff, 0x0, 0x80000001, 0x7fffffff, 0x3ff, 0x4, 0x7, 0x7, 0xffff, 0x3, 0x800, 0x80000001, 0x6, 0xd7, 0xffffffff, 0x3b09, 0x4, 0x7ff, 0xd7c6, 0x2, 0x1, 0x6f7, 0x5, 0x4, 0x10, 0x8, 0x7f, 0x4, 0x7, 0xd317, 0x4, 0x6, 0xfff, 0x100, 0x8001, 0x9, 0xd, 0x100, 0x4f1878fc, 0x1, 0x2, 0x6, 0x1ff, 0xe, 0xc2, 0x800, 0x3, 0x8, 0x437, 0x3, 0x2, 0x40, 0x4, 0x0, 0x8, 0x8, 0x5, 0x3b5c, 0x80000001, 0x7, 0xcc6, 0x1, 0x6, 0x2, 0x80, 0x2, 0x6, 0x7fff, 0x7f, 0x14000, 0x6, 0x5ccc16e8, 0x8, 0x5, 0x3, 0xfffffff7, 0x66a, 0x7, 0xd964, 0x7, 0x1, 0x2, 0x8, 0x0, 0x6, 0x0, 0x6, 0x4, 0x3, 0x50, 0x9, 0x80000001, 0x0, 0xfffffff9, 0x3, 0x1, 0x2, 0x6, 0x0, 0x0, 0x6, 0x2, 0x40, 0x6, 0xb, 0x8, 0x0, 0x7, 0x4, 0x3ff, 0x0, 0x19d8, 0x8, 0x5, 0x8, 0x6c, 0x707, 0x0, 0x400, 0x401, 0x4, 0x6, 0x5, 0x8, 0x77e, 0x1, 0x4, 0x2, 0x1, 0x2, 0x6, 0x0, 0xc6ec, 0x7, 0x1, 0x5, 0x284, 0x41ac83cf, 0x2, 0x2, 0x4, 0x8000, 0x3d, 0x3, 0x7, 0xa4, 0x7, 0xd0d, 0x6, 0x9, 0x3, 0x7, 0x5, 0xbb3d, 0x5, 0x89f, 0x0, 0x1000, 0x2, 0x0, 0x1, 0x7, 0x3, 0x8001, 0x1, 0x1, 0x8001, 0x7fff, 0x41d, 0xffffffff, 0x2c3, 0x400, 0x6, 0xb737, 0x37, 0xad, 0x5, 0x6, 0x4, 0x6, 0x9, 0x5, 0x4, 0x7, 0x7, 0x10000, 0x0, 0xfffffff7, 0x8, 0x4, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x4295, 0x0, 0x1, 0x2, 0x0, 0x1039, 0x4, 0x6, 0x5, 0x4, 0xffffffff, 0x0, 0x8, 0x9fe, 0x1, 0x1, 0x2, 0x4, 0x234a, 0xd8, 0x2, 0x7, 0x8, 0x7f, 0xb9b, 0x3, 0x6, 0x3c, 0x4, 0x4, 0x8, 0x10001, 0xb1, 0xb55b571, 0x3, 0x1, 0x7, 0xfd9, 0x9, 0x2b, 0x1000, 0x6, 0x8, 0x3, 0x7, 0xfffffffa, 0x8000, 0x6, 0x94d5, 0xf4, 0x21, 0x9, 0x1000, 0x4, 0x7ed7, 0x8f, 0x8, 0x7, 0x9, 0x42a]}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0xfffffff3, 0x4f6, 0x8, 0xfffffff0, 0x3, 0x5, 0x6, 0x6, 0x4, 0x7f, 0x9, 0x7, 0x3, 0x1, 0x5, 0x401, 0x61a, 0x8, 0x0, 0x4, 0x8, 0xa23d, 0x800, 0x9, 0xffffffff, 0x8, 0x2, 0x0, 0x2204, 0x2, 0x3, 0x7, 0x4, 0x1, 0x2, 0x1, 0x3, 0x8, 0x8000, 0x2, 0x3, 0x7, 0x0, 0x5, 0x0, 0x5, 0x7ff, 0x8, 0x7fffffff, 0xd, 0x2, 0x2, 0x3, 0x9, 0x2, 0x6, 0x1000, 0x2, 0x57d, 0x9, 0x4, 0x200, 0x1000, 0xfca, 0xe6, 0x3, 0x1, 0x8000, 0x1, 0x748, 0x9, 0x6, 0x5, 0x3, 0xfffffff8, 0x8, 0x81, 0x4, 0x400, 0x5, 0x10e, 0x7, 0x4, 0x6, 0x0, 0x3, 0x100, 0x9, 0x3, 0x788, 0x5, 0x7, 0x338, 0xed5, 0x4, 0x54d, 0x5, 0x1, 0x0, 0x1, 0x4, 0xc8, 0x767, 0x47, 0x4, 0x5, 0xcb, 0x254f, 0x10000, 0x5, 0x5, 0x5, 0x3, 0x2104, 0x7, 0x91a, 0x1, 0x400, 0xbdb5, 0x401, 0x7, 0xd, 0x6230, 0x8001, 0x400000, 0x1, 0x3, 0x3, 0x9, 0xa80e, 0x10, 0x7, 0xfffff000, 0x400, 0x9, 0x6158788c, 0x4, 0x7, 0x8, 0x226, 0x6, 0xe8f, 0x81, 0xd1c8, 0x5, 0x81, 0xdaa, 0x1, 0x9, 0x9, 0x10000, 0x1000, 0x2, 0x8000000, 0x100, 0x132000, 0x9, 0x9, 0x4, 0x1, 0x6, 0x3ff, 0x4, 0x0, 0x8, 0x6, 0xa, 0xecb2, 0x8, 0xbc9, 0x1, 0x7201, 0x7fffffff, 0x8, 0xb, 0x8, 0xbc54, 0xfffffc01, 0x80, 0x3, 0x7, 0x8, 0x1000, 0x4, 0x9, 0xe76, 0x81, 0x3, 0x6, 0x80, 0x1, 0x7, 0x11, 0xffffffff, 0x3, 0x5, 0x80000000, 0x80000001, 0x101, 0x0, 0x1, 0x80, 0xffffffff, 0xad2, 0x9, 0xffff, 0x1, 0x7d, 0x78, 0x5, 0xaafb, 0x29b, 0x5, 0x5, 0x3, 0x7ff, 0xab, 0x9, 0x4ac, 0x80000001, 0x1, 0x21, 0x4, 0x7, 0x2, 0x7, 0x7, 0xe39, 0x6, 0x3, 0xeb0, 0x5, 0x0, 0x9, 0x8, 0xe264, 0xf, 0x1, 0x2, 0x0, 0x4, 0x8, 0x8, 0x9, 0xffffffff, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0x1, 0x1, 0x3, 0x2, 0x9f]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x10000, 0x1178, 0x2, 0xfffffff9, 0x7953, 0x9, 0x40, 0x6, 0xffffffff, 0x3, 0x8, 0x200, 0x3, 0x40, 0x8000, 0xd, 0x4727, 0x5, 0xfffffffb, 0x4, 0x2, 0x8d, 0xffffda53, 0x8001, 0x8d, 0xfffffffe, 0xaecb, 0x4, 0x7ff, 0xfffffff7, 0x6, 0x0, 0x6, 0x3, 0x9, 0x3, 0x3, 0x101, 0x5, 0xffff, 0x100, 0xfffffeff, 0x6, 0x61da, 0x9, 0x62d1, 0x5, 0x2, 0x80, 0x7fff, 0x800, 0x5, 0x4, 0xe58, 0x4, 0x131, 0xec05, 0x9, 0x7, 0x6, 0x8a2, 0x9, 0x3, 0x2, 0x7, 0x2, 0x8, 0x7fff, 0x9, 0x40, 0x6, 0x1, 0x3ff, 0x1000, 0x4, 0x5, 0x4, 0xc, 0x6, 0x7ff, 0x1, 0xfffffff9, 0xb, 0xf, 0x1ff, 0xec7, 0x81, 0x0, 0xfffffffe, 0x4ffa25e, 0x3, 0x9, 0x6, 0x8, 0x6, 0x8, 0x0, 0x4, 0x2, 0x9, 0x8a, 0x2, 0x10001, 0x1, 0x1, 0x8001, 0xe1, 0xa, 0x800, 0xb, 0x5, 0x80000001, 0x8, 0x7, 0x21, 0x0, 0x80, 0x7, 0x9, 0x6adb, 0x4, 0x6, 0xffffffff, 0x76, 0xfffffffe, 0x8da1, 0xdd, 0x6, 0x1, 0x47dc, 0x4, 0x7, 0xfffffc00, 0x7, 0x0, 0xa77, 0x81, 0x800, 0x7, 0x5, 0xfc, 0x0, 0xc, 0x7, 0x5, 0x6, 0x3, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x2a, 0x8, 0xd, 0x1, 0x2, 0xfffc0000, 0x6, 0x4, 0x9, 0x7dbdac95, 0x1, 0x0, 0x51, 0x3, 0x3, 0x400, 0x2, 0x9, 0x0, 0xd5, 0x9, 0xfffffffc, 0x7f, 0x101, 0xd, 0x3, 0x4, 0x1, 0x2, 0x800, 0xd, 0x8001, 0x401, 0x40, 0x9, 0x5, 0x2, 0x464, 0x2, 0x0, 0x42, 0x261, 0x7, 0x7, 0x1, 0x2, 0x4, 0x6, 0x8, 0x0, 0x3, 0x2, 0x5088, 0x0, 0x8, 0x7ff, 0x373e, 0x7, 0x10, 0x969, 0x1, 0x7, 0x101, 0x5, 0x2, 0x5, 0x8, 0xeee8, 0x6, 0x7, 0x6, 0x7, 0xff, 0x8, 0x7fffffff, 0x6, 0x101, 0x4, 0x524, 0x8, 0xd, 0x4, 0x7fffffff, 0xc6, 0x0, 0x7, 0x480000, 0x0, 0xffffffff, 0x2, 0x5, 0xb, 0x799f, 0x2, 0x80, 0x8000, 0x80000001, 0x1, 0x77, 0x6, 0xfffffffc, 0x401, 0x3, 0x5]}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0xa44, 0x66, 0xfffffffd, 0x2, 0x0, 0xfffffff7, 0x4, 0x0, 0xb0, 0x99, 0x2, 0x0, 0x9, 0x8f, 0x0, 0xb, 0x0, 0xfffffff9, 0x7, 0x5, 0x8, 0xfffffff7, 0x6, 0x80, 0x4, 0x2, 0x800, 0x7, 0x32, 0x2, 0x0, 0x8, 0x7, 0x10000, 0xe6, 0x100, 0x400, 0x10, 0x8, 0x5, 0x6, 0x5, 0x4, 0x40, 0x0, 0x3ff, 0x3, 0x101, 0x8, 0x8, 0x7d, 0xfbb, 0x2c, 0x1, 0x5, 0x2, 0x2, 0x0, 0xa, 0x3fa, 0x6, 0x6, 0x3, 0x1, 0x3, 0x80000001, 0x2, 0x7, 0x10001, 0x9, 0x84, 0x1, 0x4, 0x6, 0x2, 0xad, 0x3, 0x4, 0x6, 0x386c, 0x0, 0x10, 0x5, 0xd, 0x57, 0x9, 0x4, 0x3, 0x0, 0x6, 0x2, 0x0, 0x5, 0x8, 0x1, 0x8, 0x2, 0x1, 0x0, 0x8, 0x165d43c4, 0x81, 0xfffffff7, 0x10000, 0x483, 0x8, 0x9, 0x5, 0x2, 0x2, 0x3, 0x4, 0x6, 0x0, 0x9, 0x1, 0x2, 0x9, 0x67a4, 0x0, 0x800, 0xc, 0x6, 0x7, 0x2980, 0x5, 0x3ff, 0x4, 0x6, 0xd, 0x7fffffff, 0x2, 0x1000, 0x8, 0x8, 0xd, 0x0, 0x3, 0x7b, 0x659e, 0x1000, 0x7fff, 0x5b62, 0x9, 0x9, 0xff, 0xff, 0x9, 0x800, 0xfff, 0x9, 0x7, 0x1, 0x9df, 0xf, 0x60000, 0x8, 0x4, 0xffff3dfb, 0x7, 0x8, 0x7fffffff, 0x9, 0x6, 0x7f, 0x8, 0x7ff, 0x9, 0xffffff00, 0xff, 0x0, 0x80000001, 0x10000, 0x0, 0x3, 0x2, 0x6, 0x5, 0x9, 0xb, 0x3, 0x1, 0x9, 0x6ad7, 0x7, 0x4f, 0xb, 0x5, 0x8aed, 0xef, 0x2, 0x4a2f, 0x3ff, 0x3, 0x8, 0x8, 0xe5, 0x7, 0x2, 0x7, 0x7ff, 0x80000000, 0xe0e, 0xfffffffe, 0x0, 0xcf79, 0x42, 0x80, 0x1, 0xcd3, 0x8000, 0x1a000000, 0x101, 0x0, 0x3, 0x10001, 0xae9, 0x3, 0x1000, 0x80000001, 0x0, 0x7af59c71, 0x401, 0x7fff, 0x6, 0x4, 0x10001, 0x1, 0x5, 0x9, 0xe, 0x40, 0x81, 0x9b78, 0xfffffeff, 0x3, 0x8, 0x200, 0x1, 0x244, 0x1, 0x4b1, 0x6, 0x2, 0x1000, 0x8000, 0x0, 0x9, 0x7, 0x14, 0x7ee8, 0x3, 0x0, 0x4, 0x8]}, @TCA_HTB_RATE64={0xc, 0x6, 0x25}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x0, 0xc6, 0x0, 0x1, 0xc73b}, {0xfd, 0x0, 0x81, 0x5, 0x5, 0x200}, 0x8, 0x7, 0x7f, 0x8001, 0x7}}, @TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x6, 0x8, 0x3d2, 0x1, 0x8, 0xfffffff1, 0x0, 0x9, 0x5, 0x9, 0x7, 0x10, 0x7f, 0x8, 0x1, 0xc, 0x6, 0x8, 0x37, 0x937, 0x10, 0x2780, 0x4, 0x400, 0x3, 0x7fff, 0x9, 0xcfa, 0xa0000, 0x2, 0x9, 0xfffffbff, 0x36c9, 0x3, 0x1, 0x8, 0x6, 0x8, 0x692f, 0x7, 0x3, 0xaff, 0x6, 0x8001, 0xfffffffd, 0x3, 0x5, 0x8, 0x10001, 0x8, 0x5, 0xfffffffa, 0x5, 0x40, 0x9, 0x6, 0xe, 0x5, 0x7, 0xeb, 0x0, 0x62bc, 0x5, 0xd, 0xfffffff7, 0x9, 0xffffff4f, 0x100, 0x2, 0x8, 0x401, 0xfffffffa, 0xce3, 0x53, 0x7, 0x1000, 0xbc, 0x0, 0x8, 0x7fff, 0x1000, 0x5, 0x1, 0x9, 0x9, 0x7, 0xff, 0x101, 0x2c, 0x6, 0x1, 0x1, 0xfffff800, 0x9, 0x3891d199, 0x5, 0x5, 0x37e, 0x7, 0x7fffffff, 0x5, 0x8, 0x3, 0x7fffffff, 0x10000, 0x4, 0x5, 0x5, 0x1ff800, 0x0, 0x0, 0xd0b, 0x2, 0x7f, 0x3, 0x4d, 0x7, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4cf, 0x62, 0xfffffffa, 0x0, 0xa, 0x1, 0x6, 0x6, 0x1ef, 0x9, 0x8, 0x9, 0x7fffffff, 0x1, 0x3, 0x4, 0x4, 0x4, 0x8, 0x3, 0xfffffffb, 0x7, 0x2, 0x140, 0x6, 0x1, 0x66e, 0xfffffff1, 0x3, 0xfffffffa, 0xffff, 0x0, 0x4, 0x4, 0x7fffffff, 0x9, 0x6, 0xdeb3, 0x6, 0x9, 0x8, 0x604d, 0x3, 0x30000000, 0x10000, 0x0, 0x7fff, 0x0, 0x3, 0x101, 0xe8, 0x7, 0x5, 0x2, 0x4, 0x2, 0x9, 0x8000, 0x6bcc, 0x7, 0x7f, 0x7, 0x4, 0x4, 0x9, 0x7ff, 0x6bce6e38, 0xfffffff9, 0xfffffff8, 0x4ae, 0x3, 0x4, 0x4, 0x10000, 0x8, 0x8, 0x3, 0x5, 0x2, 0xfffffffb, 0x6, 0xf, 0x0, 0x5, 0xf, 0x1, 0x80000000, 0x0, 0x5, 0xd, 0x5, 0x21909e61, 0x8, 0x251, 0x4, 0x10, 0x1, 0x1, 0x9, 0x3c9, 0x8, 0x9, 0x101, 0x9, 0x7, 0x2, 0x0, 0x9d67, 0x6, 0xfffffffb, 0x401, 0xff, 0x2, 0x1, 0x3, 0x7, 0x4, 0x0, 0x0, 0x0, 0xf3, 0x401, 0x8001, 0xffff4f61, 0x7, 0x4c, 0x9, 0x1c1, 0xfffffffb, 0x6, 0x2eab488, 0xfffffff9, 0x6]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @tclass_kind_options=@c_mq={0x7}]}, 0x14a4}}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r11, 0xc0405610, &(0x7f0000000080)={0x2}) (async) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x1a2) write$tcp_congestion(r12, &(0x7f0000000100)='reno\x00', 0x5) dup2(r12, r2) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)) 1m7.021314821s ago: executing program 3 (id=1312): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000300000000010de3e3a0e0c749e3d0055ae322b34116f0294deb24f952d54d59307cf08971e71563dd9d664b6fb0fea385c2e875abb92f2fc234f0af1b13851359851da5879872d53a253e8f758bc1164aaa7c359f4a61774eb14e8e438ad220bdeb363d287caf7ba00"/117, @ANYRES32=r3, @ANYBLOB="08002600b409000008002700000000000800a10006000000"], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r3, @ANYRES64=r3, @ANYRES32=r2], 0x4c}}, 0x0) 1m6.966582263s ago: executing program 33 (id=1312): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000300000000010de3e3a0e0c749e3d0055ae322b34116f0294deb24f952d54d59307cf08971e71563dd9d664b6fb0fea385c2e875abb92f2fc234f0af1b13851359851da5879872d53a253e8f758bc1164aaa7c359f4a61774eb14e8e438ad220bdeb363d287caf7ba00"/117, @ANYRES32=r3, @ANYBLOB="08002600b409000008002700000000000800a10006000000"], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r3, @ANYRES64=r3, @ANYRES32=r2], 0x4c}}, 0x0) 1m6.569403124s ago: executing program 4 (id=1320): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) io_uring_enter(r2, 0x2768, 0x6f50, 0x24, &(0x7f0000000000)={[0x1ff]}, 0x8) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 1m5.677073961s ago: executing program 4 (id=1322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x9, 0xa}}, 0x28) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x800) 1m5.626639853s ago: executing program 4 (id=1326): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$userns(r3, &(0x7f00000000c0)) sendto$inet6(r0, 0x0, 0x0, 0x240000d4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m5.53019134s ago: executing program 4 (id=1328): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m5.480528837s ago: executing program 4 (id=1330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x7, 0xfffffff8, {{0xd, 0x4, 0x0, 0x20, 0x34, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @local, {[@generic={0x7, 0xe, "395a231abb4e9126260d48b7"}, @rr={0x7, 0x7, 0x79, [@dev={0xac, 0x14, 0x14, 0x32}]}, @noop, @noop, @noop, @timestamp={0x44, 0x8, 0xde, 0x0, 0x2, [0x400]}]}}}}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00', 0x0}) (rerun: 32) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 32) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000180)=0xc4) (async, rerun: 32) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="000427bd7000ffdbdf2509000000380001801400020076657468305f746f5f6873720000000008000300020000000800030002000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="5800018008000300030000001400020076657468300000000000000000000000140002006e696376663000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="141e51a808000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000ffffffffffffff9900000008000300", @ANYRES32=r12, @ANYBLOB='(\x003'], 0x44}}, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1m3.830055032s ago: executing program 4 (id=1336): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x7f}, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r4, 0x80000000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, 0x0, &(0x7f0000ffa000/0x2000)=nil) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc044094}, 0x404c0c0) (async) fallocate(r0, 0x40, 0x2, 0x400003) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f0000001840)={0x1, 0x20000, 0xffffff5e, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x2, &(0x7f00000017c0)=[0x32c0000], 0x1, 0x0}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) 1m3.808634723s ago: executing program 34 (id=1336): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x7f}, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r4, 0x80000000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, 0x0, &(0x7f0000ffa000/0x2000)=nil) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc044094}, 0x404c0c0) (async) fallocate(r0, 0x40, 0x2, 0x400003) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f0000001840)={0x1, 0x20000, 0xffffff5e, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x2, &(0x7f00000017c0)=[0x32c0000], 0x1, 0x0}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) 57.340832408s ago: executing program 5 (id=1432): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0}) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01ccd6f75f48b0f13fadec1c180002"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, 0x0) r3 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) syslog(0xa, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xd41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x2000493, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x8a}, 0x7}, 0x1c, 0x0}}], 0xffffffffffffff5a, 0x1000c040) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="8b8ec7aabc443cd817a5fe787411faaac0c8f1ffd24987f0c85e04f8f33e4c313ddc6d16bc88bc5db7", 0x29}], 0x1}}], 0x1, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x1f0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x80, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x36f9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xac, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0xd, 0x2, 0x8, 0x10, 0x3, 0x10, 0x9, 0xd, 0x3, 0x10, 0x5, 0x0, 0x5, 0x4, 0x1], 0x1, [0x1, 0x7, 0xfff, 0x3, 0xc, 0x4, 0x9, 0x8, 0x6, 0xc, 0x2, 0x7ff, 0x0, 0xa, 0x1, 0x7], [0x27, 0x3, 0x7, 0x0, 0x4, 0x5, 0x3, 0x0, 0x5, 0x7, 0x800, 0x4, 0x1, 0x6, 0x2, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcee}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}]}, 0x1f0}}, 0x0) 57.140773789s ago: executing program 5 (id=1438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x14}, 0x4008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x14}, 0x4008090) (async) 57.135111137s ago: executing program 5 (id=1440): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, &(0x7f0000000500)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="740000001000090400000000df00000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000054001280110001006272696467655f736c617665000000003c000580050009000000000005001c00010000000500190002000000"], 0x74}}, 0x0) 57.050730153s ago: executing program 5 (id=1442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) read$FUSE(r1, &(0x7f0000001d40)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x2002, 0x0, 0x96) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, 0x0) syz_clone(0x6cf40c394eb5bf13, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$bt_hci(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 56.959881685s ago: executing program 5 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000004000000040000b14cf89cd67c707fa955c73f5b46ad9d241407efa5f73afe7cfbcb8c231bc62069cf83a50e84f1954d6e2a158c6d69293bfa00"/76, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008005) 56.611187105s ago: executing program 5 (id=1450): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ppoll(&(0x7f00000004c0)=[{r3, 0x1010}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 56.537693014s ago: executing program 35 (id=1450): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ppoll(&(0x7f00000004c0)=[{r3, 0x1010}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 42.572023824s ago: executing program 6 (id=1607): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) (async) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000007c0), 0x10) (async) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x71, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x4913, 0x770e, 0x0, 0x0, 0xfffffffffffffe92) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 42.081051463s ago: executing program 6 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000cc8da1b67da9ff01fbcf6ccb84e19f27db2159e946319192db6b2cf5", @ANYRES16=r3, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe51d}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf7d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) (async, rerun: 32) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 32) mknodat$loop(r5, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 64) unlink(&(0x7f0000000280)='./file1\x00') (rerun: 64) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) (async) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 42.031264704s ago: executing program 6 (id=1611): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r5 = socket(0x10, 0x803, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xeb116d03b51238a6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf1f, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x88, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5c, 0x2, [@TCA_BPF_ACT={0x58, 0x1, [@m_skbmod={0x54, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x8, 0x0, 0x0, 0x6}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x88}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 41.931336378s ago: executing program 6 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000280)) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)='\"', 0x1}], 0x1}}], 0x1, 0x4000805) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_uring_enter(r1, 0x2446, 0x7aae, 0x61, &(0x7f0000000240)={[0x3]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000380)="363c8f3f8a5d66571e583e7c88a8", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x301, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {0x9, 0xc}, {0xfff3, 0xe}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000000)="4e000000010040", 0x7) recvfrom$inet(r2, &(0x7f0000000140)=""/241, 0xf1, 0x10001, 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000280001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 41.079973119s ago: executing program 6 (id=1619): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x42400, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00ff0300000000000000000000000000000000002ed654297b7888564f32ae009076386598f2e07eb8ff7f33d79bdc4796a1895ddfdec9a4812162f7cefcf7cee4ad4331bf075798e23aea168f9b555df57e8248a8fececfb39a9fdca49052fdaeb7192df778e4af24a6f8b89980e42710f6dab5255b68921f53559fc400e8401020c9763c1939d55612dca28d3ca9fad1437ab785bc8a3abbaf59d0f08ac939e024cd8c8c5a7cbcba2abce1ef20", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000440)=ANY=[@ANYRES8=r7, @ANYBLOB="f45d6b5eef049087bf49e5ccd1cee34425d8c5dc0fe4a896374fa17095d7abaaeb112362a5a49bd1bc8fbca134e4b5f48fa43ab3a3ab08bdd085f4c3c98168dc30b776df3ed831ef90b39fb72a0e16f9405ad2c25708aa4d69023141ad97918b27d11a776f1650d3d7d848d23e60e18fec6413b1eaea0065f2f58edd04d28dfdc60501399b94f4baa897051ca9d70c015a7bfaa0dd21fea575e16a158ac0c96a04609ea3fb6221721252ea95353f61982665e3", @ANYBLOB="dba9a596d2c777e73dd50ebbe8db0e43f9f2956f990f577e6a519c323c145410e6764afc2f16d772f6cb03224278046445b11662cd16dfece7723cd7bdce1f659741bf15862a185cc1627b780fa7853f44496c98aa150c42d4151f66691b3fd2f779f6fd44ee181fe7ca813cd733a0b4a5ec0aaca1b2dd7fa8b7df9e005e2d4dbcd7aa8f656b9483e0f698cb872218b88034615716ae84d4e53cc72c52b8826949e572fcd017907e472da15ddb8b55a1709662fe4cdc75b01a9ffa37b4b2fb51d541d4404d00b8aedde0bf8efd3f228a3b21cd8c"], 0x0) read$FUSE(r3, &(0x7f0000002280)={0x2020}, 0x85b) 40.605766197s ago: executing program 6 (id=1625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="480100001a001307000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000000000000000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000000000000033000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000b10000"], 0x128}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x810087, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001240)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x3, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) fcntl$notify(r1, 0x402, 0x8000003d) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f00000002c0)) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000100)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d0c652c00cdf687fca646f16cb07dd3ba53ef9919089082e56f0cb6aade2aee8e8194f0347b896bb8"]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r5, 0x560b, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{}, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000010}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x3, 0x80, 0xfceb}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000, 0x2}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000001280), 0x10000, 0x10800) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x76}, [@ldst={0x0, 0x1, 0x2, 0xa, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x6c, '\x00', 0x0, @cgroup_skb}, 0x94) 25.639637447s ago: executing program 36 (id=1625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="480100001a001307000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000000000000000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000000000000033000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000b10000"], 0x128}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x810087, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001240)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x3, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) fcntl$notify(r1, 0x402, 0x8000003d) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f00000002c0)) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000100)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d0c652c00cdf687fca646f16cb07dd3ba53ef9919089082e56f0cb6aade2aee8e8194f0347b896bb8"]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r5, 0x560b, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{}, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000010}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x3, 0x80, 0xfceb}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000, 0x2}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000001280), 0x10000, 0x10800) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x76}, [@ldst={0x0, 0x1, 0x2, 0xa, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x6c, '\x00', 0x0, @cgroup_skb}, 0x94) 20.332652182s ago: executing program 8 (id=1761): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) accept4(r1, 0x0, 0x0, 0x400000000000000) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e000100000000000000000000000600fc6f624e0e3dab223c81d55862e7d64c87f560d71d84cbceed6e1d71e9bb7d07ff568066721eea651978b16870d0f526525d74d38d49e46f63fa1bc5b9855c21ab09bccfca12d2f0aa2c146b04a63a491586d2a396bf44b010eb12ff16129cc7e440efb3cda751aae18a080807999ddbfb3f4f9b3582bbd5fde1177942bf17976c5ba31b1dfe9b1055", @ANYRES32=0x0, @ANYBLOB="0000018b"], 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013e8e99925bd700000000000fc0000000000000000000000000000ac1ee50000000000000080000a0030801d6bc600"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff8, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r8, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) 12.939814196s ago: executing program 8 (id=1761): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) accept4(r1, 0x0, 0x0, 0x400000000000000) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e000100000000000000000000000600fc6f624e0e3dab223c81d55862e7d64c87f560d71d84cbceed6e1d71e9bb7d07ff568066721eea651978b16870d0f526525d74d38d49e46f63fa1bc5b9855c21ab09bccfca12d2f0aa2c146b04a63a491586d2a396bf44b010eb12ff16129cc7e440efb3cda751aae18a080807999ddbfb3f4f9b3582bbd5fde1177942bf17976c5ba31b1dfe9b1055", @ANYRES32=0x0, @ANYBLOB="0000018b"], 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013e8e99925bd700000000000fc0000000000000000000000000000ac1ee50000000000000080000a0030801d6bc600"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff8, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r8, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) 6.64097479s ago: executing program 8 (id=1761): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) accept4(r1, 0x0, 0x0, 0x400000000000000) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e000100000000000000000000000600fc6f624e0e3dab223c81d55862e7d64c87f560d71d84cbceed6e1d71e9bb7d07ff568066721eea651978b16870d0f526525d74d38d49e46f63fa1bc5b9855c21ab09bccfca12d2f0aa2c146b04a63a491586d2a396bf44b010eb12ff16129cc7e440efb3cda751aae18a080807999ddbfb3f4f9b3582bbd5fde1177942bf17976c5ba31b1dfe9b1055", @ANYRES32=0x0, @ANYBLOB="0000018b"], 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013e8e99925bd700000000000fc0000000000000000000000000000ac1ee50000000000000080000a0030801d6bc600"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff8, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r8, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) 4.410156247s ago: executing program 7 (id=2036): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x14}}, 0x22008010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003"], 0x3c}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mq_open(&(0x7f0000000100)='#.\x1e$@#\x00', 0x40, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x408100) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)=""/238, 0xee}, {&(0x7f00000004c0)=""/4091, 0xffb}], 0x2}}], 0x1, 0x2, 0x0) 4.230943834s ago: executing program 2 (id=2037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'\x00', @random="01010d000700"}) 4.180537936s ago: executing program 2 (id=2039): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.179871411s ago: executing program 2 (id=2041): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'pimreg0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xd, 0x2, 0x2, 0x1}}) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) sendto$unix(r7, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0xffffffffffffff5c, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x4000) 3.529960173s ago: executing program 7 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) setresuid(0x0, 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec49d6a7aa90b8e8b9c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929b3c2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce207e5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b00700bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b4198a5a06850c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad204c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502960a1dde9dbf62586ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e6795156e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae94b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecd20286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25f8d4e65d243b7eab91063a7bfd8b7b239e39fbbb32b5c9517886287a1877cd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d128c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca803422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.350738259s ago: executing program 7 (id=2044): socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x8, 0x2, 0x0, 0x4}, 0x8) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f19981c5532ea417f60273ff3ea4fe0eb192cbf144b47ea25d21607c57ceccfadef9a4ef03ecc564173e5ffc0bcafea7d2af2941736604b92ecaee13", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf251900000008000300", @ANYRES8=r4, @ANYBLOB="0500a30000000000"], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a181010100000000010000000000000e000a000f00000002800600121f", 0x2e}, {&(0x7f0000000640)="13e7bda8c68a0f4e5b9a12ed2086139cc253b6060c8ea9ece59606666c3ef0acefd226657ea2e1f47444a99626d85974f4ff05e258b00ba4d0d5e0e942f18d674309fca0fc1feb319a53a28dac4c145d334d8c5c3e093a4bd72d8e028faa5c4437e5e28c7f8b406c2bba04c755440053a55aa95cde201a62a847ad39b06a1d305b019a66bfda5b4d0f7960bb88e9409255849369ef16a51d4d8555a3dcea413021166ca8197c2b31e6ed39e022cb953e84385c19ae87313dc4bb85e26a3b9939f06a9c38a31e285589d6533764bf146d356a1c36482993e32ad4f2d53cbc62b8b6d59b4e6876b4395327ec4f3cefc307fa712c718f409b2575f53519d0e1d4594ba15b72461bfd56f427a7eb5057670e4b4a3cfcb19fd69fde701eb8cf16f59d78b9748797800b1c67ecdb8a5e9dcfd25f00869b15a597209fcc833cea5ad4dee50a6013ae28852c97afcadbd5d10db047bfb7e007b39a0609023a5d63934836f91577d2d541e2d331dcd5f547dfdbc15017c4dac7e1e3505d94f56db263537a771f6b4bbd62623fec0d5e7a0c2fc473f4c30890127ad6d4fe687e1644262d2a5bab84c952498f46f2ec4658b7744d93b7ef61956a7e525507eb2ade9385ad3640c83e3452ffee6a316ea77a01b7941b5c92adf8fb1be932b3a4555c9a46bf95c629ac56bf44e85da13e6a92488eecacb394e1f0470c32db4ea7ae631447d93ab0916b478c4194534e1d320517dff2017694a5c189b4c59eed6489b419481db01f35e49b02cb2f4ac41904c7fab74f67faf1b44471cbb5fb8d7dd3808ed38f10f99001ee1bf7f24399ab5091318b63dc0cbcee0316117ecaefab3c21672b70209804687e6b1601f6a01bef5ae3772f0b89af1b83617e2ec76a38434134378ccb93767d427da8d65795062a1c460cd747797c02c3fcc9073315ccf6a16c9996e77df06404affdac7028a1f62b6359836078e708c3d38d94667380eed50313b985789a7be021aaeb7d100cb3802293d95390ea251d556c6297b1dfa858e51fe7ef1df7f86cd25668f8ac1460de45dbd8151a5a929b6c656236e2f6e2467d8abf0dc3203dfa6c723d19c88888d12eaa855d730caa19cebd7f580ed4009c41b018e26c12cd48dfb1094f75409cee742eb6521b3b6c2dc495ae5a1fb6ee41845c6f063d953f1cbb260408237acc106f51da8a812601912eb71d6738cec4217206e4ae7e672e341e136772f297968d79cf39bb6bd5011a1d41b6e066bfd4bf71d915a7c4fd37b2046d9a95b445c3a1de0309ebcb1a1193e714c97524194214761aeabd52da8fb0ec81f69ee3dfa7cc72794adea734d16cb84904b57362fe59beac8f7d75efbadd04b560c643497536b4dfd4099d3d7542c204fb4811057965e3760d5073fc35e37fb7ac4ea4105ab4878a92dcb326870be7a82b67612a2ba404730634c19e24e5e4fcac5522284f99baca1d77fc24b6a779bec84504f3661b56dce0c625b240fd19bd28b1c7b64f0154d5cc7574190bc964c8e3bdf4cb9d373433c37d7cc7912c72acf35098894837cf7009239a1f868628ee0153b0d1dde158488c8a1bed6d8dd3c30b6b856ad3db0064085b432328b7e9e4b255d77b4cb0d6968058f1507003e54d8c7af96b86ce77c1410f987842a97eba69281288c551756e13037bcd082d8ad957632174aa74a0d9f7f67940dda6c16a4ce6491f010ff7e399e2e210b33d82b93fa4d062bde2d1edb8182d91731c5b327dcbfe868ba96d40aa687f1a7ff2eb985c904f3b21c071bbbe87cc75bf31ac86ebc21b9bb2c64e1e710fcc182b36089319530857558efe88d47e1bc961f77279621fd511fd52ac735096117805d752643cd851b77389ae303071b04bcf956a7c55d990700f35203bc5e96c6d86de20cdc190d254a9e2120d49ddd70f62fe92d4e3d5477ad0c6c18f7dcc44d71af3f96507cadb39a20c8bdda60097c5073c4b521c1a408507148b1946746e116c0769f33428967369c0de8ce99b945e7d349994a7ac30e8ac0a2be7c77fa5d895fdd082c38ca3df9835a350f995297c5e36e4a8418f31e5961d7a8588755ea774fcba29dd3e7de0ac7adf319f04b7e42ad17f3899a664a5222fbce6957c166543778af6c83211c22869ad772b758291ad6707b50e80a9925098da5c7910625c26abb3a325cea1c367243f98fc19449e84e3800c488cb507b1143b8d054a6ed6a666add33fa6694b47b231817cedd386bbc74dac4ddecb1d57ffbc80a46de62e4e4d16cbfaeaeb2496bfb3177910f3786d864b3423bafdf9ae5618410a7cfbf447fa3e2905fe97148b91df067af1fa7e93b1c1ab0bbd4154f9e96ca4ccb2d8c221fa7304e4d090875bea588ebb8e79dbd0d04db028f333ab9ef3a1096562258aefe18ce4403679207c7a340b619e2c5fbdebd1d6735d80c1f07e30db1483970a31f9ef14c6fa05c1968182e0cc98865f5de06d7fb5b9c99182115f8a915527e70f1e0cb29312ea739af0fdf62ef5580ec132f31fdabad7139dd8c07ba7428abe38415e182ff55406f072d153f2503f02e81600896feea3d25f08d97bdf29f8dc069cc0b119ef73ea8302f3a633dbe1f202992a9e3e2cf4f5b5f2dceafc085379a76038defc89008b8f13be444d1a2d18dbd538d8e6969cb173b531c3e4913b2a8101a09e3d7a108bf7362a975dd3def366c15d5eff17fbe9c0ffe17518f2f7d2d0f7ee9afcc331ca032919dd5417816d2d9d4f4d9554dfc5a897b041fa291458fb9d91dd827c9d15bdac3d7fe175c5241dc3c4622cba063fe20bf8014f39b91f5823f29cb1ad008d4dce253072da8ad355841609544c021a4db0c8f74fde048ec9501495152923896f0ffafa1ef0d25c80a4c6b9e37bbef59f81b77c9c068a55de44f57fc2ba530db6eed255a424a1c1a3e083ee4a158c718176fb46b19ac53bbc11f43e074f9a1eb290a8de33c353c95c3f366715be11a2a669976fbc981f597cf8615cb000545ea22d1e516c8db5ba805c6eb9878ed99865eb8ccea6a940d9cb7efb077aaafec1f10cb24a0883151eab8e492c54452c25c6853b7506347a45a0390103c74b5ead1b427cce489eadbeae1ea43b79c8e188cac0aabe4b3b45d0bb43684a37807876845caf2952eea282de46d2b59880764b6cd6ee47fcdd690d1f5bedca60c3ce92d0c11272f34ab74cd11acefe59f302f976b972f1e24b9daccec888fadae4d45e04a53e8485c9b9d55e16013d8948d4c27d1119605d447bc13d0c8906ef5c9c3a6fd48c191bc8664841b01a68dd437b438be6cae7d83b2ed3bb92f449e94fd622f30357c7df37fa231c2991a9f8d1e11d2f111b3a335bab63e869f2c9790032ac92a460c56514a6e08b70183c178714f23763a8c694f74ceefcdf759dafdb94ca0b373f7f1fe6ab28efcb086af51d7d5dcaca87927300601cbb6b3f631bc72faf27ba2b6e50e8277cdecbd83f30bb4014a0f72c78d79b18541fe7fca1c47953709c8805f7d8785321a6f41c4fe0d331eb2cb51f94ba8d1823837ee5102fa80b6d81976d4c1bdad0d0ce7db9ede15cad8f91b1362a65ea1d8844bfb5cbc18bbe05239097c70964b8ca491e161d4ebaaa7cf6b4e738ae9a21b473f0f384ba265e916eba91fbd522699885026eb5c0f69b7e4668d6dc52d4e7bf6b334ccc16ded0c912b0163dc1630f8357d19c4996eb6924d3bcfba6a5e4c5c37431bea6d21c5a502d2a0c392a05b72b08ae22d54537f5d12d4a21fcccef6a852581f0daf76a94cae109b94cea36b8efcf7fcdc0b23b4d1541067ef01ae522683ae30a10ba903c2fee72a8ba55c7c9bd5cf2d255222d6ad619be29e7076f41a475402889408519e341bf4999068d5698b18da0842f9e12b95c2857aba118511f9fa1fb97f9de9522f8deff2817d0acc4b2cdab3a565ccdd2f2bd0c73809520710acf808038400ac9d20d807fc912a9cba6e9fa2e93a31389c6ce4ee2024f34740eb2684d9ec7312fd8a5dd3927501c00fb46a58c043072ca675d028dd83f2f88f372cccf788f886b3f58dac9270a21b8d93a32a6bf18d8468284a2f9885f0fdd4ce0cb772e6a4a6eca114080705eb924da766e48eea6ded862478b697ea5c6f53891b41231e27165a6ba643cc53337ab363feace1e73ae20b0abf0918818097382c4c9b70f895d401998cd5d2814093e91cb8d02e19bae6b4009addc16012bb2264ebc4c5554d9fc7a79848efcae50cd148d7c3f1155775146e985de90537b5277272b4f60c4691df19ba877914c4041eba80bf0b4763c5fed7f70732878ec682ff130c602850bf58c1e2c5d5ba711fe3ce30fb13c7955aac1fe86571ae167c8b2a28abfa7e713b012cbc6265b5670da682b014921cfb35de4f83998c740749f7fe056d535109df461d5a91d68a90ffd05ad60ae2b251f1a1d76833fb3449265778f05f4317e1dfbd71a4cab5d402959fc62fe1931d8e64023b14aee1b91132c14cefb296e4c384d93f342618ce73e4bf8a7467509cd60b7cd7c97b611acf2a3de830c00acef3cc0d1c7e8b2f5989c60441f0e5fa279ad31fd143f7341eed87d705071601f3cebdb964c42d7e2cd2d3360492402834b2607479b76517e6633754e046873aaa61f585aff366f1448424bd145e7de8aaddaaa236f8cc25cb4b47b25f5b8c580f1a52ad1963ac63af235495b024753f36c5c25b3b60633cc9d4b863e646c5036565c96690a978de4717919565327ba5eb9a16fd86977673ead75107c63c2fa27b6f2ab3be42051687404266c2a1bad3103e390b16e4929b2881a19cd862d98ef35eff1289df54c525d10394f72bd99974507e4ca25fd4ffb91b4380b64b09ce06208bfe501eb713f37920e73ba5aff59e117a0aa96801ba0bb6f31bec477bf059138a010a845bec03265ccdd1129cc188435be4573c170110576e9410f963ccaece777423d95afd2fb13b2f4de986007fd154d2221b6c07da8c365c4145c55e4f5b0ccc1abd83b84b6116ab539d286e658c6d0044a91bf881dbbc50f9afcf768e8eef343f0cdb5d665f24646b2f899612e5ce6337f7250c766a45c97174e9da7cd69d69e374502e11d6b6013bba47da5aea7a280efe928e160c3f14082a2877ec7d6920b80e008b47fee61b8885377716315df2aac5849ca55dc33189df11d323df86faedecba5d1c38757fddc376a1144dfb0f0aff5102eba25c3dbda326580aaf519af904b58a56b6c1d630cadd16b93bfedb71f99b2b1b3d611efca8f8f10f7d5797653b3e8c4b0b975de1e73a2e424ac551693e8f9035398dd5be2055b4a36800dd9911f1eb13b5e724c3f29c715b02d0a298c2cb041e5282880ef0807ac3f4aa840658242a8bbf4bb0d0a8a652244ad7d495962e9e87659f0edc1397f7523189798ecfc8758247e00e41dfa9f701619eb0882640fa4aee36297b81217d64c0af2337656541ef49905a6bb19d2e8ced4b0721588c3691593ba657b2f4e24c40602a2b75efd7024ab953728602d345871fa0298433dbd69fa1357714dd468178ee7756572933b009e37365ff0e5898f62ab26b41298421d4ac5bb692c6dc16ddb49bb883cd981a7d37c160394901f211ace8326f889051b7be9802507d5885d3efbd1d8710127b5d9433c0a77c192f38787e7bf7d6571dfca86fb0cb762d7d416d4f30ce03b56138ce750197b9ca1521a4a32d6e01ab0667369d7fcdb092a1d70120b14fe6ce8d3f49be2daef61e8c4e0f43ec18022fd17edb38085c98ff75be5be258e17221b4e423601178d5103abe15e0b595c0e8c00", 0x1000}], 0x2}, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r10, &(0x7f0000000240)=[{&(0x7f0000000040)="f0ec09", 0x3}, {&(0x7f0000000840)="f5", 0x1}], 0x2, 0xc) (async) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r9, 0x0, r11, 0x0, 0x3, 0xb) (async) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000040)) (async) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x0, "6040a7190200002000004f597cdc90d22b6000000006ff00", 0x38415262}) 2.909886479s ago: executing program 2 (id=2045): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x310}}, './bus\x00'}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000240)=0x5) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendmmsg$alg(r2, &(0x7f0000005a80)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="bb6a54e0", 0x4}], 0x1}], 0x1, 0x40804) r4 = socket$packet(0x11, 0x0, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.909605097s ago: executing program 7 (id=2046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.908024121s ago: executing program 2 (id=2047): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000340009000000000000400000020000001000018009006400a553fa"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000340009000000000000400000020000001000018009006400a553fa"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 2.839295193s ago: executing program 7 (id=2049): r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x40) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) ppoll(&(0x7f00000061c0)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xc6d, 0x5, 0x7, 0x80, 0xcd, 0x596c}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x8, 0x5}}]}}}]}, 0x64}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 2.641033674s ago: executing program 2 (id=2052): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000040)={0x4, 0xffffff5a, 0x6}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c001680580001"], 0x98}}, 0x40000) (rerun: 32) 1.910431012s ago: executing program 7 (id=2063): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x11b5, 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b3", 0x1}], 0x1) 1.267898301s ago: executing program 1 (id=2075): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) (async) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4) r1 = socket$pptp(0x18, 0x1, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x181000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200), 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) (async) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) (async) r4 = socket$pptp(0x18, 0x1, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r8, 0xc02064cc, &(0x7f0000000080)={r9, r9, 0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000240)={&(0x7f0000000200)=[r7, r9], &(0x7f0000000180), 0xa, 0x2, 0x1}) (async) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000480)=""/254, 0xfe}], 0x1, 0x0, 0x4) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) 1.170364538s ago: executing program 1 (id=2076): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x7fffffffffffffff, 0x0, 0x4, 0x1e, 0x18, "94f1573d47fee1625a0b9680539c37f1fa776c04f57caf45be8d3757fbed569c215a8d1d54d119d3f656f12a31e877ccf192e0e69e1f90a2d34cc623bffd51d1", "f68074f9fd258a44de2ddf423c969b64334f337f630904a159f818bb61dc2365076c805f15b98e9dcd571df94f36ed9cfe48521d75a36eda8e0e4553dd497b91", "3503e23a6a31abbc495778a0ddc765d2585d280d1ce80709f93b8c4d7f1afb80", [0x299, 0x9]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x69) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0xffffffffffffff22, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 970.728431ms ago: executing program 1 (id=2077): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) write$ppp(r0, &(0x7f0000000700)="57a4", 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfecb, 0x100, 0x5, 0x3d4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 60.688443ms ago: executing program 1 (id=2078): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x3f8bb9e2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) flock(r2, 0x6) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 60.412552ms ago: executing program 1 (id=2079): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000040)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0xee, &(0x7f0000000280)=""/238, 0x1f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x7a3, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x0, 0xa}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 302.828µs ago: executing program 1 (id=2080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)=0x6) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a010900"/20], 0x14}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus/../file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 0s ago: executing program 8 (id=1761): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) accept4(r1, 0x0, 0x0, 0x400000000000000) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e000100000000000000000000000600fc6f624e0e3dab223c81d55862e7d64c87f560d71d84cbceed6e1d71e9bb7d07ff568066721eea651978b16870d0f526525d74d38d49e46f63fa1bc5b9855c21ab09bccfca12d2f0aa2c146b04a63a491586d2a396bf44b010eb12ff16129cc7e440efb3cda751aae18a080807999ddbfb3f4f9b3582bbd5fde1177942bf17976c5ba31b1dfe9b1055", @ANYRES32=0x0, @ANYBLOB="0000018b"], 0x1c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013e8e99925bd700000000000fc0000000000000000000000000000ac1ee50000000000000080000a0030801d6bc600"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff8, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r8, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) kernel console output (not intermixed with test programs): 117][T10473] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 141.342140][T10473] vivid-000: Maximum EDID Blocks: 2 [ 141.344279][T10473] vivid-000: Limited RGB Range (16-235): false [ 141.344858][T10482] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 141.347065][T10473] vivid-000: Rx RGB Quantization Range: Automatic [ 141.347089][T10473] vivid-000: Power Present: 0x00000001 [ 141.347109][T10473] tpg source WxH: 640x360 (R'G'B) [ 141.347142][T10473] tpg field: 1 [ 141.347149][T10473] tpg crop: (0,0)/640x360 [ 141.347160][T10473] tpg compose: (0,0)/640x360 [ 141.347171][T10473] tpg colorspace: 5 [ 141.347178][T10473] tpg transfer function: 0/1 [ 141.347196][T10473] tpg quantization: 0/1 [ 141.347205][T10473] tpg RGB range: 0/2 [ 141.347212][T10473] vivid-000: ================== END STATUS ================== [ 141.372261][T10482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1339'. [ 141.444481][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.458199][T10492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10492 comm=syz.1.1341 [ 141.475254][T10476] chnl_net:caif_netlink_parms(): no params data found [ 141.516428][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 141.553836][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.556569][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.558834][T10476] bridge_slave_0: entered allmulticast mode [ 141.561529][T10476] bridge_slave_0: entered promiscuous mode [ 141.565475][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.569211][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.571875][T10476] bridge_slave_1: entered allmulticast mode [ 141.574484][T10476] bridge_slave_1: entered promiscuous mode [ 141.608722][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.613204][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.650677][T10476] team0: Port device team_slave_0 added [ 141.678833][T10476] team0: Port device team_slave_1 added [ 141.725237][T10514] tmpfs: Bad value for 'mpol' [ 141.751505][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.753616][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 141.754077][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.765220][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.773585][T10398] veth0_vlan: entered promiscuous mode [ 141.782507][T10398] veth1_vlan: entered promiscuous mode [ 141.789167][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.791407][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.800874][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.844040][T10476] hsr_slave_0: entered promiscuous mode [ 141.846287][T10476] hsr_slave_1: entered promiscuous mode [ 141.848997][T10476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.851384][T10476] Cannot create hsr debugfs directory [ 141.856567][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 141.856577][ T40] audit: type=1400 audit(1751827436.807:42146): avc: denied { write } for pid=10517 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.865356][ T40] audit: type=1400 audit(1751827436.817:42147): avc: denied { shutdown } for pid=10517 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.871608][ T40] audit: type=1326 audit(1751827436.817:42148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.2.1346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd6f98e929 code=0x0 [ 141.978832][T10398] veth0_macvtap: entered promiscuous mode [ 141.998439][T10398] veth1_macvtap: entered promiscuous mode [ 142.018068][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.025067][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.042327][T10398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.045317][T10398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.048991][T10398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.051841][T10398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.082638][T10476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.089766][T10476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.115999][T10476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.122221][T10476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.167131][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 142.176665][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.179142][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.201180][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.201540][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 142.203655][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.222900][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.225330][ T40] audit: type=1400 audit(1751827437.157:42149): avc: denied { ioctl } for pid=10530 comm="syz.2.1348" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.236981][ T40] audit: type=1400 audit(1751827437.157:42150): avc: denied { remount } for pid=10530 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.240726][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.243143][ T40] audit: type=1400 audit(1751827437.177:42151): avc: denied { mounton } for pid=10398 comm="syz-executor" path="/syzkaller.7fV3n5/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 142.250756][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.252018][ T40] audit: type=1400 audit(1751827437.177:42152): avc: denied { mount } for pid=10398 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.254654][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.263300][ T40] audit: type=1400 audit(1751827437.177:42153): avc: denied { mounton } for pid=10398 comm="syz-executor" path="/syzkaller.7fV3n5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 142.273067][ T40] audit: type=1400 audit(1751827437.177:42154): avc: denied { mounton } for pid=10398 comm="syz-executor" path="/syzkaller.7fV3n5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 142.283050][ T40] audit: type=1400 audit(1751827437.217:42155): avc: denied { mounton } for pid=10398 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 142.287789][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.293224][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.423476][T10476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.500169][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1353'. [ 142.503234][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'. [ 142.548463][ T836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 142.603722][T10476] veth0_vlan: entered promiscuous mode [ 142.610219][T10476] veth1_vlan: entered promiscuous mode [ 142.629231][T10476] veth0_macvtap: entered promiscuous mode [ 142.633157][T10476] veth1_macvtap: entered promiscuous mode [ 142.642162][T10476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.649398][T10476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.653876][T10476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.656770][T10476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.659500][T10476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.662201][T10476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.706975][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 142.712819][ T836] usb 7-1: config 6 has an invalid interface number: 178 but max is 3 [ 142.715397][ T836] usb 7-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 142.719722][ T836] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 142.723096][ T836] usb 7-1: config 6 has no interface number 0 [ 142.725905][ T836] usb 7-1: config 6 interface 178 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 142.738542][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.741012][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.746809][ T836] usb 7-1: New USB device found, idVendor=19d2, idProduct=1266, bcdDevice=13.de [ 142.749648][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.752121][ T836] usb 7-1: Product: ఊ [ 142.753454][ T836] usb 7-1: Manufacturer: 㐉 [ 142.754908][ T836] usb 7-1: SerialNumber: 㰊 [ 142.763855][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.769986][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.845794][T10579] binder: Binderfs stats mode cannot be changed during a remount [ 142.874146][T10582] netlink: 'syz.1.1360': attribute type 11 has an invalid length. [ 142.974612][ T836] option 7-1:6.178: GSM modem (1-port) converter detected [ 142.979015][ T836] usb 7-1: USB disconnect, device number 23 [ 142.981442][ T836] option 7-1:6.178: device disconnected [ 143.158367][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 143.286636][ T5960] Bluetooth: hci2: command tx timeout [ 143.318014][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.321133][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.324311][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.330167][ T34] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.333202][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.335803][ T34] usb 11-1: Product: syz [ 143.337309][ T34] usb 11-1: Manufacturer: syz [ 143.338815][ T34] usb 11-1: SerialNumber: syz [ 143.342788][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 143.343021][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'. [ 143.344769][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 143.347791][T10599] nbd: illegal input index 1851879543 [ 143.549383][ T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.566059][T10602] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.856759][ T3327] usb 11-1: USB disconnect, device number 2 [ 143.860626][ T3327] usblp0: removed [ 144.066109][T10627] nbd: must specify at least one socket [ 144.235364][T10644] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 144.247010][ T5960] Bluetooth: hci3: command 0x041b tx timeout [ 144.322087][T10651] lo speed is unknown, defaulting to 1000 [ 144.334737][T10652] lo speed is unknown, defaulting to 1000 [ 144.458318][T10661] sctp: [Deprecated]: syz.5.1385 (pid 10661) Use of int in max_burst socket option. [ 144.458318][T10661] Use struct sctp_assoc_value instead [ 144.721018][T10670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.795578][T10678] netlink: 199236 bytes leftover after parsing attributes in process `syz.1.1393'. [ 144.812038][T10670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.881376][T10670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.890120][T10682] bridge0: entered allmulticast mode [ 144.898512][T10682] pim6reg: entered allmulticast mode [ 144.906131][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 144.938043][T10682] bridge0 (unregistering): left allmulticast mode [ 145.035670][T10670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.213292][T10670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.221940][T10670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.229158][T10670] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.236887][T10670] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.366784][ T5960] Bluetooth: hci2: command tx timeout [ 145.681480][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1397'. [ 145.687735][T10692] erspan0: entered promiscuous mode [ 145.690107][T10692] batadv_slave_1: entered promiscuous mode [ 146.055741][T10723] syzkaller0: entered allmulticast mode [ 146.058227][T10722] syzkaller0: left allmulticast mode [ 146.090336][T10725] ipt_rpfilter: unknown options [ 146.174197][T10729] xt_hashlimit: size too large, truncated to 1048576 [ 146.336994][ T5960] Bluetooth: hci3: command 0x041b tx timeout [ 146.566993][ T59] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 146.588040][T10702] overlayfs: statfs failed on './file0' [ 146.627297][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 146.649851][T10745] __nla_validate_parse: 2 callbacks suppressed [ 146.649867][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 146.698280][T10750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10750 comm=syz.6.1415 [ 146.718560][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 146.722334][ T59] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.725818][ T59] usb 7-1: config 179 has no interface number 0 [ 146.729000][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 146.733531][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 146.739996][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.744644][ T59] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.750403][ T59] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.753849][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.758202][T10737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.777413][ T53] usb 10-1: device descriptor read/64, error -71 [ 146.964626][ T59] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input19 [ 146.985063][T10767] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 146.989154][T10767] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 147.036516][ T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 147.162088][T10737] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 147.175592][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.178231][ T8107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 147.179940][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.186638][ T53] usb 10-1: device descriptor read/64, error -71 [ 147.197769][ T5954] usb 7-1: USB disconnect, device number 24 [ 147.197990][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.202594][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 147.264437][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 147.264449][ T40] audit: type=1400 audit(1751827442.217:42172): avc: denied { name_bind } for pid=10790 comm="syz.1.1425" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 147.275409][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 147.291345][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 147.306809][ T53] usb usb10-port1: attempt power cycle [ 147.329662][T10795] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 147.425240][T10801] bond0: entered promiscuous mode [ 147.427374][T10801] bond0: entered allmulticast mode [ 147.436534][ T10] usb 11-1: Using ep0 maxpacket: 16 [ 147.442353][ T10] usb 11-1: config 0 has no interfaces? [ 147.444204][ T10] usb 11-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 147.456538][ T5960] Bluetooth: hci2: command tx timeout [ 147.457116][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.466559][ T10] usb 11-1: config 0 descriptor?? [ 147.490980][ T40] audit: type=1400 audit(1751827442.447:42173): avc: denied { remount } for pid=10806 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.539447][T10814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.540369][ T40] audit: type=1400 audit(1751827442.487:42174): avc: denied { append } for pid=10811 comm="syz.5.1432" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.650735][T10812] /dev/sr0: Can't open blockdev [ 147.653392][T10815] gfs2: gfs2 mount does not exist [ 147.676075][ T40] audit: type=1400 audit(1751827442.627:42175): avc: denied { mounton } for pid=10770 comm="syz.6.1421" path="/proc/38/task" dev="proc" ino=37640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.687238][ T5990] usb 11-1: USB disconnect, device number 3 [ 147.791188][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1440'. [ 147.806370][ T40] audit: type=1400 audit(1751827442.757:42176): avc: denied { getopt } for pid=10836 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.847843][ T40] audit: type=1800 audit(1751827442.797:42177): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1442" name="bus" dev="9p" ino=35913966 res=0 errno=0 [ 147.885007][T10845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input20 [ 147.916052][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1444'. [ 148.015890][T10855] misc userio: Begin command sent, but we're already running [ 148.042029][T10860] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 148.215397][ T8106] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.353615][ T8106] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.363070][T10869] vxcan1: entered promiscuous mode [ 148.364592][ T40] audit: type=1400 audit(1751827443.317:42178): avc: denied { append } for pid=10870 comm="syz.2.1453" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.365439][T10871] random: crng reseeded on system resumption [ 148.385653][ T40] audit: type=1400 audit(1751827443.337:42179): avc: denied { ioctl } for pid=10870 comm="syz.2.1453" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.446994][ T8106] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.506110][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.510168][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.513016][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.515878][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.520679][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.545116][ T8106] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.555416][T10875] lo speed is unknown, defaulting to 1000 [ 148.654480][T10875] chnl_net:caif_netlink_parms(): no params data found [ 148.663536][ T8106] bridge_slave_1: left allmulticast mode [ 148.665523][ T8106] bridge_slave_1: left promiscuous mode [ 148.667722][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.674869][ T8106] bridge_slave_0: left allmulticast mode [ 148.677035][ T8106] bridge_slave_0: left promiscuous mode [ 148.678950][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.687477][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.690272][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.693475][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.695430][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.699473][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.701420][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.704143][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.706114][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.709332][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.711291][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.714262][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.716229][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.719424][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.721459][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.724630][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.733933][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.736412][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.739180][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.741573][T10881] binder: BINDER_SET_CONTEXT_MGR already set [ 148.743832][T10881] binder: 10880:10881 ioctl 4018620d 200000000100 returned -16 [ 148.946555][ T8106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.951110][ T8106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.955192][ T8106] bond0 (unregistering): Released all slaves [ 148.962170][ T8106] bond1 (unregistering): Released all slaves [ 149.060275][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.063150][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.065994][T10875] bridge_slave_0: entered allmulticast mode [ 149.069220][T10875] bridge_slave_0: entered promiscuous mode [ 149.074161][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.077860][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.080671][T10875] bridge_slave_1: entered allmulticast mode [ 149.083753][T10875] bridge_slave_1: entered promiscuous mode [ 149.136530][ T7800] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 149.137745][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.143805][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.179549][T10875] team0: Port device team_slave_0 added [ 149.183089][T10875] team0: Port device team_slave_1 added [ 149.217716][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.220418][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.230927][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.233030][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1459'. [ 149.264061][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.266300][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.275313][ T7800] usb 6-1: device descriptor read/64, error -71 [ 149.276040][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.332155][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1460'. [ 149.334951][T10875] hsr_slave_0: entered promiscuous mode [ 149.339739][T10875] hsr_slave_1: entered promiscuous mode [ 149.342665][T10875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.345788][T10875] Cannot create hsr debugfs directory [ 149.362992][ T8106] hsr_slave_0: left promiscuous mode [ 149.367357][ T8106] hsr_slave_1: left promiscuous mode [ 149.371502][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.373945][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.377049][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.379361][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.413275][ T8106] veth1_macvtap: left promiscuous mode [ 149.415560][ T8106] veth0_macvtap: left promiscuous mode [ 149.418172][ T8106] veth1_vlan: left promiscuous mode [ 149.420631][ T8106] veth0_vlan: left promiscuous mode [ 149.528918][ T7800] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 149.536633][ T5960] Bluetooth: hci2: command tx timeout [ 149.656711][ T7800] usb 6-1: device descriptor read/64, error -71 [ 149.766833][ T7800] usb usb6-port1: attempt power cycle [ 150.116569][ T7800] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 150.137159][ T7800] usb 6-1: device descriptor read/8, error -71 [ 150.204395][ T8106] team0 (unregistering): Port device team_slave_1 removed [ 150.245674][T10914] ALSA: mixer_oss: invalid OSS volume '' [ 150.297061][ T8106] team0 (unregistering): Port device team_slave_0 removed [ 150.378764][ T7800] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 150.407270][ T7800] usb 6-1: device descriptor read/8, error -71 [ 150.516987][ T7800] usb usb6-port1: unable to enumerate USB device [ 150.567925][ T5960] Bluetooth: hci3: command tx timeout [ 150.982394][ T40] audit: type=1400 audit(1751827445.937:42180): avc: denied { create } for pid=10925 comm="syz.6.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 150.993951][ T40] audit: type=1400 audit(1751827445.937:42181): avc: denied { sys_admin } for pid=10925 comm="syz.6.1464" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.020996][T10927] lo speed is unknown, defaulting to 1000 [ 151.043909][T10929] vlan0: entered promiscuous mode [ 151.045555][T10929] bridge0: entered promiscuous mode [ 151.056744][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.154699][T10934] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 151.159195][T10875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.165924][T10875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.176148][T10875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.187309][T10875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.283363][T10875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.300308][T10875] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.301149][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 151.328670][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.331694][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.336589][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.339462][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.359214][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1471'. [ 151.362125][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1471'. [ 151.365210][T10957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=10957 comm=syz.2.1471 [ 151.370701][T10957] netlink: 171244 bytes leftover after parsing attributes in process `syz.2.1471'. [ 151.445861][T10967] binder: Bad value for 'max' [ 151.455785][T10967] bridge5: port 1(veth0_to_bond) entered blocking state [ 151.459512][T10967] bridge5: port 1(veth0_to_bond) entered disabled state [ 151.462626][T10967] veth0_to_bond: entered allmulticast mode [ 151.467092][T10967] veth0_to_bond: entered promiscuous mode [ 151.478570][T10967] vlan0: entered allmulticast mode [ 151.480888][T10967] veth1: entered allmulticast mode [ 151.503785][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.683456][T10875] veth0_vlan: entered promiscuous mode [ 151.688781][T10875] veth1_vlan: entered promiscuous mode [ 151.705042][T10875] veth0_macvtap: entered promiscuous mode [ 151.714803][T10875] veth1_macvtap: entered promiscuous mode [ 151.730850][T10986] __nla_validate_parse: 1 callbacks suppressed [ 151.730861][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1475'. [ 151.736161][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1475'. [ 151.743788][T10875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.752735][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.761769][T10875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.765387][T10875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.770192][T10875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.773747][T10875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.775657][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 151.781244][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 151.802855][T10992] fuse: Bad value for 'fd' [ 151.825557][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.831072][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.854935][ T8117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.859532][ T8117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.881947][T11003] overlayfs: missing 'workdir' [ 151.969213][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 152.189684][T11035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.194019][T11035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1490'. [ 152.226518][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 152.243072][T11043] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 152.245830][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.250391][T11043] vhci_hcd vhci_hcd.0: Device attached [ 152.386668][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 152.390776][ T34] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 152.393108][T11053] sctp: [Deprecated]: syz.2.1495 (pid 11053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.393108][T11053] Use struct sctp_sack_info instead [ 152.393939][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.405597][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.410830][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.414008][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.419223][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.422156][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.486731][ T836] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 152.516632][ T5990] usb 52-1: SetAddress Request (2) to port 0 [ 152.519498][ T5990] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.552875][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 152.552892][ T40] audit: type=1400 audit(1751827447.507:42190): avc: denied { accept } for pid=11065 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.609987][T11071] lo speed is unknown, defaulting to 1000 [ 152.627635][ T34] usb 11-1: usb_control_msg returned -32 [ 152.630011][ T34] usbtmc 11-1:16.0: can't read capabilities [ 152.658586][ T5955] Bluetooth: hci3: command tx timeout [ 152.670309][ T836] usb 12-1: not running at top speed; connect to a high speed hub [ 152.674425][ T836] usb 12-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 152.678419][ T836] usb 12-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.683254][ T836] usb 12-1: config 1 interface 0 has no altsetting 0 [ 152.688257][ T836] usb 12-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 152.692217][ T836] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.695385][ T836] usb 12-1: Product: syz [ 152.697438][ T836] usb 12-1: Manufacturer: syz [ 152.699501][ T836] usb 12-1: SerialNumber: syz [ 152.709059][T11044] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 152.788309][ T40] audit: type=1400 audit(1751827447.747:42191): avc: denied { mounton } for pid=11088 comm="syz.6.1501" path="/26/file0" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.852446][ T40] audit: type=1400 audit(1751827447.807:42192): avc: denied { read } for pid=11094 comm="syz.1.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.913716][T11046] vhci_hcd: connection reset by peer [ 152.918128][ T8114] vhci_hcd: stop threads [ 152.919794][ T836] usbhid 12-1:1.0: can't add hid device: -71 [ 152.919929][ T8114] vhci_hcd: release socket [ 152.921110][ T5954] usb 11-1: USB disconnect, device number 4 [ 152.922255][ T836] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 152.924909][ T8114] vhci_hcd: disconnect device [ 152.928899][ T836] usb 12-1: USB disconnect, device number 2 [ 152.946547][ T59] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 152.956387][T11100] netlink: 'syz.6.1505': attribute type 1 has an invalid length. [ 153.020846][T11107] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1506'. [ 153.087507][ T59] usb 7-1: device descriptor read/64, error -71 [ 153.090433][ T40] audit: type=1400 audit(1751827448.047:42193): avc: denied { wake_alarm } for pid=11106 comm="syz.6.1506" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.111298][T11107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.115760][T11107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.120777][T11107] bond0 (unregistering): Released all slaves [ 153.326588][ T59] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 153.347333][ T40] audit: type=1400 audit(1751827448.307:42194): avc: denied { create } for pid=11109 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.349717][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1507'. [ 153.354230][ T40] audit: type=1400 audit(1751827448.307:42195): avc: denied { write } for pid=11109 comm="syz.6.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.357246][T11110] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 153.357263][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.466767][ T59] usb 7-1: device descriptor read/64, error -71 [ 153.579081][ T59] usb usb7-port1: attempt power cycle [ 153.599763][T11119] tipc: Started in network mode [ 153.602439][T11119] tipc: Node identity 804, cluster identity 4711 [ 153.605080][T11119] tipc: Node number set to 2052 [ 153.612361][ T40] audit: type=1400 audit(1751827448.567:42196): avc: denied { create } for pid=11118 comm="syz.7.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 153.620254][ T40] audit: type=1400 audit(1751827448.567:42197): avc: denied { write } for pid=11118 comm="syz.7.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 153.646807][ T24] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 153.758800][T11128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.806657][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 153.813748][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.819679][ T24] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.823136][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.825569][ T24] usb 11-1: Product: syz [ 153.827148][ T24] usb 11-1: Manufacturer: syz [ 153.829132][ T24] usb 11-1: SerialNumber: syz [ 153.832731][ T24] usb 11-1: config 0 descriptor?? [ 153.837257][ T24] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.840678][ T24] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 153.936698][ T59] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 153.967651][ T59] usb 7-1: device descriptor read/8, error -71 [ 154.056626][ T6016] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 154.106959][ T24] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 154.174330][ T24] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 154.178144][ T24] em28xx 11-1:0.0: board has no eeprom [ 154.196624][ T6016] usb 12-1: device descriptor read/64, error -71 [ 154.226572][ T59] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 154.246331][T11112] em28xx 11-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 154.246507][ T24] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.251563][ T24] em28xx 11-1:0.0: dvb set to bulk mode. [ 154.253872][ T59] usb 7-1: device descriptor read/8, error -71 [ 154.256649][ T3327] em28xx 11-1:0.0: Binding DVB extension [ 154.262481][ T24] usb 11-1: USB disconnect, device number 5 [ 154.264943][ T24] em28xx 11-1:0.0: Disconnecting em28xx [ 154.290393][ T3327] em28xx 11-1:0.0: Registering input extension [ 154.292643][ T24] em28xx 11-1:0.0: Closing input extension [ 154.366652][ T59] usb usb7-port1: unable to enumerate USB device [ 154.446612][ T6016] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 154.461021][ T40] audit: type=1400 audit(1751827449.417:42198): avc: denied { setopt } for pid=11138 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.586552][ T6016] usb 12-1: device descriptor read/64, error -71 [ 154.627716][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 154.706927][ T6016] usb usb12-port1: attempt power cycle [ 154.728663][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 154.779146][T11159] overlayfs: failed to resolve './file1': -2 [ 155.049079][ T59] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 155.056684][ T6016] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 155.077411][ T6016] usb 12-1: device descriptor read/8, error -71 [ 155.196615][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 155.200690][ T59] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 155.204078][ T59] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.207294][ T59] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.210712][ T59] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.214858][ T59] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.220033][ T59] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.223022][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.328601][ T6016] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 155.347172][ T6016] usb 12-1: device descriptor read/8, error -71 [ 155.430771][ T59] usb 6-1: usb_control_msg returned -32 [ 155.432643][ T59] usbtmc 6-1:16.0: can't read capabilities [ 155.467030][ T6016] usb usb12-port1: unable to enumerate USB device [ 155.768796][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 155.803306][ T40] audit: type=1400 audit(1751827450.757:42199): avc: denied { watch } for pid=11171 comm="syz.2.1524" path="/450" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.809175][T11174] overlayfs: conflicting lowerdir path [ 156.415939][ T24] em28xx 11-1:0.0: Freeing device [ 156.540443][T11182] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.808946][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 156.922754][T11202] __nla_validate_parse: 1 callbacks suppressed [ 156.922769][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 157.046547][ T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 157.196509][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 157.199423][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 157.199447][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.199461][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.199474][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.199486][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.200199][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 157.218974][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.218991][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.219027][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.219041][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.237566][ T24] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 157.237592][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.243552][ T24] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.247794][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.247810][ T24] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.257020][ T24] usb 11-1: string descriptor 0 read error: -22 [ 157.257076][ T24] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 157.262544][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.265633][ T24] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 157.533305][T11226] block device autoloading is deprecated and will be removed. [ 157.578783][T11200] md2: using deprecated bitmap file support [ 157.582267][T11200] md2: error: bitmap file must be a regular file [ 157.589029][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 157.589043][ T40] audit: type=1400 audit(1751827452.547:42207): avc: denied { listen } for pid=11229 comm="syz.2.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.599467][ T40] audit: type=1400 audit(1751827452.547:42208): avc: denied { accept } for pid=11229 comm="syz.2.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.607375][ T5990] usb 52-1: device descriptor read/8, error -110 [ 157.641905][T11231] netem: incorrect gi model size [ 157.643873][T11231] netem: change failed [ 157.822797][ T5954] usb 6-1: USB disconnect, device number 15 [ 157.928405][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1543'. [ 158.009269][ T5990] usb usb52-port1: attempt power cycle [ 158.059911][T11239] ptrace attach of "/syz-executor exec"[5947] was attempted by "/syz-executor exec"[11239] [ 158.066083][ T40] audit: type=1400 audit(1751827453.017:42209): avc: denied { execute } for pid=11237 comm="syz.1.1544" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 158.313247][T11243] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1545'. [ 158.590980][ T5990] usb usb52-port1: unable to enumerate USB device [ 158.685597][T11238] syz.1.1544 (11238): drop_caches: 1 [ 158.736901][ T4239] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 158.898599][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 158.903776][ T4239] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 158.909031][ T4239] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 704, setting to 64 [ 158.913446][ T4239] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.921224][ T4239] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.924838][ T4239] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.928874][ T4239] usb 12-1: SerialNumber: syz [ 158.934292][T11248] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 158.939622][ T4239] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22 [ 159.142466][ T5954] usb 12-1: USB disconnect, device number 7 [ 159.446627][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.678625][T11263] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1553'. [ 159.762217][ T34] usb 11-1: USB disconnect, device number 6 [ 159.808512][T11271] /dev/sr0: Can't open blockdev [ 159.817753][T11270] geneve2: entered promiscuous mode [ 159.818408][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1557'. [ 159.845270][ T40] audit: type=1400 audit(1751827454.797:42210): avc: denied { ioctl } for pid=11277 comm="syz.7.1558" path="uts:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.903137][ T40] audit: type=1400 audit(1751827454.857:42211): avc: denied { mounton } for pid=11286 comm="syz.6.1560" path="/40/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 159.948701][T11293] binder: 11292:11293 ioctl c00c620f 200000000440 returned -22 [ 159.959262][ T40] audit: type=1400 audit(1751827454.917:42212): avc: denied { write } for pid=11294 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 159.965603][ T40] audit: type=1400 audit(1751827454.917:42213): avc: denied { accept } for pid=11294 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 160.012149][ T40] audit: type=1400 audit(1751827454.967:42214): avc: denied { read } for pid=11296 comm="syz.7.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.019187][ T40] audit: type=1400 audit(1751827454.977:42215): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 160.041419][T11301] netlink: 'syz.7.1567': attribute type 5 has an invalid length. [ 160.048957][T11303] dlm: no local IP address has been set [ 160.050950][T11303] dlm: cannot start dlm midcomms -107 [ 160.062364][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 160.076432][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 160.175250][T11308] netlink: 'syz.6.1568': attribute type 1 has an invalid length. [ 160.187284][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.280861][T11308] bond0 (unregistering): Released all slaves [ 160.293425][ T40] audit: type=1400 audit(1751827455.247:42216): avc: denied { mount } for pid=11310 comm="syz.1.1569" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 160.379129][T11315] mkiss: ax0: crc mode is auto. [ 160.533486][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1574'. [ 160.564444][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'. [ 160.819080][T11331] sctp: [Deprecated]: syz.1.1575 (pid 11331) Use of int in maxseg socket option. [ 160.819080][T11331] Use struct sctp_assoc_value instead [ 160.949824][T11339] SELinux: failed to load policy [ 160.967022][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 161.362571][T11375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=11375 comm=syz.6.1590 [ 161.558125][T11391] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.587539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 161.590952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 161.594561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 161.598190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.601100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.605372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.611146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 161.619775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.623203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.638093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 161.796682][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1600'. [ 161.985163][T11413] __nla_validate_parse: 4 callbacks suppressed [ 161.985179][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 161.999533][T11413] macsec0: entered promiscuous mode [ 162.026563][ T836] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 162.035314][T11416] xt_l2tp: invalid flags combination: c [ 162.198223][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.201716][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.204685][ T836] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 162.207647][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.212617][ T836] usb 7-1: config 0 descriptor?? [ 162.268753][T11427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11427 comm=syz.6.1606 [ 162.443716][ T836] usbhid 7-1:0.0: can't add hid device: -71 [ 162.446199][ T836] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 162.461684][ T836] usb 7-1: USB disconnect, device number 29 [ 162.773181][T11441] overlayfs: failed to resolve './file2': -2 [ 162.780335][T11441] overlayfs: failed to resolve './file2': -2 [ 162.984275][ T5960] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 162.988005][T11456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.030249][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 163.226612][ T836] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 163.396522][ T836] usb 7-1: Using ep0 maxpacket: 32 [ 163.400267][ T836] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 163.403269][ T836] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.407178][ T836] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.410699][ T836] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.414804][ T836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 163.418586][ T836] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.421524][ T836] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.424243][ T836] usb 7-1: Product: syz [ 163.425689][ T836] usb 7-1: Manufacturer: syz [ 163.427457][ T836] usb 7-1: SerialNumber: syz [ 163.430874][ T836] usb 7-1: config 0 descriptor?? [ 163.434070][ T836] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.437803][ T836] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 163.636578][ T6016] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 163.641675][ T836] usb 7-1: USB disconnect, device number 30 [ 163.646189][ T836] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 163.767164][ T6016] usb 6-1: device descriptor read/64, error -71 [ 163.812963][T11470] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.891227][T11470] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.958806][T11470] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.973808][T11480] overlayfs: missing 'workdir' [ 164.026552][ T6016] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 164.083833][T11470] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.104591][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 164.104600][ T40] audit: type=1400 audit(1751827459.057:42227): avc: denied { ioctl } for pid=11482 comm="syz.7.1623" path="socket:[42427]" dev="sockfs" ino=42427 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 164.114996][T11483] netlink: 'syz.7.1623': attribute type 142 has an invalid length. [ 164.119300][T11483] Invalid logical block size (10) [ 164.120528][T11484] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1623'. [ 164.157256][ T6016] usb 6-1: device descriptor read/64, error -71 [ 164.164357][T11470] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.176929][T11470] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.188432][T11470] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.201169][T11470] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.266679][ T6016] usb usb6-port1: attempt power cycle [ 164.487693][T11519] netlink: 'syz.2.1633': attribute type 13 has an invalid length. [ 164.548945][T11527] openvswitch: netlink: IP tunnel dst address not specified [ 164.628181][ T6016] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 164.647477][ T6016] usb 6-1: device descriptor read/8, error -71 [ 164.896776][ T6016] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 164.916950][ T6016] usb 6-1: device descriptor read/8, error -71 [ 165.036910][ T6016] usb usb6-port1: unable to enumerate USB device [ 165.467144][ T40] audit: type=1400 audit(1751827460.417:42228): avc: denied { connect } for pid=11533 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.505403][ T40] audit: type=1326 audit(1751827460.457:42229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.7.1639" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086e78e929 code=0x0 [ 166.363622][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1640'. [ 166.366617][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1640'. [ 166.551282][T11552] block nbd1: shutting down sockets [ 166.662335][T11554] program syz.1.1643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.886638][ T40] audit: type=1400 audit(1751827461.827:42230): avc: denied { map } for pid=11559 comm="syz.7.1645" path="/proc/181/task/183/fd" dev="proc" ino=39874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 167.028442][T11570] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1647'. [ 167.048292][ T5960] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 167.052286][ T5960] Bluetooth: hci3: Injecting HCI hardware error event [ 167.055894][ T5960] Bluetooth: hci3: hardware error 0x00 [ 167.056175][ T40] audit: type=1400 audit(1751827462.007:42231): avc: denied { shutdown } for pid=11574 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.069162][ T40] audit: type=1400 audit(1751827462.027:42232): avc: denied { write } for pid=11574 comm="syz.2.1648" lport=60099 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 167.111402][T11578] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1649' sets config #1 [ 167.263568][T11589] binder: 11588:11589 ioctl c0046209 0 returned -22 [ 167.310664][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1654'. [ 167.314679][T11594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.363632][T11602] 9pnet_virtio: no channels available for device syz [ 167.366365][T11602] 9pnet_virtio: no channels available for device syz [ 167.431187][T11608] use of bytesused == 0 is deprecated and will be removed in the future, [ 167.434618][T11608] use the actual size instead. [ 167.483875][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1661'. [ 167.485988][T11610] overlayfs: missing 'lowerdir' [ 167.493814][ T40] audit: type=1400 audit(1751827462.447:42233): avc: denied { bind } for pid=11609 comm="syz.7.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.504050][ T40] audit: type=1400 audit(1751827462.447:42234): avc: denied { listen } for pid=11609 comm="syz.7.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.512105][ T40] audit: type=1400 audit(1751827462.447:42235): avc: denied { write } for pid=11609 comm="syz.7.1659" path="socket:[44085]" dev="sockfs" ino=44085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.524696][ T40] audit: type=1400 audit(1751827462.447:42236): avc: denied { accept } for pid=11609 comm="syz.7.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.645686][T11629] program syz.1.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.704288][T11634] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 167.706125][T11634] PKCS7: Only support pkcs7_signedData type [ 167.716180][T11635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11635 comm=syz.2.1665 [ 167.722835][T11635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11635 comm=syz.2.1665 [ 167.987423][ T4239] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 168.136899][ T4239] usb 12-1: Using ep0 maxpacket: 16 [ 168.141186][ T4239] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.146034][ T4239] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.150211][ T4239] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.152766][ T4239] usb 12-1: Product: syz [ 168.154132][ T4239] usb 12-1: Manufacturer: syz [ 168.155683][ T4239] usb 12-1: SerialNumber: syz [ 168.159061][ T4239] usb 12-1: config 0 descriptor?? [ 168.162407][ T4239] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.165835][ T4239] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 168.417667][ T4239] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 168.481395][ T4239] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 168.483952][ T4239] em28xx 12-1:0.0: board has no eeprom [ 168.557006][ T4239] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 168.559524][ T4239] em28xx 12-1:0.0: dvb set to bulk mode. [ 168.561453][ T5990] em28xx 12-1:0.0: Binding DVB extension [ 168.567352][ T4239] usb 12-1: USB disconnect, device number 8 [ 168.569779][ T4239] em28xx 12-1:0.0: Disconnecting em28xx [ 168.599387][ T5990] em28xx 12-1:0.0: Registering input extension [ 168.601465][ T4239] em28xx 12-1:0.0: Closing input extension [ 168.608551][ T4239] em28xx 12-1:0.0: Freeing device [ 169.116249][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1675'. [ 169.119512][T11655] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 169.126769][ T5960] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 169.166015][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 169.166030][ T40] audit: type=1400 audit(1751827464.117:42247): avc: granted { setsecparam } for pid=11654 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 169.271776][T11659] lo speed is unknown, defaulting to 1000 [ 169.295660][ T40] audit: type=1400 audit(1751827464.247:42248): avc: denied { ioctl } for pid=11658 comm="syz.7.1677" path="socket:[44115]" dev="sockfs" ino=44115 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.296292][T11663] ptrace attach of "/syz-executor exec"[5947] was attempted by "/syz-executor exec"[11663] [ 169.346587][ T40] audit: type=1400 audit(1751827464.297:42249): avc: denied { read write } for pid=10875 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.354184][ T40] audit: type=1400 audit(1751827464.297:42250): avc: denied { open } for pid=10875 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.362445][ T40] audit: type=1400 audit(1751827464.297:42251): avc: denied { ioctl } for pid=10875 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.365271][T11668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1678'. [ 169.370569][ T40] audit: type=1400 audit(1751827464.317:42252): avc: denied { setattr } for pid=10476 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.370596][ T40] audit: type=1400 audit(1751827464.317:42253): avc: denied { write } for pid=11660 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.371499][ T40] audit: type=1400 audit(1751827464.327:42254): avc: denied { read } for pid=11666 comm="syz.7.1679" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.371525][ T40] audit: type=1400 audit(1751827464.327:42255): avc: denied { open } for pid=11666 comm="syz.7.1679" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.405760][ T40] audit: type=1400 audit(1751827464.337:42256): avc: denied { ioctl } for pid=11666 comm="syz.7.1679" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.537690][T11683] all: renamed from lo (while UP) [ 170.846543][ T6016] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 171.026499][ T6016] usb 12-1: Using ep0 maxpacket: 16 [ 171.029462][ T6016] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.034205][ T6016] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.046508][ T6016] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.049025][ T6016] usb 12-1: Product: syz [ 171.050382][ T6016] usb 12-1: Manufacturer: syz [ 171.051919][ T6016] usb 12-1: SerialNumber: syz [ 171.058355][ T6016] usb 12-1: config 0 descriptor?? [ 171.067552][ T6016] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.070478][ T6016] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 171.326549][ T5954] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 171.326859][ T6016] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 171.392768][ T6016] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 171.395933][ T6016] em28xx 12-1:0.0: board has no eeprom [ 171.456711][ T6016] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 171.460082][ T6016] em28xx 12-1:0.0: dvb set to bulk mode. [ 171.467855][ T24] em28xx 12-1:0.0: Binding DVB extension [ 171.472966][ T6016] usb 12-1: USB disconnect, device number 9 [ 171.476246][ T6016] em28xx 12-1:0.0: Disconnecting em28xx [ 171.486934][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 171.494230][ T5954] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 171.500984][ T5954] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 171.507752][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.509896][ T24] em28xx 12-1:0.0: Registering input extension [ 171.511815][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.516091][ T6016] em28xx 12-1:0.0: Closing input extension [ 171.518039][ T5954] usb 6-1: Product: 륚葓淋䮜䌡匸껷峊⼒雀芫䨸㝸২婦ⱜ哹閊퐵㱩ᷪ泜㳈썵䬋ᗭ贞䟂흵慗䟿Ľᥣɑ⭹㰧끹 [ 171.526069][ T5954] usb 6-1: Manufacturer: 骍荃琳ꎈ蠵넀㞇㯘Ȣॿﱟ놸띶⢝앃Ӏ☎䥬ᤗ쥶哆쿷ᤊ硆᧴꧳掋㋚骡౵⁐䲖椐阂湊両뜝椳谕၈릉鄈啿ന漅ꧢ肱䧚ᴒ아 [ 171.529720][ T6016] em28xx 12-1:0.0: Freeing device [ 171.535036][ T5954] usb 6-1: SerialNumber: ࠧ [ 171.749418][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.752436][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.765026][ T5954] cdc_ncm 6-1:1.0: bind() failure [ 171.772181][ T5954] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 171.775188][ T5954] cdc_ncm 6-1:1.1: bind() failure [ 171.781129][ T5954] usb 6-1: USB disconnect, device number 20 [ 172.857233][T11730] SELinux: policydb string length 14080 does not match expected length 8 [ 172.859945][T11730] SELinux: failed to load policy [ 172.873225][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 172.879339][T11735] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 172.882306][T11735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.918545][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 172.922305][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1702'. [ 172.926016][T11739] netlink: 'syz.2.1702': attribute type 20 has an invalid length. [ 172.930488][T11739] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 172.955003][T11737] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59411 sclass=netlink_xfrm_socket pid=11737 comm=syz.7.1701 [ 172.959798][T11737] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59412 sclass=netlink_xfrm_socket pid=11737 comm=syz.7.1701 [ 173.634954][T11755] program syz.2.1708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.638064][T11755] ata1.00: non-matching transfer count (32/0) [ 173.739923][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 173.821445][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1715'. [ 173.900567][T11779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.904103][T11779] overlayfs: failed to set xattr on upper [ 173.906675][T11779] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.909583][T11779] overlayfs: ...falling back to index=off. [ 173.912139][T11779] overlayfs: ...falling back to uuid=null. [ 173.919540][T11780] No source specified [ 173.921376][T11779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.923648][T11779] overlayfs: failed to set xattr on upper [ 173.925508][T11779] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.928435][T11779] overlayfs: ...falling back to index=off. [ 173.930934][T11779] overlayfs: ...falling back to uuid=null. [ 174.084019][T11787] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 174.193334][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 174.193350][ T40] audit: type=1400 audit(1751827469.147:42380): avc: denied { read write } for pid=11788 comm="syz.7.1722" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.205098][ T40] audit: type=1400 audit(1751827469.157:42381): avc: denied { open } for pid=11788 comm="syz.7.1722" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.215275][ T40] audit: type=1400 audit(1751827469.157:42382): avc: denied { map } for pid=11788 comm="syz.7.1722" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.227228][ T40] audit: type=1400 audit(1751827469.157:42383): avc: denied { execute } for pid=11788 comm="syz.7.1722" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.330922][ T40] audit: type=1400 audit(1751827469.287:42384): avc: denied { read write } for pid=11797 comm="syz.7.1724" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.338240][ T40] audit: type=1400 audit(1751827469.287:42385): avc: denied { open } for pid=11797 comm="syz.7.1724" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.346274][ T40] audit: type=1400 audit(1751827469.287:42386): avc: denied { ioctl } for pid=11797 comm="syz.7.1724" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.379637][ T40] audit: type=1400 audit(1751827469.337:42387): avc: denied { create } for pid=11799 comm="syz.7.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.381034][T11800] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.391423][ T40] audit: type=1400 audit(1751827469.347:42388): avc: denied { read } for pid=11799 comm="syz.7.1725" dev="nsfs" ino=4026533301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.400398][ T40] audit: type=1400 audit(1751827469.347:42389): avc: denied { open } for pid=11799 comm="syz.7.1725" path="net:[4026533301]" dev="nsfs" ino=4026533301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.419186][T11802] netlink: 'syz.7.1726': attribute type 39 has an invalid length. [ 174.856855][ T24] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 175.007277][ T24] usb 12-1: too many configurations: 151, using maximum allowed: 8 [ 175.019728][ T24] usb 12-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 175.023512][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 175.027094][ T24] usb 12-1: Product: syz [ 175.028910][ T24] usb 12-1: Manufacturer: syz [ 175.030854][ T24] usb 12-1: SerialNumber: syz [ 175.034902][ T24] usb 12-1: config 0 descriptor?? [ 175.244000][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.246857][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.250992][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1727'. [ 175.256229][ T24] usb 12-1: USB disconnect, device number 10 [ 175.324506][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 175.456775][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.459816][T11827] program syz.2.1732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.464517][T11827] Bluetooth: MGMT ver 1.23 [ 175.520388][T11833] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 175.957019][ T5990] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 176.086922][ T5990] usb 6-1: device descriptor read/64, error -71 [ 176.170281][T11859] delete_channel: no stack [ 176.244772][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 176.301864][T11876] SELinux: syz.2.1749 (11876) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 176.327318][ T5990] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 176.340082][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 176.457229][ T5990] usb 6-1: device descriptor read/64, error -71 [ 176.569904][ T5990] usb usb6-port1: attempt power cycle [ 176.907213][ T5990] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 176.927333][ T5990] usb 6-1: device descriptor read/8, error -71 [ 177.167063][ T5990] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 177.187606][ T5990] usb 6-1: device descriptor read/8, error -71 [ 177.296981][ T5990] usb usb6-port1: unable to enumerate USB device [ 179.239987][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 179.239999][ T40] audit: type=1400 audit(1751827474.197:42477): avc: denied { execute } for pid=11908 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 179.261086][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1763'. [ 179.263201][ T40] audit: type=1400 audit(1751827474.197:42478): avc: denied { execute_no_trans } for pid=11908 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 179.271008][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 179.274704][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 179.279969][T11915] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 179.300379][T11917] netlink: 'syz.7.1764': attribute type 10 has an invalid length. [ 179.303360][T11917] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.306230][T11917] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.314625][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.316932][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.319357][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.322124][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.330133][T11917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.340757][ T40] audit: type=1400 audit(1751827474.297:42479): avc: denied { create } for pid=11922 comm="syz.1.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.355223][ T40] audit: type=1400 audit(1751827474.297:42480): avc: denied { read } for pid=11922 comm="syz.1.1766" path="socket:[45410]" dev="sockfs" ino=45410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.390514][ T40] audit: type=1400 audit(1751827474.347:42481): avc: denied { read write } for pid=11926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 179.395845][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.404944][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.407299][ T40] audit: type=1400 audit(1751827474.347:42482): avc: denied { open } for pid=11926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 179.416915][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.421538][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.424279][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.426293][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1767'. [ 179.439959][ T40] audit: type=1400 audit(1751827474.397:42483): avc: denied { mounton } for pid=11926 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 179.461240][T11926] Failed to initialize the IGMP autojoin socket (err -2) [ 179.461492][ T40] audit: type=1400 audit(1751827474.417:42484): avc: denied { create } for pid=11932 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.471896][ T40] audit: type=1400 audit(1751827474.417:42485): avc: denied { allowed } for pid=11932 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.478970][ T40] audit: type=1400 audit(1751827474.427:42486): avc: denied { create } for pid=11932 comm="syz.1.1768" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.586817][ T8117] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.607415][T11926] chnl_net:caif_netlink_parms(): no params data found [ 179.629031][T11950] netlink: 700 bytes leftover after parsing attributes in process `syz.7.1772'. [ 179.675829][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.678422][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.680724][T11926] bridge_slave_0: entered allmulticast mode [ 179.683372][T11926] bridge_slave_0: entered promiscuous mode [ 179.689136][ T8117] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.695267][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.697942][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.700192][T11926] bridge_slave_1: entered allmulticast mode [ 179.702914][T11926] bridge_slave_1: entered promiscuous mode [ 179.740887][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.751649][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.800064][T11926] team0: Port device team_slave_0 added [ 179.806882][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 179.811135][T11926] team0: Port device team_slave_1 added [ 179.847057][ T8117] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.852840][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.855604][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.872657][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.879085][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.881287][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.891830][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.923949][ T8117] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.969331][T11926] hsr_slave_0: entered promiscuous mode [ 179.971580][T11926] hsr_slave_1: entered promiscuous mode [ 179.973667][T11926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.975933][T11926] Cannot create hsr debugfs directory [ 180.120817][T11926] netdevsim netdevsim8 netdevsim0: renamed from eth14 [ 180.129514][T11926] netdevsim netdevsim8 netdevsim1: renamed from eth15 [ 180.142329][T11926] netdevsim netdevsim8 netdevsim2: renamed from eth16 [ 180.151184][T11926] netdevsim netdevsim8 netdevsim3: renamed from eth18 [ 180.159706][ T8117] bridge_slave_1: left allmulticast mode [ 180.162198][ T8117] bridge_slave_1: left promiscuous mode [ 180.164828][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.172045][ T8117] bridge_slave_0: left allmulticast mode [ 180.174434][ T8117] bridge_slave_0: left promiscuous mode [ 180.177392][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.305696][ T8117] erspan0 (unregistering): left promiscuous mode [ 180.501284][ T8117] bond1 (unregistering): Released all slaves [ 180.619541][T11926] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.646411][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.648712][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.661197][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.663372][ T8107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.860006][ T8117] batadv_slave_1: left promiscuous mode [ 180.864272][ T8117] hsr_slave_0: left promiscuous mode [ 180.867850][ T8117] hsr_slave_1: left promiscuous mode [ 180.869881][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.872297][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.875532][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.878089][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.906539][ T8117] veth1_macvtap: left promiscuous mode [ 180.908364][ T8117] veth0_macvtap: left promiscuous mode [ 180.910367][ T8117] veth1_vlan: left promiscuous mode [ 180.912103][ T8117] veth0_vlan: left promiscuous mode [ 181.447354][ T5955] Bluetooth: hci2: command tx timeout [ 181.659934][ T8117] team0 (unregistering): Port device team_slave_1 removed [ 181.735567][ T8117] team0 (unregistering): Port device team_slave_0 removed [ 182.303039][T11996] bond0: option mode: unable to set because the bond device is up [ 182.321241][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.335162][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 182.462950][T12026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12026 comm=syz.1.1789 [ 182.545688][T11926] veth0_vlan: entered promiscuous mode [ 182.550944][T11926] veth1_vlan: entered promiscuous mode [ 182.583738][T11926] veth0_macvtap: entered promiscuous mode [ 182.591724][T11926] veth1_macvtap: entered promiscuous mode [ 182.618943][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.630940][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.636426][T11926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.648284][T11926] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 182.654831][T11926] wireguard: wg0: Could not create IPv4 socket [ 182.658793][T11926] wireguard: wg1: Could not create IPv4 socket [ 182.662834][T11926] wireguard: wg2: Could not create IPv4 socket [ 183.088184][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 183.183282][T12047] netdevsim netdevsim1: Direct firmware load for . [ 183.183282][T12047] failed with error -2 [ 183.189257][T12047] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 183.189257][T12047] [ 183.226614][ T836] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 183.227325][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 183.388247][ T836] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.392363][ T836] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.403441][ T836] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.407238][ T836] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.510275][T12055] netlink: 'syz.2.1797': attribute type 39 has an invalid length. [ 183.635648][ T836] usb 12-1: GET_CAPABILITIES returned 0 [ 183.637778][ T836] usbtmc 12-1:16.0: can't read capabilities [ 183.870976][T12072] netlink: 'syz.2.1802': attribute type 64 has an invalid length. [ 183.873533][T12072] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 183.875970][T12072] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1802'. [ 184.007842][T12011] usb 12-1: USB disconnect, device number 11 [ 184.368414][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 184.368427][ T40] audit: type=1400 audit(1751827480.330:42567): avc: denied { read write } for pid=12089 comm="syz.2.1809" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.380962][ T40] audit: type=1400 audit(1751827480.330:42568): avc: denied { open } for pid=12089 comm="syz.2.1809" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.388873][ T40] audit: type=1400 audit(1751827480.330:42569): avc: denied { ioctl } for pid=12089 comm="syz.2.1809" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.498062][ T40] audit: type=1400 audit(1751827480.460:42570): avc: denied { create } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.504297][ T40] audit: type=1400 audit(1751827480.460:42571): avc: denied { bind } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.511087][ T40] audit: type=1400 audit(1751827480.460:42572): avc: denied { setopt } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.517819][T12093] geneve1: entered allmulticast mode [ 184.518354][ T40] audit: type=1400 audit(1751827480.460:42573): avc: denied { accept } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.525667][ T40] audit: type=1400 audit(1751827480.460:42574): avc: denied { accept } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.536685][ T40] audit: type=1400 audit(1751827480.490:42575): avc: denied { write } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.542912][ T40] audit: type=1400 audit(1751827480.490:42576): avc: denied { read } for pid=12092 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.596820][T12096] netlink: 14212 bytes leftover after parsing attributes in process `syz.7.1811'. [ 184.675635][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 184.678568][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 184.681465][T12099] netlink: 'syz.2.1812': attribute type 19 has an invalid length. [ 184.785665][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.792785][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.795604][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.798637][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.801176][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.818319][T12109] Failed to initialize the IGMP autojoin socket (err -2) [ 185.086656][ T836] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 185.201048][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 185.227455][T12133] 9pnet_fd: p9_fd_create_unix (12133): problem connecting socket: qY3aK: -91 [ 185.246699][ T836] usb 7-1: Using ep0 maxpacket: 32 [ 185.250850][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.255259][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.259775][ T836] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 185.263492][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.268547][ T836] usb 7-1: config 0 descriptor?? [ 185.306758][T12137] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 185.315271][ T6016] hid-generic 0362:07FF:7FFFFFFF.0007: item fetching failed at offset 0/2 [ 185.319142][ T6016] hid-generic 0362:07FF:7FFFFFFF.0007: probe with driver hid-generic failed with error -22 [ 185.680411][ T836] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 185.707599][T12149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.733496][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 185.761502][T12149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.764225][T12149] IPv6: NLM_F_CREATE should be set when creating new route [ 185.769185][T12149] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 185.936704][ T6016] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 186.058347][T12158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.061717][T12158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.096754][ T6016] usb 12-1: Using ep0 maxpacket: 32 [ 186.099846][ T6016] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.106489][ T6016] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.108934][ T34] usb 7-1: USB disconnect, device number 31 [ 186.113283][ T6016] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 186.123379][ T6016] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.127652][T12158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.140260][ T6016] usb 12-1: config 0 descriptor?? [ 186.313179][T12164] 9p: Unknown uid 00000000004294967295 [ 186.364615][T12165] binder: 12163:12165 ioctl c018620c 200000000300 returned -22 [ 186.425301][T12109] netdevsim netdevsim8 netdevsim0: renamed from eth15 [ 186.442078][T12109] netdevsim netdevsim8 netdevsim1: renamed from eth16 [ 186.450189][T12109] netdevsim netdevsim8 netdevsim2: renamed from eth18 [ 186.469107][T12109] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 186.481625][T12174] input: syz1 as /devices/virtual/input/input28 [ 186.552807][ T6016] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 186.643271][T12183] kernel read not supported for file /policy (pid: 12183 comm: syz.1.1837) [ 186.670908][T12188] fuse: Bad value for 'user_id' [ 186.672474][T12188] fuse: Bad value for 'user_id' [ 186.753161][T12196] netlink: 'syz.2.1839': attribute type 39 has an invalid length. [ 186.767663][T12109] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.768526][ T6016] usb 12-1: USB disconnect, device number 12 [ 186.794386][T12109] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 186.804047][T12109] wireguard: wg0: Could not create IPv4 socket [ 186.809127][T12109] wireguard: wg1: Could not create IPv4 socket [ 186.812353][T12109] wireguard: wg2: Could not create IPv4 socket [ 186.873389][T12201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.893692][T12203] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1842'. [ 187.231378][T12218] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1846'. [ 187.235072][T12218] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1846'. [ 187.279992][T12218] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1846'. [ 187.352444][T12225] netlink: 'syz.2.1848': attribute type 10 has an invalid length. [ 187.355652][T12225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1848'. [ 187.369246][T12225] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.385367][T12229] program syz.1.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.669436][T12249] Failed to initialize the IGMP autojoin socket (err -2) [ 187.846537][ T5960] Bluetooth: hci0: command tx timeout [ 187.964709][T12265] tun0: tun_chr_ioctl cmd 1074025676 [ 187.966406][T12265] tun0: owner set to 0 [ 187.969283][T12267] tun0: tun_chr_ioctl cmd 1074025673 [ 187.971047][T12265] tun0: tun_chr_ioctl cmd 1074025676 [ 187.972722][T12265] tun0: owner set to 0 [ 188.347581][T12273] tmpfs: Bad value for 'mode' [ 188.621256][T12298] 9pnet_fd: Insufficient options for proto=fd [ 188.952175][T12319] fuse: Bad value for 'fd' [ 188.987196][T12323] netlink: 'syz.1.1880': attribute type 21 has an invalid length. [ 189.009634][T12319] binfmt_misc: register: failed to install interpreter file ./file0 [ 189.032207][T12323] openvswitch: netlink: Key type 9744 is out of range max 32 [ 189.130246][T12335] binder: 12334:12335 unknown command 0 [ 189.132045][T12335] binder: 12334:12335 ioctl c0306201 200000000300 returned -22 [ 189.219666][T12345] atomic_op ffff88802b150998 conn xmit_atomic 0000000000000000 [ 189.496574][ T836] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 189.658584][ T836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.662798][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.667485][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.671423][ T836] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.678110][ T836] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.681874][ T836] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.685090][ T836] usb 7-1: Manufacturer: syz [ 189.689590][ T836] usb 7-1: config 0 descriptor?? [ 189.883291][ T40] kauditd_printk_skb: 243 callbacks suppressed [ 189.883302][ T40] audit: type=1400 audit(1751827485.840:42820): avc: denied { read } for pid=12351 comm="syz.7.1890" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.890973][T12352] fuse: Unknown parameter 'euid' [ 189.893879][ T40] audit: type=1400 audit(1751827485.840:42821): avc: denied { open } for pid=12351 comm="syz.7.1890" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.896823][T12352] fuse: Unknown parameter '0x0000000000000004' [ 189.913798][ T40] audit: type=1400 audit(1751827485.870:42822): avc: denied { read } for pid=12351 comm="syz.7.1890" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.922217][ T40] audit: type=1400 audit(1751827485.870:42823): avc: denied { open } for pid=12351 comm="syz.7.1890" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.956560][ T836] rc_core: IR keymap rc-hauppauge not found [ 189.958577][ T836] Registered IR keymap rc-empty [ 189.960416][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 189.969900][ T40] audit: type=1400 audit(1751827485.930:42824): avc: denied { ioctl } for pid=12351 comm="syz.7.1890" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.977228][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 189.997336][ T836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 190.001920][ T836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input29 [ 190.007419][ T40] audit: type=1400 audit(1751827485.970:42825): avc: denied { read } for pid=5347 comm="acpid" name="event3" dev="devtmpfs" ino=3116 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.009457][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.014418][ T40] audit: type=1400 audit(1751827485.970:42826): avc: denied { open } for pid=5347 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3116 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.024239][ T40] audit: type=1400 audit(1751827485.970:42827): avc: denied { ioctl } for pid=5347 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3116 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.036560][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.056627][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.086605][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.106713][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.127134][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.146590][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.176673][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.196573][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.216561][ T836] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 190.237454][ T836] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 190.240279][ T836] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 190.244432][ T836] usb 7-1: USB disconnect, device number 32 [ 190.512972][ T40] audit: type=1400 audit(1751827486.470:42828): avc: denied { create } for pid=12362 comm="syz.7.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.520357][ T40] audit: type=1400 audit(1751827486.470:42829): avc: denied { write } for pid=12362 comm="syz.7.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.635609][T12370] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 190.637812][T12368] netfs: Couldn't get user pages (rc=-14) [ 190.736258][T12368] __nla_validate_parse: 5 callbacks suppressed [ 190.736269][T12368] netlink: 185940 bytes leftover after parsing attributes in process `syz.2.1895'. [ 190.834097][T12377] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 190.837373][T12377] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 192.082472][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.089179][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.093226][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.099301][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.103354][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.119994][T12409] Failed to initialize the IGMP autojoin socket (err -2) [ 192.404565][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1909'. [ 192.409387][T12413] nbd: illegal input index 1879048192 [ 192.451209][T12417] input: syz1 as /devices/virtual/input/input30 [ 192.778471][T12409] netdevsim netdevsim8 netdevsim0: renamed from eth15 [ 192.795309][T12409] netdevsim netdevsim8 netdevsim1: renamed from eth16 [ 192.806604][ T10] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 192.809331][T12409] netdevsim netdevsim8 netdevsim2: renamed from eth18 [ 192.824541][T12409] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 192.971915][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.975963][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.981481][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.985242][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.168821][T12409] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.177501][T12409] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 193.184085][T12409] wireguard: wg0: Could not create IPv4 socket [ 193.188992][T12409] wireguard: wg1: Could not create IPv4 socket [ 193.192459][T12409] wireguard: wg2: Could not create IPv4 socket [ 193.224661][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 193.226650][ T10] usbtmc 6-1:16.0: can't read capabilities [ 193.273266][T12459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.283522][T12459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.346214][T12462] input: syz0 as /devices/virtual/input/input31 [ 193.386015][T12467] autofs: Unknown parameter ':LoID.6Oc8!9#i 7 (-Z ;' [ 193.403758][T12469] geneve3: entered promiscuous mode [ 193.405425][T12469] geneve3: entered allmulticast mode [ 193.453470][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 193.526863][ T59] usb 6-1: USB disconnect, device number 25 [ 193.533490][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1926'. [ 193.627117][T12488] Failed to initialize the IGMP autojoin socket (err -2) [ 194.011215][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.013139][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.060686][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1935'. [ 194.152273][T12523] Failed to initialize the IGMP autojoin socket (err -2) [ 194.240961][T12534] Failed to initialize the IGMP autojoin socket (err -2) [ 194.342574][T12541] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 194.345204][T12541] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1941'. [ 194.936578][ T5954] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 195.029795][ T40] kauditd_printk_skb: 180 callbacks suppressed [ 195.029806][ T40] audit: type=1400 audit(1751827490.990:43010): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 195.066610][ T5954] usb 6-1: device descriptor read/64, error -71 [ 195.077318][ T40] audit: type=1400 audit(1751827491.040:43011): avc: denied { create } for pid=12569 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.083967][ T40] audit: type=1400 audit(1751827491.040:43012): avc: denied { getopt } for pid=12569 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.090346][ T40] audit: type=1400 audit(1751827491.040:43013): avc: denied { write } for pid=12569 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 195.096238][ T40] audit: type=1400 audit(1751827491.040:43014): avc: denied { view } for pid=12569 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 195.102565][ T40] audit: type=1400 audit(1751827491.040:43015): avc: denied { write } for pid=12569 comm="syz.2.1951" name="unix" dev="proc" ino=4026532990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 195.118400][ T40] audit: type=1400 audit(1751827491.080:43016): avc: denied { read } for pid=12572 comm="syz.2.1952" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.126005][ T40] audit: type=1400 audit(1751827491.080:43017): avc: denied { open } for pid=12572 comm="syz.2.1952" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.126021][T12573] geneve3: entered promiscuous mode [ 195.133807][ T40] audit: type=1400 audit(1751827491.080:43018): avc: denied { ioctl } for pid=12572 comm="syz.2.1952" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.136524][T12573] geneve3: entered allmulticast mode [ 195.250484][T12577] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 195.282915][ T40] audit: type=1400 audit(1751827491.240:43019): avc: denied { create } for pid=12581 comm="syz.2.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.327610][ T5954] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 195.466644][ T5954] usb 6-1: device descriptor read/64, error -71 [ 195.567867][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 195.589646][ T5954] usb usb6-port1: attempt power cycle [ 195.591130][T12594] random: crng reseeded on system resumption [ 195.716925][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 195.721132][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 195.725044][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.40 [ 195.728046][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.730520][ T9] usb 7-1: Product: င [ 195.731907][ T9] usb 7-1: Manufacturer: 㱠縫源⩞ᜅᡦ⃈쮄哄箤溉ཙ培绚賴㖅ꥨ∊๼혁৩檷讬ﯫퟄ痿蝮寅ໟ砠绒⚛࿂嘼᮲埮㶙郅␢힊๐꘵ኈ܀屘䴍椕啴ᓄ [ 195.737422][ T9] usb 7-1: SerialNumber: ㋁摺籗뭛痓䐐匷樅঺䱊ল惧뭞솙榧㿭㳯ꚶ퍿㨍Ҏ㘖珊튊➺꺍ꛆ쀧荋婼䜀㗪뾣₆੠㎈뚼塰ꖛ痸뉻햵 [ 195.926757][ T5954] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 195.947064][ T5954] usb 6-1: device descriptor read/8, error -71 [ 195.952572][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 195.954470][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 195.957955][ T9] usb 7-1: USB disconnect, device number 33 [ 196.206596][ T5954] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 196.213267][T12602] Malformed UNC in devname [ 196.213267][T12602] [ 196.215431][T12602] CIFS: VFS: Malformed UNC in devname [ 196.227155][ T5954] usb 6-1: device descriptor read/8, error -71 [ 196.346970][ T5954] usb usb6-port1: unable to enumerate USB device [ 196.628602][T12619] sock: sock_set_timeout: `syz.2.1969' (pid 12619) tries to set negative timeout [ 197.196678][ T6015] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 197.347915][ T6015] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.351559][ T6015] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 197.355019][ T6015] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.358587][ T6015] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.362596][ T6015] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.365418][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.369210][ T6015] usb 7-1: config 0 descriptor?? [ 197.372129][T12640] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.449481][T12651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1977'. [ 197.452366][T12651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1977'. [ 197.779544][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.781874][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.784130][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.786575][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.789009][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.791447][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.793774][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.796085][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.798813][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.801302][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.803624][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.806089][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.808515][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.810877][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.813202][ T6015] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 197.818469][ T6015] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.847397][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1982'. [ 197.861747][T12668] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 197.877480][T12668] bond5: entered promiscuous mode [ 197.879117][T12668] bond5: entered allmulticast mode [ 197.880973][T12668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.890539][T12668] bridge0: entered promiscuous mode [ 197.892649][T12668] bridge0: entered allmulticast mode [ 197.895516][T12668] bond5: (slave bridge0): Enslaving as a backup interface with an up link [ 197.904070][T12668] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1980'. [ 197.988269][ T8101] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.101257][ T8102] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.180744][ T6015] usb 7-1: USB disconnect, device number 34 [ 198.199450][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1985'. [ 198.479207][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.483494][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.486160][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.490280][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.494518][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.511680][T12691] Failed to initialize the IGMP autojoin socket (err -2) [ 198.650168][T12703] loop6: detected capacity change from 0 to 524287999 [ 198.663105][ T6015] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 198.671809][ T6015] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.797385][T12711] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 198.799988][T12711] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1993'. [ 198.804579][T12706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.993632][T12722] tmpfs: User quota block hardlimit too large. [ 199.102547][T12691] netdevsim netdevsim8 netdevsim0: renamed from eth15 [ 199.117274][T12691] netdevsim netdevsim8 netdevsim1: renamed from eth16 [ 199.134108][T12691] netdevsim netdevsim8 netdevsim2: renamed from eth18 [ 199.149255][T12731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.154770][T12691] netdevsim netdevsim8 netdevsim3: renamed from eth21 [ 199.156310][T12731] syz.2.2001: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 199.415076][T12758] netlink: 'syz.2.2006': attribute type 4 has an invalid length. [ 199.419139][T12758] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2006'. [ 199.449334][T12691] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.455953][T12691] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 199.465737][T12691] wireguard: wg0: Could not create IPv4 socket [ 199.468169][T12760] netlink: 'syz.2.2007': attribute type 10 has an invalid length. [ 199.474938][T12760] team0: Device hsr_slave_0 failed to register rx_handler [ 199.487918][T12691] wireguard: wg1: Could not create IPv4 socket [ 199.490981][T12691] wireguard: wg2: Could not create IPv4 socket [ 199.853000][T12782] netlink: 'syz.7.2013': attribute type 15 has an invalid length. [ 199.855537][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2013'. [ 199.993041][ T5955] block nbd2: Receive control failed (result -32) [ 200.027652][T12786] block nbd2: shutting down sockets [ 200.057994][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 200.058009][ T40] audit: type=1400 audit(1751827496.020:43153): avc: denied { write } for pid=12799 comm="syz.2.2018" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.095964][ T40] audit: type=1400 audit(1751827496.050:43154): avc: denied { create } for pid=12806 comm="syz.2.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.103213][ T40] audit: type=1400 audit(1751827496.060:43155): avc: denied { write } for pid=12806 comm="syz.2.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.103236][T12807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2021'. [ 200.114643][ T40] audit: type=1400 audit(1751827496.070:43156): avc: denied { write } for pid=12806 comm="syz.2.2021" path="socket:[57507]" dev="sockfs" ino=57507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.121930][ T40] audit: type=1400 audit(1751827496.080:43157): avc: denied { bpf } for pid=12810 comm="syz.7.2022" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.125503][ T6016] hid (null): report_id 2818010771 is invalid [ 200.128940][ T40] audit: type=1400 audit(1751827496.080:43158): avc: denied { read write } for pid=12806 comm="syz.2.2021" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 200.138159][ T40] audit: type=1400 audit(1751827496.080:43159): avc: denied { open } for pid=12806 comm="syz.2.2021" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 200.140049][ T6016] hid-generic F801:10001:0004.000C: unknown main item tag 0x3 [ 200.145078][ T40] audit: type=1400 audit(1751827496.080:43160): avc: denied { ioctl } for pid=12806 comm="syz.2.2021" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 200.153969][ T6016] hid-generic F801:10001:0004.000C: unknown main item tag 0x1 [ 200.159519][ T6016] hid-generic F801:10001:0004.000C: collection stack underflow [ 200.162378][ T6016] hid-generic F801:10001:0004.000C: item 0 1 0 12 parsing failed [ 200.165256][ T6016] hid-generic F801:10001:0004.000C: probe with driver hid-generic failed with error -22 [ 200.181981][ T40] audit: type=1400 audit(1751827496.140:43161): avc: denied { create } for pid=12812 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 200.191328][ T40] audit: type=1400 audit(1751827496.150:43162): avc: denied { write } for pid=12812 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 200.216397][T12817] openvswitch: netlink: Message has 4 unknown bytes. [ 200.249864][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'. [ 200.409146][T12845] input: syz1 as /devices/virtual/input/input32 [ 200.414433][T12845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12845 comm=syz.7.2034 [ 201.893867][T12871] Failed to initialize the IGMP autojoin socket (err -2) [ 201.949681][T12889] netlink: 'syz.7.2046': attribute type 1 has an invalid length. [ 201.972140][T12889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.997804][T12890] bond1: (slave geneve2): making interface the new active one [ 202.002927][T12890] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 202.244770][T12912] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 202.250470][T12912] netlink: 'syz.1.2051': attribute type 2 has an invalid length. [ 202.253496][T12912] nbd: must specify a device to reconfigure [ 202.319404][T12916] netlink: 'syz.1.2054': attribute type 2 has an invalid length. [ 202.323027][T12916] nbd: must specify a device to reconfigure [ 202.446578][ T6016] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 202.596530][ T6016] usb 7-1: Using ep0 maxpacket: 16 [ 202.600555][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 202.605171][ T6016] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 202.610706][ T6016] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 202.610866][T12930] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 202.614441][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.622665][ T6016] usb 7-1: config 0 descriptor?? [ 202.632936][T12930] bond6: entered promiscuous mode [ 202.634560][T12930] bond6: entered allmulticast mode [ 202.642302][T12930] geneve3: entered allmulticast mode [ 202.645435][T12930] bond6: (slave geneve3): Opening slave failed [ 202.690616][T12932] __nla_validate_parse: 4 callbacks suppressed [ 202.690628][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 202.699826][T12932] bond6: left promiscuous mode [ 202.701399][T12932] bond6: left allmulticast mode [ 202.703619][T12932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.739952][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2060'. [ 202.771768][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 202.826067][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.829356][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.832554][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.835430][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.839332][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.842077][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.844916][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.848121][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.851039][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.854154][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.861877][T12941] 9pnet: Could not find request transport:  [ 203.060549][T12910] random: crng reseeded on system resumption [ 203.064912][ T6016] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 203.068292][ T6016] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 203.070684][ T6016] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 203.072810][ T6016] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 203.074919][ T6016] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 203.079014][ T6016] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 203.098707][ T6016] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 203.101198][ T6016] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 203.156901][ T34] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 203.296663][ T34] usb 12-1: device descriptor read/64, error -71 [ 203.421069][T12971] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 203.437698][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 203.471232][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 203.546763][ T34] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 203.686568][ T34] usb 12-1: device descriptor read/64, error -71 [ 203.687809][T12988] efs: device does not support 512 byte blocks [ 203.691251][T12988] device does not support 512 byte blocks [ 203.691251][T12988] [ 203.796935][ T34] usb usb12-port1: attempt power cycle [ 204.146582][ T34] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 204.167000][ T34] usb 12-1: device descriptor read/8, error -71 [ 204.416602][ T34] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 204.437137][ T34] usb 12-1: device descriptor read/8, error -71 [ 204.547653][ T34] usb usb12-port1: unable to enumerate USB device [ 204.847555][T12999] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.849844][T12999] overlayfs: failed to set xattr on upper [ 204.851710][T12999] overlayfs: ...falling back to redirect_dir=nofollow. [ 204.853905][T12999] overlayfs: ...falling back to metacopy=off. [ 204.855886][T12999] overlayfs: ...falling back to index=off. [ 204.858877][T12999] overlayfs: ...falling back to uuid=null. [ 205.207098][ T6034] usb 7-1: USB disconnect, device number 35 [ 205.212594][ T6034] ------------[ cut here ]------------ [ 205.214318][ T6034] workqueue: work disable count underflowed [ 205.216199][ T6034] WARNING: CPU: 0 PID: 6034 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 205.218996][ T6034] Modules linked in: [ 205.220571][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 205.225897][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.229250][ T6034] Workqueue: usb_hub_wq hub_event [ 205.230859][ T6034] RIP: 0010:enable_work+0x2f8/0x340 [ 205.232509][ T6034] Code: 89 ee e8 2b 2d 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 32 38 00 c6 05 d2 d6 0d 0f 01 90 48 c7 c7 00 01 ac 8b e8 89 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 0f 9f 00 e9 aa fe ff ff [ 205.238418][ T6034] RSP: 0018:ffffc90003f8f3c8 EFLAGS: 00010086 [ 205.240313][ T6034] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae278 [ 205.242843][ T6034] RDX: ffff88802dd80000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 205.245283][ T6034] RBP: ffff88802bd46730 R08: 0000000000000001 R09: 0000000000000000 [ 205.247646][ T6034] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920007f1e7a [ 205.250119][ T6034] R13: 0000000000000000 R14: ffff88802bd46728 R15: ffffffff8fe68b40 [ 205.252637][ T6034] FS: 0000000000000000(0000) GS:ffff8880d6715000(0000) knlGS:0000000000000000 [ 205.255401][ T6034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.257463][ T6034] CR2: 00007ffe99ce6ed8 CR3: 000000004eb47000 CR4: 0000000000352ef0 [ 205.259957][ T6034] Call Trace: [ 205.261099][ T6034] [ 205.262042][ T6034] ? __pfx_enable_work+0x10/0x10 [ 205.263598][ T6034] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 205.265419][ T6034] __cancel_work_sync+0xe7/0x130 [ 205.266973][ T6034] thermal_zone_device_unregister+0x239/0x450 [ 205.268871][ T6034] ? __pfx_shield_remove+0x10/0x10 [ 205.270491][ T6034] power_supply_unregister+0x10a/0x150 [ 205.272192][ T6034] shield_remove+0x75/0x130 [ 205.273677][ T6034] ? __pfx_shield_remove+0x10/0x10 [ 205.275279][ T6034] hid_device_remove+0xce/0x260 [ 205.276816][ T6034] ? __pfx_hid_device_remove+0x10/0x10 [ 205.278515][ T6034] device_remove+0xc8/0x170 [ 205.279944][ T6034] device_release_driver_internal+0x44b/0x620 [ 205.281886][ T6034] bus_remove_device+0x22f/0x420 [ 205.283434][ T6034] device_del+0x396/0x9f0 [ 205.284813][ T6034] ? __pfx_device_del+0x10/0x10 [ 205.286400][ T6034] ? do_raw_spin_lock+0x12c/0x2b0 [ 205.287993][ T6034] hid_destroy_device+0x19c/0x240 [ 205.289644][ T6034] usbhid_disconnect+0xa0/0xe0 [ 205.291152][ T6034] usb_unbind_interface+0x1da/0x9a0 [ 205.292787][ T6034] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 205.294538][ T6034] ? __pfx_usb_unbind_interface+0x10/0x10 [ 205.296308][ T6034] device_remove+0x125/0x170 [ 205.297775][ T6034] device_release_driver_internal+0x44b/0x620 [ 205.299670][ T6034] bus_remove_device+0x22f/0x420 [ 205.301309][ T6034] device_del+0x396/0x9f0 [ 205.302674][ T6034] ? __pfx_device_del+0x10/0x10 [ 205.304204][ T6034] ? kobject_put+0x210/0x5a0 [ 205.305700][ T6034] usb_disable_device+0x355/0x7d0 [ 205.307276][ T6034] usb_disconnect+0x2e1/0x9c0 [ 205.308764][ T6034] hub_event+0x1c57/0x4fa0 [ 205.310192][ T6034] ? __lock_acquire+0xb8a/0x1c90 [ 205.311761][ T6034] ? __pfx_hub_event+0x10/0x10 [ 205.313304][ T6034] ? free_object_list.isra.0+0x1d0/0x2a0 [ 205.315043][ T6034] ? finish_task_switch.isra.0+0x221/0xc10 [ 205.316879][ T6034] ? rcu_is_watching+0x12/0xc0 [ 205.318358][ T6034] process_one_work+0x9cf/0x1b70 [ 205.319870][ T6034] ? __pfx_process_one_work+0x10/0x10 [ 205.321623][ T6034] ? assign_work+0x1a0/0x250 [ 205.323071][ T6034] worker_thread+0x6c8/0xf10 [ 205.324528][ T6034] ? __kthread_parkme+0x19e/0x250 [ 205.326112][ T6034] ? __pfx_worker_thread+0x10/0x10 [ 205.327717][ T6034] kthread+0x3c2/0x780 [ 205.329016][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.330483][ T6034] ? rcu_is_watching+0x12/0xc0 [ 205.331996][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.333451][ T6034] ret_from_fork+0x5d4/0x6f0 [ 205.334907][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.336377][ T6034] ret_from_fork_asm+0x1a/0x30 [ 205.337918][ T6034] [ 205.338908][ T6034] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.341247][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 205.344908][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.348206][ T6034] Workqueue: usb_hub_wq hub_event [ 205.349807][ T6034] Call Trace: [ 205.350876][ T6034] [ 205.351829][ T6034] dump_stack_lvl+0x3d/0x1f0 [ 205.353293][ T6034] panic+0x71c/0x800 [ 205.354538][ T6034] ? __pfx_panic+0x10/0x10 [ 205.355946][ T6034] ? show_trace_log_lvl+0x29b/0x3e0 [ 205.357586][ T6034] ? check_panic_on_warn+0x1f/0xb0 [ 205.359178][ T6034] ? enable_work+0x2f8/0x340 [ 205.360637][ T6034] check_panic_on_warn+0xab/0xb0 [ 205.362224][ T6034] __warn+0xf6/0x3c0 [ 205.363456][ T6034] ? enable_work+0x2f8/0x340 [ 205.365098][ T6034] report_bug+0x3c3/0x580 [ 205.366461][ T6034] ? enable_work+0x2f8/0x340 [ 205.367950][ T6034] handle_bug+0x184/0x210 [ 205.369329][ T6034] exc_invalid_op+0x17/0x50 [ 205.370771][ T6034] asm_exc_invalid_op+0x1a/0x20 [ 205.372355][ T6034] RIP: 0010:enable_work+0x2f8/0x340 [ 205.373984][ T6034] Code: 89 ee e8 2b 2d 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 32 38 00 c6 05 d2 d6 0d 0f 01 90 48 c7 c7 00 01 ac 8b e8 89 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 0f 9f 00 e9 aa fe ff ff [ 205.379855][ T6034] RSP: 0018:ffffc90003f8f3c8 EFLAGS: 00010086 [ 205.381813][ T6034] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae278 [ 205.384265][ T6034] RDX: ffff88802dd80000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 205.386716][ T6034] RBP: ffff88802bd46730 R08: 0000000000000001 R09: 0000000000000000 [ 205.389149][ T6034] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920007f1e7a [ 205.391593][ T6034] R13: 0000000000000000 R14: ffff88802bd46728 R15: ffffffff8fe68b40 [ 205.394027][ T6034] ? __warn_printk+0x198/0x350 [ 205.395528][ T6034] ? __warn_printk+0x1a5/0x350 [ 205.397041][ T6034] ? enable_work+0x2f7/0x340 [ 205.398525][ T6034] ? __pfx_enable_work+0x10/0x10 [ 205.400068][ T6034] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 205.401919][ T6034] __cancel_work_sync+0xe7/0x130 [ 205.403479][ T6034] thermal_zone_device_unregister+0x239/0x450 [ 205.405365][ T6034] ? __pfx_shield_remove+0x10/0x10 [ 205.406959][ T6034] power_supply_unregister+0x10a/0x150 [ 205.408663][ T6034] shield_remove+0x75/0x130 [ 205.410181][ T6034] ? __pfx_shield_remove+0x10/0x10 [ 205.411845][ T6034] hid_device_remove+0xce/0x260 [ 205.413373][ T6034] ? __pfx_hid_device_remove+0x10/0x10 [ 205.415094][ T6034] device_remove+0xc8/0x170 [ 205.416533][ T6034] device_release_driver_internal+0x44b/0x620 [ 205.418414][ T6034] bus_remove_device+0x22f/0x420 [ 205.420023][ T6034] device_del+0x396/0x9f0 [ 205.421461][ T6034] ? __pfx_device_del+0x10/0x10 [ 205.422991][ T6034] ? do_raw_spin_lock+0x12c/0x2b0 [ 205.424651][ T6034] hid_destroy_device+0x19c/0x240 [ 205.426222][ T6034] usbhid_disconnect+0xa0/0xe0 [ 205.427720][ T6034] usb_unbind_interface+0x1da/0x9a0 [ 205.429346][ T6034] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 205.431122][ T6034] ? __pfx_usb_unbind_interface+0x10/0x10 [ 205.432898][ T6034] device_remove+0x125/0x170 [ 205.434345][ T6034] device_release_driver_internal+0x44b/0x620 [ 205.436233][ T6034] bus_remove_device+0x22f/0x420 [ 205.437794][ T6034] device_del+0x396/0x9f0 [ 205.439154][ T6034] ? __pfx_device_del+0x10/0x10 [ 205.440706][ T6034] ? kobject_put+0x210/0x5a0 [ 205.442201][ T6034] usb_disable_device+0x355/0x7d0 [ 205.443778][ T6034] usb_disconnect+0x2e1/0x9c0 [ 205.445290][ T6034] hub_event+0x1c57/0x4fa0 [ 205.446717][ T6034] ? __lock_acquire+0xb8a/0x1c90 [ 205.448266][ T6034] ? __pfx_hub_event+0x10/0x10 [ 205.449796][ T6034] ? free_object_list.isra.0+0x1d0/0x2a0 [ 205.451542][ T6034] ? finish_task_switch.isra.0+0x221/0xc10 [ 205.453361][ T6034] ? rcu_is_watching+0x12/0xc0 [ 205.454859][ T6034] process_one_work+0x9cf/0x1b70 [ 205.456422][ T6034] ? __pfx_process_one_work+0x10/0x10 [ 205.458091][ T6034] ? assign_work+0x1a0/0x250 [ 205.459543][ T6034] worker_thread+0x6c8/0xf10 [ 205.461063][ T6034] ? __kthread_parkme+0x19e/0x250 [ 205.462644][ T6034] ? __pfx_worker_thread+0x10/0x10 [ 205.464238][ T6034] kthread+0x3c2/0x780 [ 205.465545][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.466993][ T6034] ? rcu_is_watching+0x12/0xc0 [ 205.468498][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.469969][ T6034] ret_from_fork+0x5d4/0x6f0 [ 205.471428][ T6034] ? __pfx_kthread+0x10/0x10 [ 205.472896][ T6034] ret_from_fork_asm+0x1a/0x30 [ 205.474406][ T6034] [ 205.475896][ T6034] Kernel Offset: disabled [ 205.477265][ T6034] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:40:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bed55 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc90003f8ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c52a0 R15=ffffffff855becf0 RIP=ffffffff855bed7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe99ce6ed8 CR3=000000004eb47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe99ce8780 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9eb411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001f1ff7 RBX=0000000000000001 RCX=ffffffff8b884c69 RDX=0000000000000000 RSI=ffffffff8de31763 RDI=ffffffff8c1588a0 RBP=ffffed1003bd1488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801de8a440 R14=ffffffff90a97650 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe9eb586520 CR3=000000003498f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000828 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe108 0280031800000350 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00201000060870c4 0008000610002010 00060670c4000800 0610002010000604 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70d00380041880a3 92fc080001000000 0806060113e80000 0002080603800308 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1802050004188183 92fa080001000000 0806060113de0808 0010033f482d3b08 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0807800307800400 0300100002100002 8004060074c40023 647261632f697264 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 18030785f4da0800 10030204000c0322 0400080340080000 0300040380030380 ZMM25=1344c7411344c741 1344c7411344c741 1344c7411344c741 1344c7411344c741 1344c7411344c741 1344c7411344c741 1344c7411344c741 1344c7411344c741 ZMM26=ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ab911eccab911ecc ZMM27=4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 4e6ba4364e6ba436 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 info registers vcpu 2 CPU#2 RAX=0000000000239563 RBX=0000000000000002 RCX=ffffffff8b884c69 RDX=0000000000000000 RSI=ffffffff8de31763 RDI=ffffffff8c1588a0 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a97650 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe3d208e58 CR3=0000000062c7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe48c820e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f086e811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001b7c11 RBX=0000000000000003 RCX=ffffffff8b884c69 RDX=0000000000000000 RSI=ffffffff8de31763 RDI=ffffffff8c1588a0 RBP=ffffed1003c54000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2a0000 R14=ffffffff90a97650 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055559033f808 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79984796dd76f36e b0f706cdd1611f54 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d13431f726443ed e41b9f85921a602c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a7c39ed681ef596 97de57488d1219c2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 297ca71ee6c53615 8dfaf7bfc614bc1b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000580 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d88bfff4a8f407c 0000007d00000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4933d0e0010f6b31 6eb9dfb6001bb456 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 012a645000000000 0000007d00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007d00000000 6eb8a7300000007d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 127ab9f0450e98e1 c3eee64bbcd927ed ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b0b109aa02e98ea 3087716a6db60c48 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000